Sep 6 00:13:57.925991 kernel: Linux version 5.15.190-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Fri Sep 5 22:53:38 -00 2025 Sep 6 00:13:57.926021 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=a807e3b6c1f608bcead7858f1ad5b6908e6d312e2d99c0ec0e5454f978e611a7 Sep 6 00:13:57.926035 kernel: BIOS-provided physical RAM map: Sep 6 00:13:57.926043 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Sep 6 00:13:57.926050 kernel: BIOS-e820: [mem 0x0000000000100000-0x00000000007fffff] usable Sep 6 00:13:57.926058 kernel: BIOS-e820: [mem 0x0000000000800000-0x0000000000807fff] ACPI NVS Sep 6 00:13:57.926067 kernel: BIOS-e820: [mem 0x0000000000808000-0x000000000080afff] usable Sep 6 00:13:57.926075 kernel: BIOS-e820: [mem 0x000000000080b000-0x000000000080bfff] ACPI NVS Sep 6 00:13:57.926083 kernel: BIOS-e820: [mem 0x000000000080c000-0x000000000080ffff] usable Sep 6 00:13:57.926093 kernel: BIOS-e820: [mem 0x0000000000810000-0x00000000008fffff] ACPI NVS Sep 6 00:13:57.926101 kernel: BIOS-e820: [mem 0x0000000000900000-0x000000009c8eefff] usable Sep 6 00:13:57.926108 kernel: BIOS-e820: [mem 0x000000009c8ef000-0x000000009cb6efff] reserved Sep 6 00:13:57.926116 kernel: BIOS-e820: [mem 0x000000009cb6f000-0x000000009cb7efff] ACPI data Sep 6 00:13:57.926124 kernel: BIOS-e820: [mem 0x000000009cb7f000-0x000000009cbfefff] ACPI NVS Sep 6 00:13:57.926134 kernel: BIOS-e820: [mem 0x000000009cbff000-0x000000009cf3ffff] usable Sep 6 00:13:57.926145 kernel: BIOS-e820: [mem 0x000000009cf40000-0x000000009cf5ffff] reserved Sep 6 00:13:57.926153 kernel: BIOS-e820: [mem 0x000000009cf60000-0x000000009cffffff] ACPI NVS Sep 6 00:13:57.926161 kernel: BIOS-e820: [mem 0x00000000b0000000-0x00000000bfffffff] reserved Sep 6 00:13:57.926173 kernel: NX (Execute Disable) protection: active Sep 6 00:13:57.926181 kernel: e820: update [mem 0x9b475018-0x9b47ec57] usable ==> usable Sep 6 00:13:57.926198 kernel: e820: update [mem 0x9b475018-0x9b47ec57] usable ==> usable Sep 6 00:13:57.926207 kernel: e820: update [mem 0x9b438018-0x9b474e57] usable ==> usable Sep 6 00:13:57.926216 kernel: e820: update [mem 0x9b438018-0x9b474e57] usable ==> usable Sep 6 00:13:57.926224 kernel: extended physical RAM map: Sep 6 00:13:57.926232 kernel: reserve setup_data: [mem 0x0000000000000000-0x000000000009ffff] usable Sep 6 00:13:57.926243 kernel: reserve setup_data: [mem 0x0000000000100000-0x00000000007fffff] usable Sep 6 00:13:57.926251 kernel: reserve setup_data: [mem 0x0000000000800000-0x0000000000807fff] ACPI NVS Sep 6 00:13:57.926260 kernel: reserve setup_data: [mem 0x0000000000808000-0x000000000080afff] usable Sep 6 00:13:57.926268 kernel: reserve setup_data: [mem 0x000000000080b000-0x000000000080bfff] ACPI NVS Sep 6 00:13:57.926277 kernel: reserve setup_data: [mem 0x000000000080c000-0x000000000080ffff] usable Sep 6 00:13:57.926286 kernel: reserve setup_data: [mem 0x0000000000810000-0x00000000008fffff] ACPI NVS Sep 6 00:13:57.926295 kernel: reserve setup_data: [mem 0x0000000000900000-0x000000009b438017] usable Sep 6 00:13:57.926303 kernel: reserve setup_data: [mem 0x000000009b438018-0x000000009b474e57] usable Sep 6 00:13:57.926311 kernel: reserve setup_data: [mem 0x000000009b474e58-0x000000009b475017] usable Sep 6 00:13:57.926319 kernel: reserve setup_data: [mem 0x000000009b475018-0x000000009b47ec57] usable Sep 6 00:13:57.926327 kernel: reserve setup_data: [mem 0x000000009b47ec58-0x000000009c8eefff] usable Sep 6 00:13:57.926337 kernel: reserve setup_data: [mem 0x000000009c8ef000-0x000000009cb6efff] reserved Sep 6 00:13:57.926344 kernel: reserve setup_data: [mem 0x000000009cb6f000-0x000000009cb7efff] ACPI data Sep 6 00:13:57.926351 kernel: reserve setup_data: [mem 0x000000009cb7f000-0x000000009cbfefff] ACPI NVS Sep 6 00:13:57.926359 kernel: reserve setup_data: [mem 0x000000009cbff000-0x000000009cf3ffff] usable Sep 6 00:13:57.926371 kernel: reserve setup_data: [mem 0x000000009cf40000-0x000000009cf5ffff] reserved Sep 6 00:13:57.926380 kernel: reserve setup_data: [mem 0x000000009cf60000-0x000000009cffffff] ACPI NVS Sep 6 00:13:57.926388 kernel: reserve setup_data: [mem 0x00000000b0000000-0x00000000bfffffff] reserved Sep 6 00:13:57.926398 kernel: efi: EFI v2.70 by EDK II Sep 6 00:13:57.926407 kernel: efi: SMBIOS=0x9c9ab000 ACPI=0x9cb7e000 ACPI 2.0=0x9cb7e014 MEMATTR=0x9b673018 RNG=0x9cb73018 Sep 6 00:13:57.926415 kernel: random: crng init done Sep 6 00:13:57.926424 kernel: SMBIOS 2.8 present. Sep 6 00:13:57.926433 kernel: DMI: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015 Sep 6 00:13:57.926441 kernel: Hypervisor detected: KVM Sep 6 00:13:57.926449 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Sep 6 00:13:57.926457 kernel: kvm-clock: cpu 0, msr 6119f001, primary cpu clock Sep 6 00:13:57.926466 kernel: kvm-clock: using sched offset of 8616410502 cycles Sep 6 00:13:57.926481 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Sep 6 00:13:57.926490 kernel: tsc: Detected 2794.750 MHz processor Sep 6 00:13:57.926499 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Sep 6 00:13:57.926508 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Sep 6 00:13:57.926518 kernel: last_pfn = 0x9cf40 max_arch_pfn = 0x400000000 Sep 6 00:13:57.926527 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Sep 6 00:13:57.926536 kernel: Using GB pages for direct mapping Sep 6 00:13:57.926545 kernel: Secure boot disabled Sep 6 00:13:57.926554 kernel: ACPI: Early table checksum verification disabled Sep 6 00:13:57.926564 kernel: ACPI: RSDP 0x000000009CB7E014 000024 (v02 BOCHS ) Sep 6 00:13:57.926573 kernel: ACPI: XSDT 0x000000009CB7D0E8 000054 (v01 BOCHS BXPC 00000001 01000013) Sep 6 00:13:57.926582 kernel: ACPI: FACP 0x000000009CB79000 0000F4 (v03 BOCHS BXPC 00000001 BXPC 00000001) Sep 6 00:13:57.926591 kernel: ACPI: DSDT 0x000000009CB7A000 0021BA (v01 BOCHS BXPC 00000001 BXPC 00000001) Sep 6 00:13:57.926603 kernel: ACPI: FACS 0x000000009CBDD000 000040 Sep 6 00:13:57.926613 kernel: ACPI: APIC 0x000000009CB78000 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Sep 6 00:13:57.926621 kernel: ACPI: HPET 0x000000009CB77000 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Sep 6 00:13:57.926633 kernel: ACPI: MCFG 0x000000009CB76000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Sep 6 00:13:57.926642 kernel: ACPI: WAET 0x000000009CB75000 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Sep 6 00:13:57.926654 kernel: ACPI: BGRT 0x000000009CB74000 000038 (v01 INTEL EDK2 00000002 01000013) Sep 6 00:13:57.926663 kernel: ACPI: Reserving FACP table memory at [mem 0x9cb79000-0x9cb790f3] Sep 6 00:13:57.926672 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cb7a000-0x9cb7c1b9] Sep 6 00:13:57.926680 kernel: ACPI: Reserving FACS table memory at [mem 0x9cbdd000-0x9cbdd03f] Sep 6 00:13:57.926689 kernel: ACPI: Reserving APIC table memory at [mem 0x9cb78000-0x9cb7808f] Sep 6 00:13:57.926698 kernel: ACPI: Reserving HPET table memory at [mem 0x9cb77000-0x9cb77037] Sep 6 00:13:57.926707 kernel: ACPI: Reserving MCFG table memory at [mem 0x9cb76000-0x9cb7603b] Sep 6 00:13:57.926716 kernel: ACPI: Reserving WAET table memory at [mem 0x9cb75000-0x9cb75027] Sep 6 00:13:57.926725 kernel: ACPI: Reserving BGRT table memory at [mem 0x9cb74000-0x9cb74037] Sep 6 00:13:57.926736 kernel: No NUMA configuration found Sep 6 00:13:57.926745 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cf3ffff] Sep 6 00:13:57.926754 kernel: NODE_DATA(0) allocated [mem 0x9cea6000-0x9ceabfff] Sep 6 00:13:57.926762 kernel: Zone ranges: Sep 6 00:13:57.926771 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Sep 6 00:13:57.926780 kernel: DMA32 [mem 0x0000000001000000-0x000000009cf3ffff] Sep 6 00:13:57.926788 kernel: Normal empty Sep 6 00:13:57.926796 kernel: Movable zone start for each node Sep 6 00:13:57.926805 kernel: Early memory node ranges Sep 6 00:13:57.926816 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Sep 6 00:13:57.926824 kernel: node 0: [mem 0x0000000000100000-0x00000000007fffff] Sep 6 00:13:57.926832 kernel: node 0: [mem 0x0000000000808000-0x000000000080afff] Sep 6 00:13:57.926841 kernel: node 0: [mem 0x000000000080c000-0x000000000080ffff] Sep 6 00:13:57.926849 kernel: node 0: [mem 0x0000000000900000-0x000000009c8eefff] Sep 6 00:13:57.926857 kernel: node 0: [mem 0x000000009cbff000-0x000000009cf3ffff] Sep 6 00:13:57.926865 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cf3ffff] Sep 6 00:13:57.926874 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Sep 6 00:13:57.926883 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Sep 6 00:13:57.926891 kernel: On node 0, zone DMA: 8 pages in unavailable ranges Sep 6 00:13:57.926902 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Sep 6 00:13:57.926911 kernel: On node 0, zone DMA: 240 pages in unavailable ranges Sep 6 00:13:57.926920 kernel: On node 0, zone DMA32: 784 pages in unavailable ranges Sep 6 00:13:57.926930 kernel: On node 0, zone DMA32: 12480 pages in unavailable ranges Sep 6 00:13:57.926939 kernel: ACPI: PM-Timer IO Port: 0x608 Sep 6 00:13:57.926948 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Sep 6 00:13:57.926956 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Sep 6 00:13:57.926964 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Sep 6 00:13:57.926986 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Sep 6 00:13:57.926998 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Sep 6 00:13:57.927006 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Sep 6 00:13:57.927015 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Sep 6 00:13:57.927027 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Sep 6 00:13:57.927038 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Sep 6 00:13:57.927046 kernel: TSC deadline timer available Sep 6 00:13:57.927055 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Sep 6 00:13:57.927063 kernel: kvm-guest: KVM setup pv remote TLB flush Sep 6 00:13:57.927072 kernel: kvm-guest: setup PV sched yield Sep 6 00:13:57.927082 kernel: [mem 0xc0000000-0xffffffff] available for PCI devices Sep 6 00:13:57.927091 kernel: Booting paravirtualized kernel on KVM Sep 6 00:13:57.927107 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Sep 6 00:13:57.927119 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Sep 6 00:13:57.927128 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u524288 Sep 6 00:13:57.927137 kernel: pcpu-alloc: s188696 r8192 d32488 u524288 alloc=1*2097152 Sep 6 00:13:57.927146 kernel: pcpu-alloc: [0] 0 1 2 3 Sep 6 00:13:57.927155 kernel: kvm-guest: setup async PF for cpu 0 Sep 6 00:13:57.927164 kernel: kvm-guest: stealtime: cpu 0, msr 9b21c0c0 Sep 6 00:13:57.927173 kernel: kvm-guest: PV spinlocks enabled Sep 6 00:13:57.927182 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Sep 6 00:13:57.927203 kernel: Built 1 zonelists, mobility grouping on. Total pages: 629759 Sep 6 00:13:57.927212 kernel: Policy zone: DMA32 Sep 6 00:13:57.927222 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=a807e3b6c1f608bcead7858f1ad5b6908e6d312e2d99c0ec0e5454f978e611a7 Sep 6 00:13:57.927232 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Sep 6 00:13:57.927241 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Sep 6 00:13:57.927253 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Sep 6 00:13:57.927262 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Sep 6 00:13:57.927271 kernel: Memory: 2397432K/2567000K available (12295K kernel code, 2276K rwdata, 13732K rodata, 47492K init, 4088K bss, 169308K reserved, 0K cma-reserved) Sep 6 00:13:57.927281 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Sep 6 00:13:57.927290 kernel: ftrace: allocating 34612 entries in 136 pages Sep 6 00:13:57.927299 kernel: ftrace: allocated 136 pages with 2 groups Sep 6 00:13:57.927308 kernel: rcu: Hierarchical RCU implementation. Sep 6 00:13:57.927318 kernel: rcu: RCU event tracing is enabled. Sep 6 00:13:57.927329 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Sep 6 00:13:57.927338 kernel: Rude variant of Tasks RCU enabled. Sep 6 00:13:57.927348 kernel: Tracing variant of Tasks RCU enabled. Sep 6 00:13:57.927357 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Sep 6 00:13:57.927366 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Sep 6 00:13:57.927375 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Sep 6 00:13:57.927384 kernel: Console: colour dummy device 80x25 Sep 6 00:13:57.927393 kernel: printk: console [ttyS0] enabled Sep 6 00:13:57.927402 kernel: ACPI: Core revision 20210730 Sep 6 00:13:57.927411 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Sep 6 00:13:57.927422 kernel: APIC: Switch to symmetric I/O mode setup Sep 6 00:13:57.927431 kernel: x2apic enabled Sep 6 00:13:57.927440 kernel: Switched APIC routing to physical x2apic. Sep 6 00:13:57.927449 kernel: kvm-guest: setup PV IPIs Sep 6 00:13:57.927457 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Sep 6 00:13:57.927465 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Sep 6 00:13:57.927474 kernel: Calibrating delay loop (skipped) preset value.. 5589.50 BogoMIPS (lpj=2794750) Sep 6 00:13:57.927482 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Sep 6 00:13:57.927494 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Sep 6 00:13:57.927505 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Sep 6 00:13:57.927514 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Sep 6 00:13:57.927523 kernel: Spectre V2 : Mitigation: Retpolines Sep 6 00:13:57.927533 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT Sep 6 00:13:57.927542 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Sep 6 00:13:57.927552 kernel: active return thunk: retbleed_return_thunk Sep 6 00:13:57.927561 kernel: RETBleed: Mitigation: untrained return thunk Sep 6 00:13:57.927573 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Sep 6 00:13:57.927585 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Sep 6 00:13:57.927595 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Sep 6 00:13:57.927604 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Sep 6 00:13:57.927614 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Sep 6 00:13:57.927624 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Sep 6 00:13:57.927634 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Sep 6 00:13:57.927643 kernel: Freeing SMP alternatives memory: 32K Sep 6 00:13:57.927653 kernel: pid_max: default: 32768 minimum: 301 Sep 6 00:13:57.927662 kernel: LSM: Security Framework initializing Sep 6 00:13:57.927673 kernel: SELinux: Initializing. Sep 6 00:13:57.927683 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Sep 6 00:13:57.927693 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Sep 6 00:13:57.927703 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Sep 6 00:13:57.927713 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Sep 6 00:13:57.927722 kernel: ... version: 0 Sep 6 00:13:57.927731 kernel: ... bit width: 48 Sep 6 00:13:57.927741 kernel: ... generic registers: 6 Sep 6 00:13:57.927750 kernel: ... value mask: 0000ffffffffffff Sep 6 00:13:57.927762 kernel: ... max period: 00007fffffffffff Sep 6 00:13:57.927771 kernel: ... fixed-purpose events: 0 Sep 6 00:13:57.927781 kernel: ... event mask: 000000000000003f Sep 6 00:13:57.927791 kernel: signal: max sigframe size: 1776 Sep 6 00:13:57.927800 kernel: rcu: Hierarchical SRCU implementation. Sep 6 00:13:57.927810 kernel: smp: Bringing up secondary CPUs ... Sep 6 00:13:57.927820 kernel: x86: Booting SMP configuration: Sep 6 00:13:57.927829 kernel: .... node #0, CPUs: #1 Sep 6 00:13:57.927839 kernel: kvm-clock: cpu 1, msr 6119f041, secondary cpu clock Sep 6 00:13:57.927849 kernel: kvm-guest: setup async PF for cpu 1 Sep 6 00:13:57.927860 kernel: kvm-guest: stealtime: cpu 1, msr 9b29c0c0 Sep 6 00:13:57.927870 kernel: #2 Sep 6 00:13:57.927879 kernel: kvm-clock: cpu 2, msr 6119f081, secondary cpu clock Sep 6 00:13:57.927888 kernel: kvm-guest: setup async PF for cpu 2 Sep 6 00:13:57.927897 kernel: kvm-guest: stealtime: cpu 2, msr 9b31c0c0 Sep 6 00:13:57.927906 kernel: #3 Sep 6 00:13:57.927914 kernel: kvm-clock: cpu 3, msr 6119f0c1, secondary cpu clock Sep 6 00:13:57.927923 kernel: kvm-guest: setup async PF for cpu 3 Sep 6 00:13:57.927932 kernel: kvm-guest: stealtime: cpu 3, msr 9b39c0c0 Sep 6 00:13:57.927947 kernel: smp: Brought up 1 node, 4 CPUs Sep 6 00:13:57.927955 kernel: smpboot: Max logical packages: 1 Sep 6 00:13:57.927964 kernel: smpboot: Total of 4 processors activated (22358.00 BogoMIPS) Sep 6 00:13:57.927984 kernel: devtmpfs: initialized Sep 6 00:13:57.927993 kernel: x86/mm: Memory block size: 128MB Sep 6 00:13:57.928003 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x00800000-0x00807fff] (32768 bytes) Sep 6 00:13:57.928012 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x0080b000-0x0080bfff] (4096 bytes) Sep 6 00:13:57.928021 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x00810000-0x008fffff] (983040 bytes) Sep 6 00:13:57.928029 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x9cb7f000-0x9cbfefff] (524288 bytes) Sep 6 00:13:57.928041 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x9cf60000-0x9cffffff] (655360 bytes) Sep 6 00:13:57.928050 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Sep 6 00:13:57.928059 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Sep 6 00:13:57.928068 kernel: pinctrl core: initialized pinctrl subsystem Sep 6 00:13:57.928077 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Sep 6 00:13:57.928085 kernel: audit: initializing netlink subsys (disabled) Sep 6 00:13:57.928094 kernel: thermal_sys: Registered thermal governor 'step_wise' Sep 6 00:13:57.928103 kernel: thermal_sys: Registered thermal governor 'user_space' Sep 6 00:13:57.928112 kernel: audit: type=2000 audit(1757117635.540:1): state=initialized audit_enabled=0 res=1 Sep 6 00:13:57.928123 kernel: cpuidle: using governor menu Sep 6 00:13:57.928131 kernel: ACPI: bus type PCI registered Sep 6 00:13:57.928140 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Sep 6 00:13:57.928149 kernel: dca service started, version 1.12.1 Sep 6 00:13:57.928158 kernel: PCI: MMCONFIG for domain 0000 [bus 00-ff] at [mem 0xb0000000-0xbfffffff] (base 0xb0000000) Sep 6 00:13:57.928167 kernel: PCI: MMCONFIG at [mem 0xb0000000-0xbfffffff] reserved in E820 Sep 6 00:13:57.928175 kernel: PCI: Using configuration type 1 for base access Sep 6 00:13:57.928184 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Sep 6 00:13:57.929953 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Sep 6 00:13:57.929984 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Sep 6 00:13:57.929994 kernel: ACPI: Added _OSI(Module Device) Sep 6 00:13:57.930004 kernel: ACPI: Added _OSI(Processor Device) Sep 6 00:13:57.930014 kernel: ACPI: Added _OSI(Processor Aggregator Device) Sep 6 00:13:57.930024 kernel: ACPI: Added _OSI(Linux-Dell-Video) Sep 6 00:13:57.930034 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Sep 6 00:13:57.930044 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Sep 6 00:13:57.930053 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Sep 6 00:13:57.930064 kernel: ACPI: Interpreter enabled Sep 6 00:13:57.930076 kernel: ACPI: PM: (supports S0 S3 S5) Sep 6 00:13:57.930086 kernel: ACPI: Using IOAPIC for interrupt routing Sep 6 00:13:57.930096 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Sep 6 00:13:57.930106 kernel: ACPI: Enabled 2 GPEs in block 00 to 3F Sep 6 00:13:57.930116 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Sep 6 00:13:57.930360 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Sep 6 00:13:57.930476 kernel: acpi PNP0A08:00: _OSC: platform does not support [PCIeHotplug LTR] Sep 6 00:13:57.930575 kernel: acpi PNP0A08:00: _OSC: OS now controls [PME AER PCIeCapability] Sep 6 00:13:57.930587 kernel: PCI host bridge to bus 0000:00 Sep 6 00:13:57.930701 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Sep 6 00:13:57.930777 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Sep 6 00:13:57.930850 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Sep 6 00:13:57.930922 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xafffffff window] Sep 6 00:13:57.931147 kernel: pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] Sep 6 00:13:57.931237 kernel: pci_bus 0000:00: root bus resource [mem 0x800000000-0xfffffffff window] Sep 6 00:13:57.931321 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Sep 6 00:13:57.931459 kernel: pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 Sep 6 00:13:57.931613 kernel: pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 Sep 6 00:13:57.931723 kernel: pci 0000:00:01.0: reg 0x10: [mem 0xc0000000-0xc0ffffff pref] Sep 6 00:13:57.931834 kernel: pci 0000:00:01.0: reg 0x18: [mem 0xc1044000-0xc1044fff] Sep 6 00:13:57.931942 kernel: pci 0000:00:01.0: reg 0x30: [mem 0xffff0000-0xffffffff pref] Sep 6 00:13:57.932087 kernel: pci 0000:00:01.0: BAR 0: assigned to efifb Sep 6 00:13:57.932395 kernel: pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Sep 6 00:13:57.932561 kernel: pci 0000:00:02.0: [1af4:1005] type 00 class 0x00ff00 Sep 6 00:13:57.932682 kernel: pci 0000:00:02.0: reg 0x10: [io 0x6100-0x611f] Sep 6 00:13:57.932792 kernel: pci 0000:00:02.0: reg 0x14: [mem 0xc1043000-0xc1043fff] Sep 6 00:13:57.932901 kernel: pci 0000:00:02.0: reg 0x20: [mem 0x800000000-0x800003fff 64bit pref] Sep 6 00:13:57.933038 kernel: pci 0000:00:03.0: [1af4:1001] type 00 class 0x010000 Sep 6 00:13:57.933141 kernel: pci 0000:00:03.0: reg 0x10: [io 0x6000-0x607f] Sep 6 00:13:57.934221 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xc1042000-0xc1042fff] Sep 6 00:13:57.934331 kernel: pci 0000:00:03.0: reg 0x20: [mem 0x800004000-0x800007fff 64bit pref] Sep 6 00:13:57.934454 kernel: pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 Sep 6 00:13:57.934556 kernel: pci 0000:00:04.0: reg 0x10: [io 0x60e0-0x60ff] Sep 6 00:13:57.934667 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xc1041000-0xc1041fff] Sep 6 00:13:57.934774 kernel: pci 0000:00:04.0: reg 0x20: [mem 0x800008000-0x80000bfff 64bit pref] Sep 6 00:13:57.934873 kernel: pci 0000:00:04.0: reg 0x30: [mem 0xfffc0000-0xffffffff pref] Sep 6 00:13:57.935007 kernel: pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 Sep 6 00:13:57.935110 kernel: pci 0000:00:1f.0: quirk: [io 0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO Sep 6 00:13:57.935664 kernel: pci 0000:00:1f.2: [8086:2922] type 00 class 0x010601 Sep 6 00:13:57.935774 kernel: pci 0000:00:1f.2: reg 0x20: [io 0x60c0-0x60df] Sep 6 00:13:57.935875 kernel: pci 0000:00:1f.2: reg 0x24: [mem 0xc1040000-0xc1040fff] Sep 6 00:13:57.936028 kernel: pci 0000:00:1f.3: [8086:2930] type 00 class 0x0c0500 Sep 6 00:13:57.936133 kernel: pci 0000:00:1f.3: reg 0x20: [io 0x6080-0x60bf] Sep 6 00:13:57.936148 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Sep 6 00:13:57.936158 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Sep 6 00:13:57.936168 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Sep 6 00:13:57.936179 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Sep 6 00:13:57.936198 kernel: ACPI: PCI: Interrupt link LNKE configured for IRQ 10 Sep 6 00:13:57.936208 kernel: ACPI: PCI: Interrupt link LNKF configured for IRQ 10 Sep 6 00:13:57.936232 kernel: ACPI: PCI: Interrupt link LNKG configured for IRQ 11 Sep 6 00:13:57.936242 kernel: ACPI: PCI: Interrupt link LNKH configured for IRQ 11 Sep 6 00:13:57.936252 kernel: ACPI: PCI: Interrupt link GSIA configured for IRQ 16 Sep 6 00:13:57.936262 kernel: ACPI: PCI: Interrupt link GSIB configured for IRQ 17 Sep 6 00:13:57.936272 kernel: ACPI: PCI: Interrupt link GSIC configured for IRQ 18 Sep 6 00:13:57.936282 kernel: ACPI: PCI: Interrupt link GSID configured for IRQ 19 Sep 6 00:13:57.936291 kernel: ACPI: PCI: Interrupt link GSIE configured for IRQ 20 Sep 6 00:13:57.936301 kernel: ACPI: PCI: Interrupt link GSIF configured for IRQ 21 Sep 6 00:13:57.936310 kernel: ACPI: PCI: Interrupt link GSIG configured for IRQ 22 Sep 6 00:13:57.936322 kernel: ACPI: PCI: Interrupt link GSIH configured for IRQ 23 Sep 6 00:13:57.936331 kernel: iommu: Default domain type: Translated Sep 6 00:13:57.936340 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Sep 6 00:13:57.936447 kernel: pci 0000:00:01.0: vgaarb: setting as boot VGA device Sep 6 00:13:57.936548 kernel: pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Sep 6 00:13:57.936661 kernel: pci 0000:00:01.0: vgaarb: bridge control possible Sep 6 00:13:57.936676 kernel: vgaarb: loaded Sep 6 00:13:57.936686 kernel: pps_core: LinuxPPS API ver. 1 registered Sep 6 00:13:57.936696 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Sep 6 00:13:57.936710 kernel: PTP clock support registered Sep 6 00:13:57.936720 kernel: Registered efivars operations Sep 6 00:13:57.936730 kernel: PCI: Using ACPI for IRQ routing Sep 6 00:13:57.936740 kernel: PCI: pci_cache_line_size set to 64 bytes Sep 6 00:13:57.936751 kernel: e820: reserve RAM buffer [mem 0x0080b000-0x008fffff] Sep 6 00:13:57.936761 kernel: e820: reserve RAM buffer [mem 0x00810000-0x008fffff] Sep 6 00:13:57.936770 kernel: e820: reserve RAM buffer [mem 0x9b438018-0x9bffffff] Sep 6 00:13:57.936780 kernel: e820: reserve RAM buffer [mem 0x9b475018-0x9bffffff] Sep 6 00:13:57.936790 kernel: e820: reserve RAM buffer [mem 0x9c8ef000-0x9fffffff] Sep 6 00:13:57.936801 kernel: e820: reserve RAM buffer [mem 0x9cf40000-0x9fffffff] Sep 6 00:13:57.936814 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Sep 6 00:13:57.936824 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Sep 6 00:13:57.936834 kernel: clocksource: Switched to clocksource kvm-clock Sep 6 00:13:57.936844 kernel: VFS: Disk quotas dquot_6.6.0 Sep 6 00:13:57.936855 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Sep 6 00:13:57.936865 kernel: pnp: PnP ACPI init Sep 6 00:13:57.937010 kernel: system 00:05: [mem 0xb0000000-0xbfffffff window] has been reserved Sep 6 00:13:57.937031 kernel: pnp: PnP ACPI: found 6 devices Sep 6 00:13:57.937042 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Sep 6 00:13:57.937052 kernel: NET: Registered PF_INET protocol family Sep 6 00:13:57.937061 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Sep 6 00:13:57.937070 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Sep 6 00:13:57.937080 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Sep 6 00:13:57.937090 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Sep 6 00:13:57.937099 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Sep 6 00:13:57.937109 kernel: TCP: Hash tables configured (established 32768 bind 32768) Sep 6 00:13:57.937122 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Sep 6 00:13:57.937131 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Sep 6 00:13:57.937141 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Sep 6 00:13:57.937151 kernel: NET: Registered PF_XDP protocol family Sep 6 00:13:57.939346 kernel: pci 0000:00:04.0: can't claim BAR 6 [mem 0xfffc0000-0xffffffff pref]: no compatible bridge window Sep 6 00:13:57.939463 kernel: pci 0000:00:04.0: BAR 6: assigned [mem 0x9d000000-0x9d03ffff pref] Sep 6 00:13:57.939563 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Sep 6 00:13:57.939659 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Sep 6 00:13:57.939760 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Sep 6 00:13:57.939849 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xafffffff window] Sep 6 00:13:57.939936 kernel: pci_bus 0000:00: resource 8 [mem 0xc0000000-0xfebfffff window] Sep 6 00:13:57.940040 kernel: pci_bus 0000:00: resource 9 [mem 0x800000000-0xfffffffff window] Sep 6 00:13:57.940055 kernel: PCI: CLS 0 bytes, default 64 Sep 6 00:13:57.940065 kernel: Initialise system trusted keyrings Sep 6 00:13:57.940076 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Sep 6 00:13:57.940086 kernel: Key type asymmetric registered Sep 6 00:13:57.940096 kernel: Asymmetric key parser 'x509' registered Sep 6 00:13:57.940109 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Sep 6 00:13:57.940120 kernel: io scheduler mq-deadline registered Sep 6 00:13:57.940143 kernel: io scheduler kyber registered Sep 6 00:13:57.940156 kernel: io scheduler bfq registered Sep 6 00:13:57.940166 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Sep 6 00:13:57.940178 kernel: ACPI: \_SB_.GSIG: Enabled at IRQ 22 Sep 6 00:13:57.940201 kernel: ACPI: \_SB_.GSIH: Enabled at IRQ 23 Sep 6 00:13:57.940212 kernel: ACPI: \_SB_.GSIE: Enabled at IRQ 20 Sep 6 00:13:57.940223 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Sep 6 00:13:57.940236 kernel: 00:03: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Sep 6 00:13:57.940247 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Sep 6 00:13:57.940258 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Sep 6 00:13:57.940269 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Sep 6 00:13:57.940629 kernel: rtc_cmos 00:04: RTC can wake from S4 Sep 6 00:13:57.940647 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Sep 6 00:13:57.940737 kernel: rtc_cmos 00:04: registered as rtc0 Sep 6 00:13:57.940825 kernel: rtc_cmos 00:04: setting system clock to 2025-09-06T00:13:56 UTC (1757117636) Sep 6 00:13:57.940916 kernel: rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Sep 6 00:13:57.940930 kernel: efifb: probing for efifb Sep 6 00:13:57.940940 kernel: efifb: framebuffer at 0xc0000000, using 4000k, total 4000k Sep 6 00:13:57.940950 kernel: efifb: mode is 1280x800x32, linelength=5120, pages=1 Sep 6 00:13:57.940960 kernel: efifb: scrolling: redraw Sep 6 00:13:57.940970 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Sep 6 00:13:57.940996 kernel: Console: switching to colour frame buffer device 160x50 Sep 6 00:13:57.941006 kernel: fb0: EFI VGA frame buffer device Sep 6 00:13:57.941016 kernel: pstore: Registered efi as persistent store backend Sep 6 00:13:57.941030 kernel: NET: Registered PF_INET6 protocol family Sep 6 00:13:57.941040 kernel: Segment Routing with IPv6 Sep 6 00:13:57.941051 kernel: In-situ OAM (IOAM) with IPv6 Sep 6 00:13:57.941064 kernel: NET: Registered PF_PACKET protocol family Sep 6 00:13:57.941075 kernel: Key type dns_resolver registered Sep 6 00:13:57.941088 kernel: IPI shorthand broadcast: enabled Sep 6 00:13:57.941098 kernel: sched_clock: Marking stable (1320493114, 165437420)->(1592775935, -106845401) Sep 6 00:13:57.941109 kernel: registered taskstats version 1 Sep 6 00:13:57.941119 kernel: Loading compiled-in X.509 certificates Sep 6 00:13:57.941130 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.190-flatcar: 59a3efd48c75422889eb056cb9758fbe471623cb' Sep 6 00:13:57.941140 kernel: Key type .fscrypt registered Sep 6 00:13:57.941150 kernel: Key type fscrypt-provisioning registered Sep 6 00:13:57.941161 kernel: pstore: Using crash dump compression: deflate Sep 6 00:13:57.941171 kernel: ima: No TPM chip found, activating TPM-bypass! Sep 6 00:13:57.941184 kernel: ima: Allocated hash algorithm: sha1 Sep 6 00:13:57.941204 kernel: ima: No architecture policies found Sep 6 00:13:57.941215 kernel: clk: Disabling unused clocks Sep 6 00:13:57.941225 kernel: Freeing unused kernel image (initmem) memory: 47492K Sep 6 00:13:57.941236 kernel: Write protecting the kernel read-only data: 28672k Sep 6 00:13:57.941246 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Sep 6 00:13:57.941257 kernel: Freeing unused kernel image (rodata/data gap) memory: 604K Sep 6 00:13:57.941268 kernel: Run /init as init process Sep 6 00:13:57.941278 kernel: with arguments: Sep 6 00:13:57.941291 kernel: /init Sep 6 00:13:57.941301 kernel: with environment: Sep 6 00:13:57.941311 kernel: HOME=/ Sep 6 00:13:57.941322 kernel: TERM=linux Sep 6 00:13:57.941332 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Sep 6 00:13:57.941346 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 6 00:13:57.941360 systemd[1]: Detected virtualization kvm. Sep 6 00:13:57.941372 systemd[1]: Detected architecture x86-64. Sep 6 00:13:57.941386 systemd[1]: Running in initrd. Sep 6 00:13:57.941397 systemd[1]: No hostname configured, using default hostname. Sep 6 00:13:57.941406 systemd[1]: Hostname set to . Sep 6 00:13:57.941417 systemd[1]: Initializing machine ID from VM UUID. Sep 6 00:13:57.941427 systemd[1]: Queued start job for default target initrd.target. Sep 6 00:13:57.941436 systemd[1]: Started systemd-ask-password-console.path. Sep 6 00:13:57.941446 systemd[1]: Reached target cryptsetup.target. Sep 6 00:13:57.941456 systemd[1]: Reached target paths.target. Sep 6 00:13:57.941468 systemd[1]: Reached target slices.target. Sep 6 00:13:57.941478 systemd[1]: Reached target swap.target. Sep 6 00:13:57.941487 systemd[1]: Reached target timers.target. Sep 6 00:13:57.941499 systemd[1]: Listening on iscsid.socket. Sep 6 00:13:57.941510 systemd[1]: Listening on iscsiuio.socket. Sep 6 00:13:57.941521 systemd[1]: Listening on systemd-journald-audit.socket. Sep 6 00:13:57.941533 systemd[1]: Listening on systemd-journald-dev-log.socket. Sep 6 00:13:57.941544 systemd[1]: Listening on systemd-journald.socket. Sep 6 00:13:57.941558 systemd[1]: Listening on systemd-networkd.socket. Sep 6 00:13:57.941570 systemd[1]: Listening on systemd-udevd-control.socket. Sep 6 00:13:57.941581 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 6 00:13:57.941592 systemd[1]: Reached target sockets.target. Sep 6 00:13:57.941604 systemd[1]: Starting kmod-static-nodes.service... Sep 6 00:13:57.941615 systemd[1]: Finished network-cleanup.service. Sep 6 00:13:57.941627 systemd[1]: Starting systemd-fsck-usr.service... Sep 6 00:13:57.941638 systemd[1]: Starting systemd-journald.service... Sep 6 00:13:57.941649 systemd[1]: Starting systemd-modules-load.service... Sep 6 00:13:57.941663 systemd[1]: Starting systemd-resolved.service... Sep 6 00:13:57.941675 systemd[1]: Starting systemd-vconsole-setup.service... Sep 6 00:13:57.941686 systemd[1]: Finished kmod-static-nodes.service. Sep 6 00:13:57.941698 systemd[1]: Finished systemd-fsck-usr.service. Sep 6 00:13:57.941709 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Sep 6 00:13:57.941721 systemd[1]: Finished systemd-vconsole-setup.service. Sep 6 00:13:57.941733 systemd[1]: Starting dracut-cmdline-ask.service... Sep 6 00:13:57.941744 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Sep 6 00:13:57.941755 systemd[1]: Finished dracut-cmdline-ask.service. Sep 6 00:13:57.941768 systemd[1]: Starting dracut-cmdline.service... Sep 6 00:13:57.941783 systemd-journald[197]: Journal started Sep 6 00:13:57.941857 systemd-journald[197]: Runtime Journal (/run/log/journal/24d4b777d1c44c4dad95afc5afd781c6) is 6.0M, max 48.4M, 42.4M free. Sep 6 00:13:57.786065 systemd-modules-load[198]: Inserted module 'overlay' Sep 6 00:13:57.949202 systemd[1]: Started systemd-journald.service. Sep 6 00:13:57.949000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:13:57.949705 dracut-cmdline[216]: dracut-dracut-053 Sep 6 00:13:57.949705 dracut-cmdline[216]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LA Sep 6 00:13:57.949705 dracut-cmdline[216]: BEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=a807e3b6c1f608bcead7858f1ad5b6908e6d312e2d99c0ec0e5454f978e611a7 Sep 6 00:13:57.973675 kernel: audit: type=1130 audit(1757117637.949:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:13:57.973708 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Sep 6 00:13:58.007303 kernel: Bridge firewalling registered Sep 6 00:13:57.983373 systemd-modules-load[198]: Inserted module 'br_netfilter' Sep 6 00:13:57.987706 systemd-resolved[199]: Positive Trust Anchors: Sep 6 00:13:57.999312 systemd-resolved[199]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 6 00:13:57.999365 systemd-resolved[199]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 6 00:13:58.012056 systemd-resolved[199]: Defaulting to hostname 'linux'. Sep 6 00:13:58.029000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:13:58.013196 systemd[1]: Started systemd-resolved.service. Sep 6 00:13:58.049066 kernel: audit: type=1130 audit(1757117638.029:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:13:58.049106 kernel: SCSI subsystem initialized Sep 6 00:13:58.029451 systemd[1]: Reached target nss-lookup.target. Sep 6 00:13:58.067141 kernel: Loading iSCSI transport class v2.0-870. Sep 6 00:13:58.072333 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Sep 6 00:13:58.072404 kernel: device-mapper: uevent: version 1.0.3 Sep 6 00:13:58.072419 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Sep 6 00:13:58.090835 systemd-modules-load[198]: Inserted module 'dm_multipath' Sep 6 00:13:58.093600 systemd[1]: Finished systemd-modules-load.service. Sep 6 00:13:58.106383 kernel: audit: type=1130 audit(1757117638.095:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:13:58.095000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:13:58.101652 systemd[1]: Starting systemd-sysctl.service... Sep 6 00:13:58.126940 systemd[1]: Finished systemd-sysctl.service. Sep 6 00:13:58.142707 kernel: audit: type=1130 audit(1757117638.128:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:13:58.128000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:13:58.148234 kernel: iscsi: registered transport (tcp) Sep 6 00:13:58.177098 kernel: iscsi: registered transport (qla4xxx) Sep 6 00:13:58.177225 kernel: QLogic iSCSI HBA Driver Sep 6 00:13:58.316702 systemd[1]: Finished dracut-cmdline.service. Sep 6 00:13:58.316000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:13:58.321407 systemd[1]: Starting dracut-pre-udev.service... Sep 6 00:13:58.328307 kernel: audit: type=1130 audit(1757117638.316:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:13:58.410220 kernel: raid6: avx2x4 gen() 18975 MB/s Sep 6 00:13:58.426225 kernel: raid6: avx2x4 xor() 5011 MB/s Sep 6 00:13:58.445052 kernel: raid6: avx2x2 gen() 19070 MB/s Sep 6 00:13:58.465078 kernel: raid6: avx2x2 xor() 12075 MB/s Sep 6 00:13:58.483215 kernel: raid6: avx2x1 gen() 14412 MB/s Sep 6 00:13:58.501084 kernel: raid6: avx2x1 xor() 10919 MB/s Sep 6 00:13:58.517042 kernel: raid6: sse2x4 gen() 9398 MB/s Sep 6 00:13:58.537091 kernel: raid6: sse2x4 xor() 4053 MB/s Sep 6 00:13:58.557077 kernel: raid6: sse2x2 gen() 9168 MB/s Sep 6 00:13:58.571643 kernel: raid6: sse2x2 xor() 6330 MB/s Sep 6 00:13:58.590236 kernel: raid6: sse2x1 gen() 7108 MB/s Sep 6 00:13:58.608715 kernel: raid6: sse2x1 xor() 3681 MB/s Sep 6 00:13:58.608828 kernel: raid6: using algorithm avx2x2 gen() 19070 MB/s Sep 6 00:13:58.608843 kernel: raid6: .... xor() 12075 MB/s, rmw enabled Sep 6 00:13:58.608855 kernel: raid6: using avx2x2 recovery algorithm Sep 6 00:13:58.634419 kernel: xor: automatically using best checksumming function avx Sep 6 00:13:58.802038 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Sep 6 00:13:58.829248 systemd[1]: Finished dracut-pre-udev.service. Sep 6 00:13:58.830000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:13:58.834000 audit: BPF prog-id=7 op=LOAD Sep 6 00:13:58.836899 kernel: audit: type=1130 audit(1757117638.830:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:13:58.836954 kernel: audit: type=1334 audit(1757117638.834:8): prog-id=7 op=LOAD Sep 6 00:13:58.836970 kernel: audit: type=1334 audit(1757117638.836:9): prog-id=8 op=LOAD Sep 6 00:13:58.836000 audit: BPF prog-id=8 op=LOAD Sep 6 00:13:58.845486 systemd[1]: Starting systemd-udevd.service... Sep 6 00:13:58.871474 systemd-udevd[403]: Using default interface naming scheme 'v252'. Sep 6 00:13:58.881491 systemd[1]: Started systemd-udevd.service. Sep 6 00:13:58.879000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:13:58.890074 systemd[1]: Starting dracut-pre-trigger.service... Sep 6 00:13:58.900319 kernel: audit: type=1130 audit(1757117638.879:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:13:58.941357 dracut-pre-trigger[413]: rd.md=0: removing MD RAID activation Sep 6 00:13:59.006103 systemd[1]: Finished dracut-pre-trigger.service. Sep 6 00:13:59.006000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:13:59.012616 systemd[1]: Starting systemd-udev-trigger.service... Sep 6 00:13:59.084245 systemd[1]: Finished systemd-udev-trigger.service. Sep 6 00:13:59.085000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:13:59.151192 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Sep 6 00:13:59.163422 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Sep 6 00:13:59.163460 kernel: GPT:9289727 != 19775487 Sep 6 00:13:59.163474 kernel: GPT:Alternate GPT header not at the end of the disk. Sep 6 00:13:59.163486 kernel: GPT:9289727 != 19775487 Sep 6 00:13:59.163497 kernel: GPT: Use GNU Parted to correct GPT errors. Sep 6 00:13:59.163509 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Sep 6 00:13:59.166005 kernel: cryptd: max_cpu_qlen set to 1000 Sep 6 00:13:59.183004 kernel: libata version 3.00 loaded. Sep 6 00:13:59.193027 kernel: AVX2 version of gcm_enc/dec engaged. Sep 6 00:13:59.193126 kernel: AES CTR mode by8 optimization enabled Sep 6 00:13:59.205021 kernel: ahci 0000:00:1f.2: version 3.0 Sep 6 00:13:59.280902 kernel: ACPI: \_SB_.GSIA: Enabled at IRQ 16 Sep 6 00:13:59.280926 kernel: ahci 0000:00:1f.2: AHCI 0001.0000 32 slots 6 ports 1.5 Gbps 0x3f impl SATA mode Sep 6 00:13:59.281084 kernel: ahci 0000:00:1f.2: flags: 64bit ncq only Sep 6 00:13:59.281367 kernel: scsi host0: ahci Sep 6 00:13:59.281527 kernel: scsi host1: ahci Sep 6 00:13:59.281674 kernel: scsi host2: ahci Sep 6 00:13:59.281825 kernel: scsi host3: ahci Sep 6 00:13:59.282027 kernel: scsi host4: ahci Sep 6 00:13:59.282224 kernel: scsi host5: ahci Sep 6 00:13:59.282375 kernel: ata1: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040100 irq 34 Sep 6 00:13:59.282392 kernel: ata2: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040180 irq 34 Sep 6 00:13:59.282406 kernel: ata3: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040200 irq 34 Sep 6 00:13:59.282419 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/vda6 scanned by (udev-worker) (451) Sep 6 00:13:59.282431 kernel: ata4: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040280 irq 34 Sep 6 00:13:59.282448 kernel: ata5: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040300 irq 34 Sep 6 00:13:59.282461 kernel: ata6: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040380 irq 34 Sep 6 00:13:59.261056 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Sep 6 00:13:59.275370 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Sep 6 00:13:59.310709 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Sep 6 00:13:59.332623 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Sep 6 00:13:59.342043 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 6 00:13:59.347828 systemd[1]: Starting disk-uuid.service... Sep 6 00:13:59.449049 disk-uuid[530]: Primary Header is updated. Sep 6 00:13:59.449049 disk-uuid[530]: Secondary Entries is updated. Sep 6 00:13:59.449049 disk-uuid[530]: Secondary Header is updated. Sep 6 00:13:59.466549 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Sep 6 00:13:59.606495 kernel: ata5: SATA link down (SStatus 0 SControl 300) Sep 6 00:13:59.606594 kernel: ata2: SATA link down (SStatus 0 SControl 300) Sep 6 00:13:59.606607 kernel: ata1: SATA link down (SStatus 0 SControl 300) Sep 6 00:13:59.614056 kernel: ata6: SATA link down (SStatus 0 SControl 300) Sep 6 00:13:59.679211 kernel: ata3: SATA link up 1.5 Gbps (SStatus 113 SControl 300) Sep 6 00:13:59.679322 kernel: ata3.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Sep 6 00:13:59.679333 kernel: ata3.00: applying bridge limits Sep 6 00:13:59.682508 kernel: ata3.00: configured for UDMA/100 Sep 6 00:13:59.686336 kernel: scsi 2:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Sep 6 00:13:59.686669 kernel: ata4: SATA link down (SStatus 0 SControl 300) Sep 6 00:13:59.809641 kernel: sr 2:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Sep 6 00:13:59.829051 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Sep 6 00:13:59.829076 kernel: sr 2:0:0:0: Attached scsi CD-ROM sr0 Sep 6 00:14:00.486706 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Sep 6 00:14:00.490569 disk-uuid[531]: The operation has completed successfully. Sep 6 00:14:00.657934 systemd[1]: disk-uuid.service: Deactivated successfully. Sep 6 00:14:00.660327 systemd[1]: Finished disk-uuid.service. Sep 6 00:14:00.665000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:00.665000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:00.673350 systemd[1]: Starting verity-setup.service... Sep 6 00:14:00.715130 kernel: device-mapper: verity: sha256 using implementation "sha256-ni" Sep 6 00:14:00.835429 systemd[1]: Found device dev-mapper-usr.device. Sep 6 00:14:00.847356 systemd[1]: Mounting sysusr-usr.mount... Sep 6 00:14:00.847960 systemd[1]: Finished verity-setup.service. Sep 6 00:14:00.849000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:01.017342 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Sep 6 00:14:01.017747 systemd[1]: Mounted sysusr-usr.mount. Sep 6 00:14:01.023299 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Sep 6 00:14:01.024498 systemd[1]: Starting ignition-setup.service... Sep 6 00:14:01.040451 systemd[1]: Starting parse-ip-for-networkd.service... Sep 6 00:14:01.061897 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Sep 6 00:14:01.061992 kernel: BTRFS info (device vda6): using free space tree Sep 6 00:14:01.062011 kernel: BTRFS info (device vda6): has skinny extents Sep 6 00:14:01.120865 systemd[1]: mnt-oem.mount: Deactivated successfully. Sep 6 00:14:01.148959 systemd[1]: Finished ignition-setup.service. Sep 6 00:14:01.161050 kernel: kauditd_printk_skb: 5 callbacks suppressed Sep 6 00:14:01.161100 kernel: audit: type=1130 audit(1757117641.150:16): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:01.150000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:01.151787 systemd[1]: Starting ignition-fetch-offline.service... Sep 6 00:14:01.399022 systemd[1]: Finished parse-ip-for-networkd.service. Sep 6 00:14:01.402000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:01.411015 kernel: audit: type=1130 audit(1757117641.402:17): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:01.513000 audit: BPF prog-id=9 op=LOAD Sep 6 00:14:01.514993 systemd[1]: Starting systemd-networkd.service... Sep 6 00:14:01.517063 kernel: audit: type=1334 audit(1757117641.513:18): prog-id=9 op=LOAD Sep 6 00:14:01.556947 systemd-networkd[718]: lo: Link UP Sep 6 00:14:01.556961 systemd-networkd[718]: lo: Gained carrier Sep 6 00:14:01.557574 systemd-networkd[718]: Enumeration completed Sep 6 00:14:01.557869 systemd-networkd[718]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 6 00:14:01.558268 systemd[1]: Started systemd-networkd.service. Sep 6 00:14:01.566000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:01.559845 systemd-networkd[718]: eth0: Link UP Sep 6 00:14:01.579958 kernel: audit: type=1130 audit(1757117641.566:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:01.559849 systemd-networkd[718]: eth0: Gained carrier Sep 6 00:14:01.567201 systemd[1]: Reached target network.target. Sep 6 00:14:01.577004 systemd[1]: Starting iscsiuio.service... Sep 6 00:14:01.732505 systemd[1]: Started iscsiuio.service. Sep 6 00:14:01.748517 kernel: audit: type=1130 audit(1757117641.736:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:01.736000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:01.738675 systemd[1]: Starting iscsid.service... Sep 6 00:14:01.749816 iscsid[725]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Sep 6 00:14:01.749816 iscsid[725]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Sep 6 00:14:01.749816 iscsid[725]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Sep 6 00:14:01.749816 iscsid[725]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Sep 6 00:14:01.749816 iscsid[725]: If using hardware iscsi like qla4xxx this message can be ignored. Sep 6 00:14:01.749816 iscsid[725]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Sep 6 00:14:01.749816 iscsid[725]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Sep 6 00:14:01.777089 kernel: audit: type=1130 audit(1757117641.758:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:01.758000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:01.739513 systemd-networkd[718]: eth0: DHCPv4 address 10.0.0.22/16, gateway 10.0.0.1 acquired from 10.0.0.1 Sep 6 00:14:01.758504 systemd[1]: Started iscsid.service. Sep 6 00:14:01.762922 systemd[1]: Starting dracut-initqueue.service... Sep 6 00:14:01.792692 systemd[1]: Finished dracut-initqueue.service. Sep 6 00:14:01.806314 kernel: audit: type=1130 audit(1757117641.792:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:01.792000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:01.793421 systemd[1]: Reached target remote-fs-pre.target. Sep 6 00:14:01.810739 systemd[1]: Reached target remote-cryptsetup.target. Sep 6 00:14:01.815172 systemd[1]: Reached target remote-fs.target. Sep 6 00:14:01.814787 ignition[664]: Ignition 2.14.0 Sep 6 00:14:01.819746 systemd[1]: Starting dracut-pre-mount.service... Sep 6 00:14:01.814797 ignition[664]: Stage: fetch-offline Sep 6 00:14:01.814868 ignition[664]: no configs at "/usr/lib/ignition/base.d" Sep 6 00:14:01.814878 ignition[664]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Sep 6 00:14:01.815047 ignition[664]: parsed url from cmdline: "" Sep 6 00:14:01.837550 systemd[1]: Finished dracut-pre-mount.service. Sep 6 00:14:01.848239 kernel: audit: type=1130 audit(1757117641.839:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:01.839000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:01.815051 ignition[664]: no config URL provided Sep 6 00:14:01.815057 ignition[664]: reading system config file "/usr/lib/ignition/user.ign" Sep 6 00:14:01.815066 ignition[664]: no config at "/usr/lib/ignition/user.ign" Sep 6 00:14:01.815100 ignition[664]: op(1): [started] loading QEMU firmware config module Sep 6 00:14:01.815106 ignition[664]: op(1): executing: "modprobe" "qemu_fw_cfg" Sep 6 00:14:01.840706 ignition[664]: op(1): [finished] loading QEMU firmware config module Sep 6 00:14:01.898283 ignition[664]: parsing config with SHA512: 0d59c00867e05d6bb2146ccac1f40304f0bc2cb3320c99987d2d28e971f5819addbf8ebd9e6fcfae29475ee6a34b47f55ac7d971459b86877604c1b7a8ce6f17 Sep 6 00:14:01.917320 unknown[664]: fetched base config from "system" Sep 6 00:14:01.918082 unknown[664]: fetched user config from "qemu" Sep 6 00:14:01.920213 ignition[664]: fetch-offline: fetch-offline passed Sep 6 00:14:01.920802 ignition[664]: Ignition finished successfully Sep 6 00:14:01.934687 systemd[1]: Finished ignition-fetch-offline.service. Sep 6 00:14:01.943054 kernel: audit: type=1130 audit(1757117641.936:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:01.936000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:01.936653 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Sep 6 00:14:01.943528 systemd[1]: Starting ignition-kargs.service... Sep 6 00:14:02.005727 ignition[741]: Ignition 2.14.0 Sep 6 00:14:02.006928 ignition[741]: Stage: kargs Sep 6 00:14:02.008422 ignition[741]: no configs at "/usr/lib/ignition/base.d" Sep 6 00:14:02.008437 ignition[741]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Sep 6 00:14:02.013391 ignition[741]: kargs: kargs passed Sep 6 00:14:02.013470 ignition[741]: Ignition finished successfully Sep 6 00:14:02.020508 systemd[1]: Finished ignition-kargs.service. Sep 6 00:14:02.032485 kernel: audit: type=1130 audit(1757117642.021:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:02.021000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:02.030370 systemd[1]: Starting ignition-disks.service... Sep 6 00:14:02.050173 ignition[748]: Ignition 2.14.0 Sep 6 00:14:02.050193 ignition[748]: Stage: disks Sep 6 00:14:02.050364 ignition[748]: no configs at "/usr/lib/ignition/base.d" Sep 6 00:14:02.050377 ignition[748]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Sep 6 00:14:02.057481 systemd[1]: Finished ignition-disks.service. Sep 6 00:14:02.058000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:02.051621 ignition[748]: disks: disks passed Sep 6 00:14:02.059716 systemd[1]: Reached target initrd-root-device.target. Sep 6 00:14:02.051694 ignition[748]: Ignition finished successfully Sep 6 00:14:02.061636 systemd[1]: Reached target local-fs-pre.target. Sep 6 00:14:02.063421 systemd[1]: Reached target local-fs.target. Sep 6 00:14:02.065585 systemd[1]: Reached target sysinit.target. Sep 6 00:14:02.065920 systemd[1]: Reached target basic.target. Sep 6 00:14:02.068023 systemd[1]: Starting systemd-fsck-root.service... Sep 6 00:14:02.092883 systemd-fsck[756]: ROOT: clean, 629/553520 files, 56028/553472 blocks Sep 6 00:14:02.106772 systemd[1]: Finished systemd-fsck-root.service. Sep 6 00:14:02.107000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:02.111252 systemd[1]: Mounting sysroot.mount... Sep 6 00:14:02.123667 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Sep 6 00:14:02.124587 systemd[1]: Mounted sysroot.mount. Sep 6 00:14:02.132876 systemd[1]: Reached target initrd-root-fs.target. Sep 6 00:14:02.139874 systemd[1]: Mounting sysroot-usr.mount... Sep 6 00:14:02.141911 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Sep 6 00:14:02.141962 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Sep 6 00:14:02.142006 systemd[1]: Reached target ignition-diskful.target. Sep 6 00:14:02.146722 systemd[1]: Mounted sysroot-usr.mount. Sep 6 00:14:02.158782 systemd[1]: Mounting sysroot-usr-share-oem.mount... Sep 6 00:14:02.161542 systemd[1]: Starting initrd-setup-root.service... Sep 6 00:14:02.170016 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by mount (762) Sep 6 00:14:02.170774 initrd-setup-root[767]: cut: /sysroot/etc/passwd: No such file or directory Sep 6 00:14:02.175655 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Sep 6 00:14:02.175683 kernel: BTRFS info (device vda6): using free space tree Sep 6 00:14:02.175696 kernel: BTRFS info (device vda6): has skinny extents Sep 6 00:14:02.179178 initrd-setup-root[791]: cut: /sysroot/etc/group: No such file or directory Sep 6 00:14:02.185270 systemd[1]: Mounted sysroot-usr-share-oem.mount. Sep 6 00:14:02.188538 initrd-setup-root[801]: cut: /sysroot/etc/shadow: No such file or directory Sep 6 00:14:02.192371 initrd-setup-root[809]: cut: /sysroot/etc/gshadow: No such file or directory Sep 6 00:14:02.287234 systemd[1]: Finished initrd-setup-root.service. Sep 6 00:14:02.286000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:02.290067 systemd[1]: Starting ignition-mount.service... Sep 6 00:14:02.297655 systemd[1]: Starting sysroot-boot.service... Sep 6 00:14:02.313907 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Sep 6 00:14:02.314481 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Sep 6 00:14:02.363118 ignition[829]: INFO : Ignition 2.14.0 Sep 6 00:14:02.363118 ignition[829]: INFO : Stage: mount Sep 6 00:14:02.365000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:02.365993 ignition[829]: INFO : no configs at "/usr/lib/ignition/base.d" Sep 6 00:14:02.365993 ignition[829]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Sep 6 00:14:02.365993 ignition[829]: INFO : mount: mount passed Sep 6 00:14:02.365993 ignition[829]: INFO : Ignition finished successfully Sep 6 00:14:02.363567 systemd[1]: Finished sysroot-boot.service. Sep 6 00:14:02.392172 systemd[1]: Finished ignition-mount.service. Sep 6 00:14:02.393000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:02.394715 systemd[1]: Starting ignition-files.service... Sep 6 00:14:02.406528 systemd[1]: Mounting sysroot-usr-share-oem.mount... Sep 6 00:14:02.420487 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/vda6 scanned by mount (838) Sep 6 00:14:02.423021 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Sep 6 00:14:02.423124 kernel: BTRFS info (device vda6): using free space tree Sep 6 00:14:02.423137 kernel: BTRFS info (device vda6): has skinny extents Sep 6 00:14:02.441568 systemd[1]: Mounted sysroot-usr-share-oem.mount. Sep 6 00:14:02.875668 ignition[857]: INFO : Ignition 2.14.0 Sep 6 00:14:02.875668 ignition[857]: INFO : Stage: files Sep 6 00:14:02.878043 ignition[857]: INFO : no configs at "/usr/lib/ignition/base.d" Sep 6 00:14:02.878043 ignition[857]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Sep 6 00:14:02.884317 ignition[857]: DEBUG : files: compiled without relabeling support, skipping Sep 6 00:14:02.882252 systemd-networkd[718]: eth0: Gained IPv6LL Sep 6 00:14:02.890408 ignition[857]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Sep 6 00:14:02.890408 ignition[857]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Sep 6 00:14:02.909347 ignition[857]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Sep 6 00:14:02.911842 ignition[857]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Sep 6 00:14:02.914487 unknown[857]: wrote ssh authorized keys file for user: core Sep 6 00:14:02.919775 ignition[857]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Sep 6 00:14:02.919775 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.0-linux-amd64.tar.gz" Sep 6 00:14:02.919775 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.0-linux-amd64.tar.gz: attempt #1 Sep 6 00:14:03.484871 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Sep 6 00:14:04.067867 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.0-linux-amd64.tar.gz" Sep 6 00:14:04.067867 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Sep 6 00:14:04.067867 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Sep 6 00:14:04.067867 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Sep 6 00:14:04.067867 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Sep 6 00:14:04.067867 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 6 00:14:04.067867 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 6 00:14:04.067867 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 6 00:14:04.067867 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 6 00:14:04.135161 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Sep 6 00:14:04.135161 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Sep 6 00:14:04.135161 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Sep 6 00:14:04.135161 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Sep 6 00:14:04.135161 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Sep 6 00:14:04.135161 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.32.4-x86-64.raw: attempt #1 Sep 6 00:14:04.464404 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Sep 6 00:14:08.301299 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Sep 6 00:14:08.301299 ignition[857]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Sep 6 00:14:08.306071 ignition[857]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 6 00:14:08.306071 ignition[857]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 6 00:14:08.306071 ignition[857]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Sep 6 00:14:08.306071 ignition[857]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Sep 6 00:14:08.323123 ignition[857]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Sep 6 00:14:08.323123 ignition[857]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Sep 6 00:14:08.323123 ignition[857]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Sep 6 00:14:08.323123 ignition[857]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Sep 6 00:14:08.323123 ignition[857]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Sep 6 00:14:08.323123 ignition[857]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Sep 6 00:14:08.323123 ignition[857]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Sep 6 00:14:08.867019 ignition[857]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Sep 6 00:14:08.867019 ignition[857]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Sep 6 00:14:08.887630 ignition[857]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Sep 6 00:14:08.887630 ignition[857]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Sep 6 00:14:08.887630 ignition[857]: INFO : files: files passed Sep 6 00:14:08.887630 ignition[857]: INFO : Ignition finished successfully Sep 6 00:14:08.916847 systemd[1]: Finished ignition-files.service. Sep 6 00:14:08.937835 kernel: kauditd_printk_skb: 5 callbacks suppressed Sep 6 00:14:08.937878 kernel: audit: type=1130 audit(1757117648.922:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:08.922000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:08.928552 systemd[1]: Starting initrd-setup-root-after-ignition.service... Sep 6 00:14:08.939859 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Sep 6 00:14:08.957380 systemd[1]: Starting ignition-quench.service... Sep 6 00:14:08.969818 initrd-setup-root-after-ignition[881]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Sep 6 00:14:08.970470 systemd[1]: ignition-quench.service: Deactivated successfully. Sep 6 00:14:08.970568 systemd[1]: Finished ignition-quench.service. Sep 6 00:14:08.979000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:08.992895 kernel: audit: type=1130 audit(1757117648.979:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:08.993004 kernel: audit: type=1131 audit(1757117648.979:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:08.979000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:08.993108 initrd-setup-root-after-ignition[884]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Sep 6 00:14:08.998003 systemd[1]: Finished initrd-setup-root-after-ignition.service. Sep 6 00:14:09.000137 systemd[1]: Reached target ignition-complete.target. Sep 6 00:14:08.998000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.014104 kernel: audit: type=1130 audit(1757117648.998:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.018272 systemd[1]: Starting initrd-parse-etc.service... Sep 6 00:14:09.061340 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Sep 6 00:14:09.061507 systemd[1]: Finished initrd-parse-etc.service. Sep 6 00:14:09.063000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.069287 systemd[1]: Reached target initrd-fs.target. Sep 6 00:14:09.079356 kernel: audit: type=1130 audit(1757117649.063:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.079395 kernel: audit: type=1131 audit(1757117649.065:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.065000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.077545 systemd[1]: Reached target initrd.target. Sep 6 00:14:09.079429 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Sep 6 00:14:09.080922 systemd[1]: Starting dracut-pre-pivot.service... Sep 6 00:14:09.108314 systemd[1]: Finished dracut-pre-pivot.service. Sep 6 00:14:09.116863 kernel: audit: type=1130 audit(1757117649.106:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.106000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.113039 systemd[1]: Starting initrd-cleanup.service... Sep 6 00:14:09.128495 systemd[1]: Stopped target nss-lookup.target. Sep 6 00:14:09.129064 systemd[1]: Stopped target remote-cryptsetup.target. Sep 6 00:14:09.131035 systemd[1]: Stopped target timers.target. Sep 6 00:14:09.134875 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Sep 6 00:14:09.143957 kernel: audit: type=1131 audit(1757117649.135:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.135000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.135085 systemd[1]: Stopped dracut-pre-pivot.service. Sep 6 00:14:09.136658 systemd[1]: Stopped target initrd.target. Sep 6 00:14:09.144397 systemd[1]: Stopped target basic.target. Sep 6 00:14:09.149718 systemd[1]: Stopped target ignition-complete.target. Sep 6 00:14:09.151708 systemd[1]: Stopped target ignition-diskful.target. Sep 6 00:14:09.153674 systemd[1]: Stopped target initrd-root-device.target. Sep 6 00:14:09.157180 systemd[1]: Stopped target remote-fs.target. Sep 6 00:14:09.159303 systemd[1]: Stopped target remote-fs-pre.target. Sep 6 00:14:09.161404 systemd[1]: Stopped target sysinit.target. Sep 6 00:14:09.163629 systemd[1]: Stopped target local-fs.target. Sep 6 00:14:09.165894 systemd[1]: Stopped target local-fs-pre.target. Sep 6 00:14:09.182176 kernel: audit: type=1131 audit(1757117649.170:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.170000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.167935 systemd[1]: Stopped target swap.target. Sep 6 00:14:09.169701 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Sep 6 00:14:09.191621 kernel: audit: type=1131 audit(1757117649.183:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.183000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.169888 systemd[1]: Stopped dracut-pre-mount.service. Sep 6 00:14:09.192000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.171304 systemd[1]: Stopped target cryptsetup.target. Sep 6 00:14:09.182816 systemd[1]: dracut-initqueue.service: Deactivated successfully. Sep 6 00:14:09.183007 systemd[1]: Stopped dracut-initqueue.service. Sep 6 00:14:09.184512 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Sep 6 00:14:09.184663 systemd[1]: Stopped ignition-fetch-offline.service. Sep 6 00:14:09.193175 systemd[1]: Stopped target paths.target. Sep 6 00:14:09.196197 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Sep 6 00:14:09.206767 systemd[1]: Stopped systemd-ask-password-console.path. Sep 6 00:14:09.210800 systemd[1]: Stopped target slices.target. Sep 6 00:14:09.220744 systemd[1]: Stopped target sockets.target. Sep 6 00:14:09.223710 systemd[1]: iscsid.socket: Deactivated successfully. Sep 6 00:14:09.223845 systemd[1]: Closed iscsid.socket. Sep 6 00:14:09.228112 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Sep 6 00:14:09.229542 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Sep 6 00:14:09.235000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.235350 systemd[1]: ignition-files.service: Deactivated successfully. Sep 6 00:14:09.236665 systemd[1]: Stopped ignition-files.service. Sep 6 00:14:09.238000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.242319 systemd[1]: Stopping ignition-mount.service... Sep 6 00:14:09.244443 systemd[1]: Stopping iscsiuio.service... Sep 6 00:14:09.246072 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Sep 6 00:14:09.247428 systemd[1]: Stopped kmod-static-nodes.service. Sep 6 00:14:09.251000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.253931 systemd[1]: Stopping sysroot-boot.service... Sep 6 00:14:09.254318 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Sep 6 00:14:09.254508 systemd[1]: Stopped systemd-udev-trigger.service. Sep 6 00:14:09.260346 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Sep 6 00:14:09.260000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.261602 systemd[1]: Stopped dracut-pre-trigger.service. Sep 6 00:14:09.263000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.264332 ignition[897]: INFO : Ignition 2.14.0 Sep 6 00:14:09.264332 ignition[897]: INFO : Stage: umount Sep 6 00:14:09.268154 ignition[897]: INFO : no configs at "/usr/lib/ignition/base.d" Sep 6 00:14:09.268154 ignition[897]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Sep 6 00:14:09.268154 ignition[897]: INFO : umount: umount passed Sep 6 00:14:09.268154 ignition[897]: INFO : Ignition finished successfully Sep 6 00:14:09.277874 systemd[1]: sysroot-boot.mount: Deactivated successfully. Sep 6 00:14:09.281640 systemd[1]: iscsiuio.service: Deactivated successfully. Sep 6 00:14:09.283654 systemd[1]: Stopped iscsiuio.service. Sep 6 00:14:09.285000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.286203 systemd[1]: ignition-mount.service: Deactivated successfully. Sep 6 00:14:09.287349 systemd[1]: Stopped ignition-mount.service. Sep 6 00:14:09.289000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.290371 systemd[1]: sysroot-boot.service: Deactivated successfully. Sep 6 00:14:09.291645 systemd[1]: Stopped sysroot-boot.service. Sep 6 00:14:09.293000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.294378 systemd[1]: Stopped target network.target. Sep 6 00:14:09.298081 systemd[1]: iscsiuio.socket: Deactivated successfully. Sep 6 00:14:09.298165 systemd[1]: Closed iscsiuio.socket. Sep 6 00:14:09.300963 systemd[1]: ignition-disks.service: Deactivated successfully. Sep 6 00:14:09.301067 systemd[1]: Stopped ignition-disks.service. Sep 6 00:14:09.303000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.304183 systemd[1]: ignition-kargs.service: Deactivated successfully. Sep 6 00:14:09.305000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.304256 systemd[1]: Stopped ignition-kargs.service. Sep 6 00:14:09.306602 systemd[1]: ignition-setup.service: Deactivated successfully. Sep 6 00:14:09.310000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.306668 systemd[1]: Stopped ignition-setup.service. Sep 6 00:14:09.314080 systemd[1]: initrd-setup-root.service: Deactivated successfully. Sep 6 00:14:09.315083 systemd[1]: Stopped initrd-setup-root.service. Sep 6 00:14:09.318000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.318639 systemd[1]: Stopping systemd-networkd.service... Sep 6 00:14:09.322718 systemd[1]: Stopping systemd-resolved.service... Sep 6 00:14:09.326139 systemd[1]: initrd-cleanup.service: Deactivated successfully. Sep 6 00:14:09.327109 systemd-networkd[718]: eth0: DHCPv6 lease lost Sep 6 00:14:09.327399 systemd[1]: Finished initrd-cleanup.service. Sep 6 00:14:09.332000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.332000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.336551 systemd[1]: systemd-networkd.service: Deactivated successfully. Sep 6 00:14:09.336697 systemd[1]: Stopped systemd-networkd.service. Sep 6 00:14:09.341000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.343578 systemd[1]: systemd-resolved.service: Deactivated successfully. Sep 6 00:14:09.343732 systemd[1]: Stopped systemd-resolved.service. Sep 6 00:14:09.342000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.347792 systemd[1]: systemd-networkd.socket: Deactivated successfully. Sep 6 00:14:09.347848 systemd[1]: Closed systemd-networkd.socket. Sep 6 00:14:09.352000 audit: BPF prog-id=9 op=UNLOAD Sep 6 00:14:09.355438 systemd[1]: Stopping network-cleanup.service... Sep 6 00:14:09.358000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.356491 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Sep 6 00:14:09.360000 audit: BPF prog-id=6 op=UNLOAD Sep 6 00:14:09.361000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.365000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.356578 systemd[1]: Stopped parse-ip-for-networkd.service. Sep 6 00:14:09.358896 systemd[1]: systemd-sysctl.service: Deactivated successfully. Sep 6 00:14:09.358993 systemd[1]: Stopped systemd-sysctl.service. Sep 6 00:14:09.363078 systemd[1]: systemd-modules-load.service: Deactivated successfully. Sep 6 00:14:09.363151 systemd[1]: Stopped systemd-modules-load.service. Sep 6 00:14:09.365605 systemd[1]: Stopping systemd-udevd.service... Sep 6 00:14:09.369468 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Sep 6 00:14:09.379637 systemd[1]: systemd-udevd.service: Deactivated successfully. Sep 6 00:14:09.379841 systemd[1]: Stopped systemd-udevd.service. Sep 6 00:14:09.381000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.382323 systemd[1]: network-cleanup.service: Deactivated successfully. Sep 6 00:14:09.383000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.382434 systemd[1]: Stopped network-cleanup.service. Sep 6 00:14:09.384635 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Sep 6 00:14:09.384687 systemd[1]: Closed systemd-udevd-control.socket. Sep 6 00:14:09.389000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.389000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.389000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.389000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.390483 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Sep 6 00:14:09.390543 systemd[1]: Closed systemd-udevd-kernel.socket. Sep 6 00:14:09.390921 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Sep 6 00:14:09.390991 systemd[1]: Stopped dracut-pre-udev.service. Sep 6 00:14:09.408000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.408000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.391194 systemd[1]: dracut-cmdline.service: Deactivated successfully. Sep 6 00:14:09.391231 systemd[1]: Stopped dracut-cmdline.service. Sep 6 00:14:09.391347 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Sep 6 00:14:09.391389 systemd[1]: Stopped dracut-cmdline-ask.service. Sep 6 00:14:09.392701 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Sep 6 00:14:09.394983 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Sep 6 00:14:09.395050 systemd[1]: Stopped systemd-vconsole-setup.service. Sep 6 00:14:09.404531 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Sep 6 00:14:09.405339 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Sep 6 00:14:09.409691 systemd[1]: Reached target initrd-switch-root.target. Sep 6 00:14:09.427181 systemd[1]: Starting initrd-switch-root.service... Sep 6 00:14:09.446107 systemd[1]: Switching root. Sep 6 00:14:09.480338 iscsid[725]: iscsid shutting down. Sep 6 00:14:09.481473 systemd-journald[197]: Received SIGTERM from PID 1 (n/a). Sep 6 00:14:09.481551 systemd-journald[197]: Journal stopped Sep 6 00:14:19.073749 kernel: SELinux: Class mctp_socket not defined in policy. Sep 6 00:14:19.073817 kernel: SELinux: Class anon_inode not defined in policy. Sep 6 00:14:19.073836 kernel: SELinux: the above unknown classes and permissions will be allowed Sep 6 00:14:19.073857 kernel: SELinux: policy capability network_peer_controls=1 Sep 6 00:14:19.073874 kernel: SELinux: policy capability open_perms=1 Sep 6 00:14:19.073893 kernel: SELinux: policy capability extended_socket_class=1 Sep 6 00:14:19.073908 kernel: SELinux: policy capability always_check_network=0 Sep 6 00:14:19.073933 kernel: SELinux: policy capability cgroup_seclabel=1 Sep 6 00:14:19.073952 kernel: SELinux: policy capability nnp_nosuid_transition=1 Sep 6 00:14:19.073968 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Sep 6 00:14:19.074012 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Sep 6 00:14:19.074031 systemd[1]: Successfully loaded SELinux policy in 67.296ms. Sep 6 00:14:19.074130 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 10.815ms. Sep 6 00:14:19.074162 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 6 00:14:19.074181 systemd[1]: Detected virtualization kvm. Sep 6 00:14:19.074201 systemd[1]: Detected architecture x86-64. Sep 6 00:14:19.074218 systemd[1]: Detected first boot. Sep 6 00:14:19.074235 systemd[1]: Initializing machine ID from VM UUID. Sep 6 00:14:19.074252 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Sep 6 00:14:19.074268 systemd[1]: Populated /etc with preset unit settings. Sep 6 00:14:19.074284 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 6 00:14:19.074304 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 6 00:14:19.074327 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 6 00:14:19.074346 kernel: kauditd_printk_skb: 46 callbacks suppressed Sep 6 00:14:19.074362 kernel: audit: type=1334 audit(1757117658.447:80): prog-id=12 op=LOAD Sep 6 00:14:19.074377 kernel: audit: type=1334 audit(1757117658.448:81): prog-id=3 op=UNLOAD Sep 6 00:14:19.074392 kernel: audit: type=1334 audit(1757117658.450:82): prog-id=13 op=LOAD Sep 6 00:14:19.074406 kernel: audit: type=1334 audit(1757117658.453:83): prog-id=14 op=LOAD Sep 6 00:14:19.074420 kernel: audit: type=1334 audit(1757117658.453:84): prog-id=4 op=UNLOAD Sep 6 00:14:19.074437 kernel: audit: type=1334 audit(1757117658.453:85): prog-id=5 op=UNLOAD Sep 6 00:14:19.074452 kernel: audit: type=1334 audit(1757117658.456:86): prog-id=15 op=LOAD Sep 6 00:14:19.074468 kernel: audit: type=1334 audit(1757117658.456:87): prog-id=12 op=UNLOAD Sep 6 00:14:19.074482 kernel: audit: type=1334 audit(1757117658.459:88): prog-id=16 op=LOAD Sep 6 00:14:19.074497 kernel: audit: type=1334 audit(1757117658.460:89): prog-id=17 op=LOAD Sep 6 00:14:19.074512 systemd[1]: iscsid.service: Deactivated successfully. Sep 6 00:14:19.074528 systemd[1]: Stopped iscsid.service. Sep 6 00:14:19.074543 systemd[1]: initrd-switch-root.service: Deactivated successfully. Sep 6 00:14:19.074611 systemd[1]: Stopped initrd-switch-root.service. Sep 6 00:14:19.074632 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Sep 6 00:14:19.074649 systemd[1]: Created slice system-addon\x2dconfig.slice. Sep 6 00:14:19.074674 systemd[1]: Created slice system-addon\x2drun.slice. Sep 6 00:14:19.074688 systemd[1]: Created slice system-getty.slice. Sep 6 00:14:19.074705 systemd[1]: Created slice system-modprobe.slice. Sep 6 00:14:19.074722 systemd[1]: Created slice system-serial\x2dgetty.slice. Sep 6 00:14:19.074738 systemd[1]: Created slice system-system\x2dcloudinit.slice. Sep 6 00:14:19.074757 systemd[1]: Created slice system-systemd\x2dfsck.slice. Sep 6 00:14:19.074773 systemd[1]: Created slice user.slice. Sep 6 00:14:19.074789 systemd[1]: Started systemd-ask-password-console.path. Sep 6 00:14:19.074805 systemd[1]: Started systemd-ask-password-wall.path. Sep 6 00:14:19.074822 systemd[1]: Set up automount boot.automount. Sep 6 00:14:19.074838 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Sep 6 00:14:19.074853 systemd[1]: Stopped target initrd-switch-root.target. Sep 6 00:14:19.074869 systemd[1]: Stopped target initrd-fs.target. Sep 6 00:14:19.074884 systemd[1]: Stopped target initrd-root-fs.target. Sep 6 00:14:19.074902 systemd[1]: Reached target integritysetup.target. Sep 6 00:14:19.074917 systemd[1]: Reached target remote-cryptsetup.target. Sep 6 00:14:19.074933 systemd[1]: Reached target remote-fs.target. Sep 6 00:14:19.074950 systemd[1]: Reached target slices.target. Sep 6 00:14:19.074966 systemd[1]: Reached target swap.target. Sep 6 00:14:19.075041 systemd[1]: Reached target torcx.target. Sep 6 00:14:19.075106 systemd[1]: Reached target veritysetup.target. Sep 6 00:14:19.075120 systemd[1]: Listening on systemd-coredump.socket. Sep 6 00:14:19.075133 systemd[1]: Listening on systemd-initctl.socket. Sep 6 00:14:19.075151 systemd[1]: Listening on systemd-networkd.socket. Sep 6 00:14:19.075163 systemd[1]: Listening on systemd-udevd-control.socket. Sep 6 00:14:19.075176 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 6 00:14:19.075188 systemd[1]: Listening on systemd-userdbd.socket. Sep 6 00:14:19.075200 systemd[1]: Mounting dev-hugepages.mount... Sep 6 00:14:19.075212 systemd[1]: Mounting dev-mqueue.mount... Sep 6 00:14:19.075224 systemd[1]: Mounting media.mount... Sep 6 00:14:19.075279 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 6 00:14:19.075301 systemd[1]: Mounting sys-kernel-debug.mount... Sep 6 00:14:19.075314 systemd[1]: Mounting sys-kernel-tracing.mount... Sep 6 00:14:19.075329 systemd[1]: Mounting tmp.mount... Sep 6 00:14:19.075341 systemd[1]: Starting flatcar-tmpfiles.service... Sep 6 00:14:19.075353 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 00:14:19.075368 systemd[1]: Starting kmod-static-nodes.service... Sep 6 00:14:19.075384 systemd[1]: Starting modprobe@configfs.service... Sep 6 00:14:19.075401 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 00:14:19.075417 systemd[1]: Starting modprobe@drm.service... Sep 6 00:14:19.075433 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 00:14:19.075449 systemd[1]: Starting modprobe@fuse.service... Sep 6 00:14:19.075470 systemd[1]: Starting modprobe@loop.service... Sep 6 00:14:19.075488 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Sep 6 00:14:19.075509 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Sep 6 00:14:19.075525 systemd[1]: Stopped systemd-fsck-root.service. Sep 6 00:14:19.075543 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Sep 6 00:14:19.075559 systemd[1]: Stopped systemd-fsck-usr.service. Sep 6 00:14:19.075574 systemd[1]: Stopped systemd-journald.service. Sep 6 00:14:19.075628 kernel: fuse: init (API version 7.34) Sep 6 00:14:19.075643 kernel: loop: module loaded Sep 6 00:14:19.075671 systemd[1]: Starting systemd-journald.service... Sep 6 00:14:19.075692 systemd[1]: Starting systemd-modules-load.service... Sep 6 00:14:19.075714 systemd[1]: Starting systemd-network-generator.service... Sep 6 00:14:19.075731 systemd[1]: Starting systemd-remount-fs.service... Sep 6 00:14:19.075748 systemd[1]: Starting systemd-udev-trigger.service... Sep 6 00:14:19.075767 systemd[1]: verity-setup.service: Deactivated successfully. Sep 6 00:14:19.075783 systemd[1]: Stopped verity-setup.service. Sep 6 00:14:19.075801 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 6 00:14:19.075818 systemd[1]: Mounted dev-hugepages.mount. Sep 6 00:14:19.075833 systemd[1]: Mounted dev-mqueue.mount. Sep 6 00:14:19.075854 systemd-journald[1005]: Journal started Sep 6 00:14:19.075921 systemd-journald[1005]: Runtime Journal (/run/log/journal/24d4b777d1c44c4dad95afc5afd781c6) is 6.0M, max 48.4M, 42.4M free. Sep 6 00:14:09.613000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Sep 6 00:14:09.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 6 00:14:09.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 6 00:14:09.792000 audit: BPF prog-id=10 op=LOAD Sep 6 00:14:09.792000 audit: BPF prog-id=10 op=UNLOAD Sep 6 00:14:09.792000 audit: BPF prog-id=11 op=LOAD Sep 6 00:14:09.792000 audit: BPF prog-id=11 op=UNLOAD Sep 6 00:14:09.935000 audit[930]: AVC avc: denied { associate } for pid=930 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Sep 6 00:14:09.935000 audit[930]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c00015589c a1=c0000d8de0 a2=c0000e10c0 a3=32 items=0 ppid=913 pid=930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:09.935000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 6 00:14:09.937000 audit[930]: AVC avc: denied { associate } for pid=930 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Sep 6 00:14:09.937000 audit[930]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c000155975 a2=1ed a3=0 items=2 ppid=913 pid=930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:09.937000 audit: CWD cwd="/" Sep 6 00:14:09.937000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:09.937000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:09.937000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 6 00:14:18.447000 audit: BPF prog-id=12 op=LOAD Sep 6 00:14:18.448000 audit: BPF prog-id=3 op=UNLOAD Sep 6 00:14:18.450000 audit: BPF prog-id=13 op=LOAD Sep 6 00:14:18.453000 audit: BPF prog-id=14 op=LOAD Sep 6 00:14:18.453000 audit: BPF prog-id=4 op=UNLOAD Sep 6 00:14:18.453000 audit: BPF prog-id=5 op=UNLOAD Sep 6 00:14:18.456000 audit: BPF prog-id=15 op=LOAD Sep 6 00:14:18.456000 audit: BPF prog-id=12 op=UNLOAD Sep 6 00:14:18.459000 audit: BPF prog-id=16 op=LOAD Sep 6 00:14:18.460000 audit: BPF prog-id=17 op=LOAD Sep 6 00:14:18.460000 audit: BPF prog-id=13 op=UNLOAD Sep 6 00:14:18.460000 audit: BPF prog-id=14 op=UNLOAD Sep 6 00:14:18.462000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:18.473000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:18.482000 audit: BPF prog-id=15 op=UNLOAD Sep 6 00:14:18.485000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:18.485000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:18.709000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:18.714000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:18.717000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:18.717000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:18.721000 audit: BPF prog-id=18 op=LOAD Sep 6 00:14:18.722000 audit: BPF prog-id=19 op=LOAD Sep 6 00:14:18.722000 audit: BPF prog-id=20 op=LOAD Sep 6 00:14:18.722000 audit: BPF prog-id=16 op=UNLOAD Sep 6 00:14:18.722000 audit: BPF prog-id=17 op=UNLOAD Sep 6 00:14:19.061000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:19.064000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Sep 6 00:14:19.064000 audit[1005]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=5 a1=7ffef0ca3520 a2=4000 a3=7ffef0ca35bc items=0 ppid=1 pid=1005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:19.064000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Sep 6 00:14:09.927959 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-09-06T00:14:09Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 6 00:14:18.445247 systemd[1]: Queued start job for default target multi-user.target. Sep 6 00:14:09.929626 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-09-06T00:14:09Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 6 00:14:18.445264 systemd[1]: Unnecessary job was removed for dev-vda6.device. Sep 6 00:14:19.078733 systemd[1]: Started systemd-journald.service. Sep 6 00:14:09.929652 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-09-06T00:14:09Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 6 00:14:18.462993 systemd[1]: systemd-journald.service: Deactivated successfully. Sep 6 00:14:09.929696 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-09-06T00:14:09Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Sep 6 00:14:09.929709 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-09-06T00:14:09Z" level=debug msg="skipped missing lower profile" missing profile=oem Sep 6 00:14:09.929765 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-09-06T00:14:09Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Sep 6 00:14:09.929785 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-09-06T00:14:09Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Sep 6 00:14:09.930109 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-09-06T00:14:09Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Sep 6 00:14:09.930161 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-09-06T00:14:09Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 6 00:14:09.930180 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-09-06T00:14:09Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 6 00:14:19.078000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:09.936053 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-09-06T00:14:09Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Sep 6 00:14:09.936095 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-09-06T00:14:09Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Sep 6 00:14:09.936119 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-09-06T00:14:09Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Sep 6 00:14:09.936135 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-09-06T00:14:09Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Sep 6 00:14:09.936159 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-09-06T00:14:09Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Sep 6 00:14:09.936174 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-09-06T00:14:09Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Sep 6 00:14:17.744928 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-09-06T00:14:17Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 6 00:14:17.745352 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-09-06T00:14:17Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 6 00:14:17.745562 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-09-06T00:14:17Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 6 00:14:17.745880 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-09-06T00:14:17Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 6 00:14:17.745963 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-09-06T00:14:17Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Sep 6 00:14:17.746103 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-09-06T00:14:17Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Sep 6 00:14:19.082202 systemd[1]: Mounted media.mount. Sep 6 00:14:19.083289 systemd[1]: Mounted sys-kernel-debug.mount. Sep 6 00:14:19.085992 systemd[1]: Mounted sys-kernel-tracing.mount. Sep 6 00:14:19.087946 systemd[1]: Mounted tmp.mount. Sep 6 00:14:19.095149 systemd[1]: Finished flatcar-tmpfiles.service. Sep 6 00:14:19.095000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:19.097382 systemd[1]: Finished kmod-static-nodes.service. Sep 6 00:14:19.098000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:19.101184 systemd[1]: modprobe@configfs.service: Deactivated successfully. Sep 6 00:14:19.101936 systemd[1]: Finished modprobe@configfs.service. Sep 6 00:14:19.107000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:19.107000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:19.110399 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 00:14:19.110869 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 00:14:19.112000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:19.112000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:19.115172 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 6 00:14:19.116106 systemd[1]: Finished modprobe@drm.service. Sep 6 00:14:19.116000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:19.116000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:19.118223 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 00:14:19.118401 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 00:14:19.119000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:19.119000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:19.120092 systemd[1]: modprobe@fuse.service: Deactivated successfully. Sep 6 00:14:19.120265 systemd[1]: Finished modprobe@fuse.service. Sep 6 00:14:19.121000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:19.121000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:19.121613 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 00:14:19.121844 systemd[1]: Finished modprobe@loop.service. Sep 6 00:14:19.122000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:19.123000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:19.123377 systemd[1]: Finished systemd-modules-load.service. Sep 6 00:14:19.124000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:19.125062 systemd[1]: Finished systemd-network-generator.service. Sep 6 00:14:19.126000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:19.126868 systemd[1]: Finished systemd-remount-fs.service. Sep 6 00:14:19.127000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:19.128643 systemd[1]: Reached target network-pre.target. Sep 6 00:14:19.131529 systemd[1]: Mounting sys-fs-fuse-connections.mount... Sep 6 00:14:19.134257 systemd[1]: Mounting sys-kernel-config.mount... Sep 6 00:14:19.135696 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Sep 6 00:14:19.138853 systemd[1]: Starting systemd-hwdb-update.service... Sep 6 00:14:19.162108 systemd[1]: Starting systemd-journal-flush.service... Sep 6 00:14:19.163280 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 6 00:14:19.165100 systemd[1]: Starting systemd-random-seed.service... Sep 6 00:14:19.169279 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 6 00:14:19.171162 systemd[1]: Starting systemd-sysctl.service... Sep 6 00:14:19.175113 systemd[1]: Starting systemd-sysusers.service... Sep 6 00:14:19.181267 systemd[1]: Mounted sys-fs-fuse-connections.mount. Sep 6 00:14:19.182468 systemd[1]: Mounted sys-kernel-config.mount. Sep 6 00:14:19.188015 systemd[1]: Finished systemd-random-seed.service. Sep 6 00:14:19.188000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:19.189551 systemd[1]: Reached target first-boot-complete.target. Sep 6 00:14:19.209885 systemd-journald[1005]: Time spent on flushing to /var/log/journal/24d4b777d1c44c4dad95afc5afd781c6 is 50.982ms for 1191 entries. Sep 6 00:14:19.209885 systemd-journald[1005]: System Journal (/var/log/journal/24d4b777d1c44c4dad95afc5afd781c6) is 8.0M, max 195.6M, 187.6M free. Sep 6 00:14:19.287260 systemd-journald[1005]: Received client request to flush runtime journal. Sep 6 00:14:19.244000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:19.246154 systemd[1]: Finished systemd-udev-trigger.service. Sep 6 00:14:19.264173 systemd[1]: Starting systemd-udev-settle.service... Sep 6 00:14:19.288599 udevadm[1033]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Sep 6 00:14:19.291393 systemd[1]: Finished systemd-journal-flush.service. Sep 6 00:14:19.294000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:19.296184 systemd[1]: Finished systemd-sysctl.service. Sep 6 00:14:19.298000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:19.326769 systemd[1]: Finished systemd-sysusers.service. Sep 6 00:14:19.329000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:20.721073 systemd[1]: Finished systemd-hwdb-update.service. Sep 6 00:14:20.733000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:20.735000 audit: BPF prog-id=21 op=LOAD Sep 6 00:14:20.735000 audit: BPF prog-id=22 op=LOAD Sep 6 00:14:20.735000 audit: BPF prog-id=7 op=UNLOAD Sep 6 00:14:20.736000 audit: BPF prog-id=8 op=UNLOAD Sep 6 00:14:20.736958 systemd[1]: Starting systemd-udevd.service... Sep 6 00:14:20.769165 systemd-udevd[1036]: Using default interface naming scheme 'v252'. Sep 6 00:14:20.872314 systemd[1]: Started systemd-udevd.service. Sep 6 00:14:20.873000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:20.886000 audit: BPF prog-id=23 op=LOAD Sep 6 00:14:20.893582 systemd[1]: Starting systemd-networkd.service... Sep 6 00:14:20.923851 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Sep 6 00:14:20.938000 audit: BPF prog-id=24 op=LOAD Sep 6 00:14:20.943000 audit: BPF prog-id=25 op=LOAD Sep 6 00:14:20.960000 audit: BPF prog-id=26 op=LOAD Sep 6 00:14:20.962709 systemd[1]: Starting systemd-userdbd.service... Sep 6 00:14:21.003545 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 6 00:14:21.020041 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Sep 6 00:14:21.026685 kernel: ACPI: button: Power Button [PWRF] Sep 6 00:14:21.036295 systemd[1]: Started systemd-userdbd.service. Sep 6 00:14:21.037000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:21.066000 audit[1053]: AVC avc: denied { confidentiality } for pid=1053 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Sep 6 00:14:21.066000 audit[1053]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55c766179420 a1=338ec a2=7f1ba2455bc5 a3=5 items=110 ppid=1036 pid=1053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:21.066000 audit: CWD cwd="/" Sep 6 00:14:21.066000 audit: PATH item=0 name=(null) inode=2052 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=1 name=(null) inode=15163 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=2 name=(null) inode=15163 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=3 name=(null) inode=15164 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=4 name=(null) inode=15163 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=5 name=(null) inode=15165 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=6 name=(null) inode=15163 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=7 name=(null) inode=15166 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=8 name=(null) inode=15166 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=9 name=(null) inode=15167 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=10 name=(null) inode=15166 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=11 name=(null) inode=15168 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=12 name=(null) inode=15166 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=13 name=(null) inode=15169 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=14 name=(null) inode=15166 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=15 name=(null) inode=15170 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=16 name=(null) inode=15166 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=17 name=(null) inode=15171 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=18 name=(null) inode=15163 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=19 name=(null) inode=15172 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=20 name=(null) inode=15172 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=21 name=(null) inode=15173 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=22 name=(null) inode=15172 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=23 name=(null) inode=15174 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=24 name=(null) inode=15172 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=25 name=(null) inode=15175 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=26 name=(null) inode=15172 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=27 name=(null) inode=15176 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=28 name=(null) inode=15172 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=29 name=(null) inode=15177 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=30 name=(null) inode=15163 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=31 name=(null) inode=15178 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=32 name=(null) inode=15178 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=33 name=(null) inode=15179 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=34 name=(null) inode=15178 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=35 name=(null) inode=15180 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=36 name=(null) inode=15178 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=37 name=(null) inode=15181 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=38 name=(null) inode=15178 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=39 name=(null) inode=15182 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=40 name=(null) inode=15178 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=41 name=(null) inode=15183 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=42 name=(null) inode=15163 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=43 name=(null) inode=15184 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=44 name=(null) inode=15184 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=45 name=(null) inode=15185 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=46 name=(null) inode=15184 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=47 name=(null) inode=15186 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=48 name=(null) inode=15184 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=49 name=(null) inode=15187 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=50 name=(null) inode=15184 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=51 name=(null) inode=15188 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=52 name=(null) inode=15184 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=53 name=(null) inode=15189 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=54 name=(null) inode=2052 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=55 name=(null) inode=15190 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=56 name=(null) inode=15190 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=57 name=(null) inode=15191 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=58 name=(null) inode=15190 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=59 name=(null) inode=15192 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=60 name=(null) inode=15190 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=61 name=(null) inode=15193 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=62 name=(null) inode=15193 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=63 name=(null) inode=15194 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=64 name=(null) inode=15193 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=65 name=(null) inode=15195 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=66 name=(null) inode=15193 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=67 name=(null) inode=15196 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=68 name=(null) inode=15193 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=69 name=(null) inode=15197 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=70 name=(null) inode=15193 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=71 name=(null) inode=15198 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=72 name=(null) inode=15190 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=73 name=(null) inode=15199 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=74 name=(null) inode=15199 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=75 name=(null) inode=15200 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=76 name=(null) inode=15199 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=77 name=(null) inode=15201 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=78 name=(null) inode=15199 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=79 name=(null) inode=15202 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=80 name=(null) inode=15199 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=81 name=(null) inode=15203 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=82 name=(null) inode=15199 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=83 name=(null) inode=15204 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=84 name=(null) inode=15190 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=85 name=(null) inode=15205 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=86 name=(null) inode=15205 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=87 name=(null) inode=15206 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=88 name=(null) inode=15205 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=89 name=(null) inode=15207 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=90 name=(null) inode=15205 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=91 name=(null) inode=15208 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=92 name=(null) inode=15205 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=93 name=(null) inode=15209 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=94 name=(null) inode=15205 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=95 name=(null) inode=15210 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=96 name=(null) inode=15190 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=97 name=(null) inode=15211 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=98 name=(null) inode=15211 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=99 name=(null) inode=15212 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=100 name=(null) inode=15211 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=101 name=(null) inode=15213 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=102 name=(null) inode=15211 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=103 name=(null) inode=15214 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=104 name=(null) inode=15211 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=105 name=(null) inode=15215 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=106 name=(null) inode=15211 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=107 name=(null) inode=15216 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PATH item=109 name=(null) inode=15217 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:14:21.066000 audit: PROCTITLE proctitle="(udev-worker)" Sep 6 00:14:21.106153 kernel: i801_smbus 0000:00:1f.3: Enabling SMBus device Sep 6 00:14:21.112090 kernel: i801_smbus 0000:00:1f.3: SMBus using PCI interrupt Sep 6 00:14:21.112284 kernel: i2c i2c-0: 1/1 memory slots populated (from DMI) Sep 6 00:14:21.112473 kernel: i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD Sep 6 00:14:21.131157 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Sep 6 00:14:21.131587 systemd-networkd[1055]: lo: Link UP Sep 6 00:14:21.131610 systemd-networkd[1055]: lo: Gained carrier Sep 6 00:14:21.132366 systemd-networkd[1055]: Enumeration completed Sep 6 00:14:21.132531 systemd-networkd[1055]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 6 00:14:21.132537 systemd[1]: Started systemd-networkd.service. Sep 6 00:14:21.134000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:21.135397 systemd-networkd[1055]: eth0: Link UP Sep 6 00:14:21.135525 systemd-networkd[1055]: eth0: Gained carrier Sep 6 00:14:21.139029 kernel: mousedev: PS/2 mouse device common for all mice Sep 6 00:14:21.783415 systemd-networkd[1055]: eth0: DHCPv4 address 10.0.0.22/16, gateway 10.0.0.1 acquired from 10.0.0.1 Sep 6 00:14:21.792968 kernel: kvm: Nested Virtualization enabled Sep 6 00:14:21.793178 kernel: SVM: kvm: Nested Paging enabled Sep 6 00:14:21.793262 kernel: SVM: Virtual VMLOAD VMSAVE supported Sep 6 00:14:21.793294 kernel: SVM: Virtual GIF supported Sep 6 00:14:21.849057 kernel: EDAC MC: Ver: 3.0.0 Sep 6 00:14:21.881855 systemd[1]: Finished systemd-udev-settle.service. Sep 6 00:14:21.884000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:21.887467 systemd[1]: Starting lvm2-activation-early.service... Sep 6 00:14:21.985614 lvm[1072]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 6 00:14:22.017661 systemd[1]: Finished lvm2-activation-early.service. Sep 6 00:14:22.019000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:22.019334 systemd[1]: Reached target cryptsetup.target. Sep 6 00:14:22.022326 systemd[1]: Starting lvm2-activation.service... Sep 6 00:14:22.032215 lvm[1073]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 6 00:14:22.064590 systemd[1]: Finished lvm2-activation.service. Sep 6 00:14:22.066000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:22.066747 systemd[1]: Reached target local-fs-pre.target. Sep 6 00:14:22.068060 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Sep 6 00:14:22.068105 systemd[1]: Reached target local-fs.target. Sep 6 00:14:22.070545 systemd[1]: Reached target machines.target. Sep 6 00:14:22.075759 systemd[1]: Starting ldconfig.service... Sep 6 00:14:22.078993 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 00:14:22.079108 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 00:14:22.080882 systemd[1]: Starting systemd-boot-update.service... Sep 6 00:14:22.089506 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Sep 6 00:14:22.096777 systemd[1]: Starting systemd-machine-id-commit.service... Sep 6 00:14:22.099893 systemd[1]: Starting systemd-sysext.service... Sep 6 00:14:22.102804 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1075 (bootctl) Sep 6 00:14:22.105357 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Sep 6 00:14:22.121093 systemd[1]: Unmounting usr-share-oem.mount... Sep 6 00:14:22.127735 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Sep 6 00:14:22.131000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:22.135073 systemd[1]: usr-share-oem.mount: Deactivated successfully. Sep 6 00:14:22.135388 systemd[1]: Unmounted usr-share-oem.mount. Sep 6 00:14:22.179043 kernel: loop0: detected capacity change from 0 to 224512 Sep 6 00:14:22.437200 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Sep 6 00:14:22.438143 systemd[1]: Finished systemd-machine-id-commit.service. Sep 6 00:14:22.437000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:22.467944 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Sep 6 00:14:22.468112 systemd-fsck[1084]: fsck.fat 4.2 (2021-01-31) Sep 6 00:14:22.468112 systemd-fsck[1084]: /dev/vda1: 791 files, 120781/258078 clusters Sep 6 00:14:22.470774 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Sep 6 00:14:22.472000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:22.665032 systemd[1]: Mounting boot.mount... Sep 6 00:14:22.830257 systemd-networkd[1055]: eth0: Gained IPv6LL Sep 6 00:14:22.839056 systemd[1]: Mounted boot.mount. Sep 6 00:14:22.853011 kernel: loop1: detected capacity change from 0 to 224512 Sep 6 00:14:22.868926 systemd[1]: Finished systemd-boot-update.service. Sep 6 00:14:22.871000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:22.885222 (sd-sysext)[1089]: Using extensions 'kubernetes'. Sep 6 00:14:22.885815 (sd-sysext)[1089]: Merged extensions into '/usr'. Sep 6 00:14:22.936070 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 6 00:14:22.938309 systemd[1]: Mounting usr-share-oem.mount... Sep 6 00:14:22.940094 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 00:14:22.942251 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 00:14:22.945303 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 00:14:22.951021 systemd[1]: Starting modprobe@loop.service... Sep 6 00:14:22.952188 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 00:14:22.952361 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 00:14:22.952535 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 6 00:14:22.956100 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 00:14:22.956299 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 00:14:22.958244 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 00:14:22.958400 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 00:14:22.962873 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 6 00:14:22.954000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:22.954000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:22.961000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:22.961000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:22.972000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:22.972000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:22.973325 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 00:14:22.973546 systemd[1]: Finished modprobe@loop.service. Sep 6 00:14:22.975325 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 6 00:14:23.108057 systemd[1]: Mounted usr-share-oem.mount. Sep 6 00:14:23.121687 systemd[1]: Finished systemd-sysext.service. Sep 6 00:14:23.127000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:23.139844 systemd[1]: Starting ensure-sysext.service... Sep 6 00:14:23.144048 systemd[1]: Starting systemd-tmpfiles-setup.service... Sep 6 00:14:23.160180 systemd[1]: Reloading. Sep 6 00:14:23.288820 /usr/lib/systemd/system-generators/torcx-generator[1115]: time="2025-09-06T00:14:23Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 6 00:14:23.288864 /usr/lib/systemd/system-generators/torcx-generator[1115]: time="2025-09-06T00:14:23Z" level=info msg="torcx already run" Sep 6 00:14:23.367415 systemd-tmpfiles[1096]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Sep 6 00:14:23.393664 systemd-tmpfiles[1096]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Sep 6 00:14:23.396558 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 6 00:14:23.396586 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 6 00:14:23.411587 systemd-tmpfiles[1096]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Sep 6 00:14:23.424638 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 6 00:14:23.457272 ldconfig[1074]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Sep 6 00:14:23.533000 audit: BPF prog-id=27 op=LOAD Sep 6 00:14:23.537547 kernel: kauditd_printk_skb: 183 callbacks suppressed Sep 6 00:14:23.537648 kernel: audit: type=1334 audit(1757117663.533:158): prog-id=27 op=LOAD Sep 6 00:14:23.538000 audit: BPF prog-id=28 op=LOAD Sep 6 00:14:23.540481 kernel: audit: type=1334 audit(1757117663.538:159): prog-id=28 op=LOAD Sep 6 00:14:23.540535 kernel: audit: type=1334 audit(1757117663.538:160): prog-id=21 op=UNLOAD Sep 6 00:14:23.538000 audit: BPF prog-id=21 op=UNLOAD Sep 6 00:14:23.545514 kernel: audit: type=1334 audit(1757117663.538:161): prog-id=22 op=UNLOAD Sep 6 00:14:23.538000 audit: BPF prog-id=22 op=UNLOAD Sep 6 00:14:23.549631 kernel: audit: type=1334 audit(1757117663.541:162): prog-id=29 op=LOAD Sep 6 00:14:23.541000 audit: BPF prog-id=29 op=LOAD Sep 6 00:14:23.541000 audit: BPF prog-id=24 op=UNLOAD Sep 6 00:14:23.552999 kernel: audit: type=1334 audit(1757117663.541:163): prog-id=24 op=UNLOAD Sep 6 00:14:23.556426 kernel: audit: type=1334 audit(1757117663.546:164): prog-id=30 op=LOAD Sep 6 00:14:23.546000 audit: BPF prog-id=30 op=LOAD Sep 6 00:14:23.552000 audit: BPF prog-id=31 op=LOAD Sep 6 00:14:23.557992 kernel: audit: type=1334 audit(1757117663.552:165): prog-id=31 op=LOAD Sep 6 00:14:23.552000 audit: BPF prog-id=25 op=UNLOAD Sep 6 00:14:23.562197 kernel: audit: type=1334 audit(1757117663.552:166): prog-id=25 op=UNLOAD Sep 6 00:14:23.562956 kernel: audit: type=1334 audit(1757117663.552:167): prog-id=26 op=UNLOAD Sep 6 00:14:23.552000 audit: BPF prog-id=26 op=UNLOAD Sep 6 00:14:23.557000 audit: BPF prog-id=32 op=LOAD Sep 6 00:14:23.557000 audit: BPF prog-id=18 op=UNLOAD Sep 6 00:14:23.559000 audit: BPF prog-id=33 op=LOAD Sep 6 00:14:23.561000 audit: BPF prog-id=34 op=LOAD Sep 6 00:14:23.561000 audit: BPF prog-id=19 op=UNLOAD Sep 6 00:14:23.561000 audit: BPF prog-id=20 op=UNLOAD Sep 6 00:14:23.564000 audit: BPF prog-id=35 op=LOAD Sep 6 00:14:23.564000 audit: BPF prog-id=23 op=UNLOAD Sep 6 00:14:23.568347 systemd[1]: Finished ldconfig.service. Sep 6 00:14:23.572000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:23.594531 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 6 00:14:23.594854 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 00:14:23.601576 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 00:14:23.617236 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 00:14:23.628008 systemd[1]: Starting modprobe@loop.service... Sep 6 00:14:23.637156 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 00:14:23.637358 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 00:14:23.637481 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 6 00:14:23.638731 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 00:14:23.638903 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 00:14:23.644000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:23.644000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:23.645300 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 00:14:23.649724 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 00:14:23.657000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:23.657000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:23.658787 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 00:14:23.659033 systemd[1]: Finished modprobe@loop.service. Sep 6 00:14:23.662000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:23.662000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:23.666357 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 6 00:14:23.666689 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 00:14:23.669288 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 00:14:23.675047 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 00:14:23.678438 systemd[1]: Starting modprobe@loop.service... Sep 6 00:14:23.679467 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 00:14:23.679668 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 00:14:23.679855 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 6 00:14:23.682640 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 00:14:23.682851 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 00:14:23.683000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:23.683000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:23.684740 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 00:14:23.684917 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 00:14:23.685000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:23.685000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:23.687374 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 00:14:23.687570 systemd[1]: Finished modprobe@loop.service. Sep 6 00:14:23.689000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:23.689000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:23.699730 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 6 00:14:23.700116 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 00:14:23.705345 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 00:14:23.813972 systemd[1]: Starting modprobe@drm.service... Sep 6 00:14:23.817215 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 00:14:23.820915 systemd[1]: Starting modprobe@loop.service... Sep 6 00:14:23.824043 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 00:14:23.824195 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 00:14:23.826404 systemd[1]: Starting systemd-networkd-wait-online.service... Sep 6 00:14:23.828112 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 6 00:14:23.831679 systemd[1]: Finished systemd-tmpfiles-setup.service. Sep 6 00:14:23.835000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:23.835944 systemd[1]: Finished ensure-sysext.service. Sep 6 00:14:23.837000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:23.838026 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 00:14:23.838229 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 00:14:23.839000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:23.839000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:23.839768 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 6 00:14:23.839968 systemd[1]: Finished modprobe@drm.service. Sep 6 00:14:23.841000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:23.841000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:23.842094 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 00:14:23.842294 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 00:14:23.843000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:23.843000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:23.847333 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 00:14:23.847661 systemd[1]: Finished modprobe@loop.service. Sep 6 00:14:23.850000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:23.850000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:23.855608 systemd[1]: Starting audit-rules.service... Sep 6 00:14:23.858362 systemd[1]: Starting clean-ca-certificates.service... Sep 6 00:14:23.862154 systemd[1]: Starting systemd-journal-catalog-update.service... Sep 6 00:14:23.864767 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 6 00:14:23.864887 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 6 00:14:23.873000 audit: BPF prog-id=36 op=LOAD Sep 6 00:14:23.877396 systemd[1]: Starting systemd-resolved.service... Sep 6 00:14:23.882000 audit: BPF prog-id=37 op=LOAD Sep 6 00:14:23.884330 systemd[1]: Starting systemd-timesyncd.service... Sep 6 00:14:23.959423 systemd[1]: Starting systemd-update-utmp.service... Sep 6 00:14:23.961679 systemd[1]: Finished clean-ca-certificates.service. Sep 6 00:14:23.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:23.964024 systemd[1]: Finished systemd-journal-catalog-update.service. Sep 6 00:14:23.964000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:23.970000 audit[1181]: SYSTEM_BOOT pid=1181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Sep 6 00:14:23.971962 systemd[1]: Starting systemd-update-done.service... Sep 6 00:14:23.973331 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 6 00:14:23.981177 systemd[1]: Finished systemd-update-utmp.service. Sep 6 00:14:23.981000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:23.983885 systemd[1]: Finished systemd-update-done.service. Sep 6 00:14:23.983000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:23.999000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Sep 6 00:14:23.999000 audit[1190]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe412c77b0 a2=420 a3=0 items=0 ppid=1169 pid=1190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:23.999000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Sep 6 00:14:24.001207 augenrules[1190]: No rules Sep 6 00:14:24.002087 systemd[1]: Finished audit-rules.service. Sep 6 00:14:24.047291 systemd[1]: Started systemd-timesyncd.service. Sep 6 00:14:24.048136 systemd-timesyncd[1179]: Contacted time server 10.0.0.1:123 (10.0.0.1). Sep 6 00:14:24.048184 systemd-timesyncd[1179]: Initial clock synchronization to Sat 2025-09-06 00:14:23.950964 UTC. Sep 6 00:14:24.049047 systemd[1]: Reached target time-set.target. Sep 6 00:14:24.082769 systemd-resolved[1178]: Positive Trust Anchors: Sep 6 00:14:24.082796 systemd-resolved[1178]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 6 00:14:24.082837 systemd-resolved[1178]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 6 00:14:24.406084 systemd-resolved[1178]: Defaulting to hostname 'linux'. Sep 6 00:14:24.409858 systemd[1]: Started systemd-resolved.service. Sep 6 00:14:24.413948 systemd[1]: Reached target network.target. Sep 6 00:14:24.415214 systemd[1]: Reached target nss-lookup.target. Sep 6 00:14:24.416391 systemd[1]: Reached target sysinit.target. Sep 6 00:14:24.418241 systemd[1]: Started motdgen.path. Sep 6 00:14:24.420440 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Sep 6 00:14:24.422955 systemd[1]: Started logrotate.timer. Sep 6 00:14:24.425390 systemd[1]: Started mdadm.timer. Sep 6 00:14:24.427476 systemd[1]: Started systemd-tmpfiles-clean.timer. Sep 6 00:14:24.428842 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Sep 6 00:14:24.428879 systemd[1]: Reached target paths.target. Sep 6 00:14:24.429860 systemd[1]: Reached target timers.target. Sep 6 00:14:24.431299 systemd[1]: Listening on dbus.socket. Sep 6 00:14:24.434432 systemd[1]: Starting docker.socket... Sep 6 00:14:24.448917 systemd[1]: Listening on sshd.socket. Sep 6 00:14:24.453901 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 00:14:24.460347 systemd[1]: Listening on docker.socket. Sep 6 00:14:24.463997 systemd[1]: Reached target sockets.target. Sep 6 00:14:24.465111 systemd[1]: Reached target basic.target. Sep 6 00:14:24.466175 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 6 00:14:24.466217 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 6 00:14:24.467813 systemd[1]: Starting containerd.service... Sep 6 00:14:24.475276 systemd[1]: Starting dbus.service... Sep 6 00:14:24.479591 systemd[1]: Starting enable-oem-cloudinit.service... Sep 6 00:14:24.484267 systemd[1]: Starting extend-filesystems.service... Sep 6 00:14:24.487378 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Sep 6 00:14:24.490757 jq[1200]: false Sep 6 00:14:24.489150 systemd[1]: Starting motdgen.service... Sep 6 00:14:24.494256 systemd[1]: Starting prepare-helm.service... Sep 6 00:14:24.499325 systemd[1]: Starting ssh-key-proc-cmdline.service... Sep 6 00:14:24.503845 systemd[1]: Starting sshd-keygen.service... Sep 6 00:14:24.520696 extend-filesystems[1201]: Found loop1 Sep 6 00:14:24.520696 extend-filesystems[1201]: Found sr0 Sep 6 00:14:24.520696 extend-filesystems[1201]: Found vda Sep 6 00:14:24.520696 extend-filesystems[1201]: Found vda1 Sep 6 00:14:24.520696 extend-filesystems[1201]: Found vda2 Sep 6 00:14:24.520696 extend-filesystems[1201]: Found vda3 Sep 6 00:14:24.520696 extend-filesystems[1201]: Found usr Sep 6 00:14:24.520696 extend-filesystems[1201]: Found vda4 Sep 6 00:14:24.520696 extend-filesystems[1201]: Found vda6 Sep 6 00:14:24.520696 extend-filesystems[1201]: Found vda7 Sep 6 00:14:24.520696 extend-filesystems[1201]: Found vda9 Sep 6 00:14:24.520696 extend-filesystems[1201]: Checking size of /dev/vda9 Sep 6 00:14:24.541588 systemd[1]: Starting systemd-logind.service... Sep 6 00:14:24.547802 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 00:14:24.548137 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Sep 6 00:14:24.576589 jq[1221]: true Sep 6 00:14:24.549953 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Sep 6 00:14:24.553000 systemd[1]: Starting update-engine.service... Sep 6 00:14:24.576944 dbus-daemon[1199]: [system] SELinux support is enabled Sep 6 00:14:24.557271 systemd[1]: Starting update-ssh-keys-after-ignition.service... Sep 6 00:14:24.560950 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Sep 6 00:14:24.561237 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Sep 6 00:14:24.561657 systemd[1]: motdgen.service: Deactivated successfully. Sep 6 00:14:24.561878 systemd[1]: Finished motdgen.service. Sep 6 00:14:24.564224 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Sep 6 00:14:24.564486 systemd[1]: Finished ssh-key-proc-cmdline.service. Sep 6 00:14:24.577246 systemd[1]: Started dbus.service. Sep 6 00:14:24.585993 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Sep 6 00:14:24.586052 systemd[1]: Reached target system-config.target. Sep 6 00:14:24.587324 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Sep 6 00:14:24.587354 systemd[1]: Reached target user-config.target. Sep 6 00:14:24.589888 extend-filesystems[1201]: Resized partition /dev/vda9 Sep 6 00:14:24.591800 tar[1223]: linux-amd64/LICENSE Sep 6 00:14:24.591800 tar[1223]: linux-amd64/helm Sep 6 00:14:24.595398 jq[1224]: true Sep 6 00:14:24.601434 extend-filesystems[1229]: resize2fs 1.46.5 (30-Dec-2021) Sep 6 00:14:24.617490 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Sep 6 00:14:24.673321 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Sep 6 00:14:24.844357 extend-filesystems[1229]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Sep 6 00:14:24.844357 extend-filesystems[1229]: old_desc_blocks = 1, new_desc_blocks = 1 Sep 6 00:14:24.844357 extend-filesystems[1229]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Sep 6 00:14:24.729603 systemd[1]: extend-filesystems.service: Deactivated successfully. Sep 6 00:14:24.870083 update_engine[1220]: I0906 00:14:24.846011 1220 main.cc:92] Flatcar Update Engine starting Sep 6 00:14:24.870083 update_engine[1220]: I0906 00:14:24.862900 1220 update_check_scheduler.cc:74] Next update check in 4m0s Sep 6 00:14:24.870461 extend-filesystems[1201]: Resized filesystem in /dev/vda9 Sep 6 00:14:24.729839 systemd[1]: Finished extend-filesystems.service. Sep 6 00:14:24.856100 systemd[1]: Started update-engine.service. Sep 6 00:14:24.861054 systemd[1]: Started locksmithd.service. Sep 6 00:14:24.880617 systemd-logind[1218]: Watching system buttons on /dev/input/event1 (Power Button) Sep 6 00:14:24.881290 systemd-logind[1218]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Sep 6 00:14:24.881700 systemd-logind[1218]: New seat seat0. Sep 6 00:14:24.885801 systemd[1]: Started systemd-logind.service. Sep 6 00:14:24.905651 bash[1259]: Updated "/home/core/.ssh/authorized_keys" Sep 6 00:14:24.903814 systemd[1]: Finished update-ssh-keys-after-ignition.service. Sep 6 00:14:24.970171 env[1225]: time="2025-09-06T00:14:24.922971535Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Sep 6 00:14:25.079023 env[1225]: time="2025-09-06T00:14:25.078895605Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Sep 6 00:14:25.079485 env[1225]: time="2025-09-06T00:14:25.079458300Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Sep 6 00:14:25.081850 env[1225]: time="2025-09-06T00:14:25.081805520Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.190-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Sep 6 00:14:25.082018 env[1225]: time="2025-09-06T00:14:25.081953136Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Sep 6 00:14:25.082401 env[1225]: time="2025-09-06T00:14:25.082371609Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 6 00:14:25.082494 env[1225]: time="2025-09-06T00:14:25.082473521Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Sep 6 00:14:25.082608 env[1225]: time="2025-09-06T00:14:25.082585290Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Sep 6 00:14:25.082688 env[1225]: time="2025-09-06T00:14:25.082667774Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Sep 6 00:14:25.082850 env[1225]: time="2025-09-06T00:14:25.082829335Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Sep 6 00:14:25.083244 env[1225]: time="2025-09-06T00:14:25.083224155Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Sep 6 00:14:25.083450 env[1225]: time="2025-09-06T00:14:25.083427324Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 6 00:14:25.083554 env[1225]: time="2025-09-06T00:14:25.083532037Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Sep 6 00:14:25.083765 env[1225]: time="2025-09-06T00:14:25.083739106Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Sep 6 00:14:25.083866 env[1225]: time="2025-09-06T00:14:25.083841720Z" level=info msg="metadata content store policy set" policy=shared Sep 6 00:14:25.097827 env[1225]: time="2025-09-06T00:14:25.097681844Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Sep 6 00:14:25.098123 env[1225]: time="2025-09-06T00:14:25.098095705Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Sep 6 00:14:25.098258 env[1225]: time="2025-09-06T00:14:25.098232267Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Sep 6 00:14:25.098470 env[1225]: time="2025-09-06T00:14:25.098439326Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Sep 6 00:14:25.098596 env[1225]: time="2025-09-06T00:14:25.098569207Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Sep 6 00:14:25.098730 env[1225]: time="2025-09-06T00:14:25.098705600Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Sep 6 00:14:25.098866 env[1225]: time="2025-09-06T00:14:25.098841083Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Sep 6 00:14:25.099015 env[1225]: time="2025-09-06T00:14:25.098971647Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Sep 6 00:14:25.099152 env[1225]: time="2025-09-06T00:14:25.099128171Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Sep 6 00:14:25.099287 env[1225]: time="2025-09-06T00:14:25.099261803Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Sep 6 00:14:25.099430 env[1225]: time="2025-09-06T00:14:25.099405411Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Sep 6 00:14:25.099569 env[1225]: time="2025-09-06T00:14:25.099543893Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Sep 6 00:14:25.099897 env[1225]: time="2025-09-06T00:14:25.099872678Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Sep 6 00:14:25.100153 env[1225]: time="2025-09-06T00:14:25.100128847Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Sep 6 00:14:25.100762 env[1225]: time="2025-09-06T00:14:25.100734962Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Sep 6 00:14:25.100901 env[1225]: time="2025-09-06T00:14:25.100874690Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Sep 6 00:14:25.101034 env[1225]: time="2025-09-06T00:14:25.101008005Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Sep 6 00:14:25.101229 env[1225]: time="2025-09-06T00:14:25.101201515Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Sep 6 00:14:25.101387 env[1225]: time="2025-09-06T00:14:25.101359950Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Sep 6 00:14:25.101505 env[1225]: time="2025-09-06T00:14:25.101477855Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Sep 6 00:14:25.101625 env[1225]: time="2025-09-06T00:14:25.101598502Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Sep 6 00:14:25.101751 env[1225]: time="2025-09-06T00:14:25.101724513Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Sep 6 00:14:25.101861 env[1225]: time="2025-09-06T00:14:25.101835272Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Sep 6 00:14:25.101990 env[1225]: time="2025-09-06T00:14:25.101942499Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Sep 6 00:14:25.102096 env[1225]: time="2025-09-06T00:14:25.102069747Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Sep 6 00:14:25.102220 env[1225]: time="2025-09-06T00:14:25.102194799Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Sep 6 00:14:25.102526 env[1225]: time="2025-09-06T00:14:25.102501503Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Sep 6 00:14:25.102636 env[1225]: time="2025-09-06T00:14:25.102609996Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Sep 6 00:14:25.102770 env[1225]: time="2025-09-06T00:14:25.102745587Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Sep 6 00:14:25.102877 env[1225]: time="2025-09-06T00:14:25.102850844Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Sep 6 00:14:25.103021 env[1225]: time="2025-09-06T00:14:25.102964652Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Sep 6 00:14:25.103138 env[1225]: time="2025-09-06T00:14:25.103111368Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Sep 6 00:14:25.103292 env[1225]: time="2025-09-06T00:14:25.103264279Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Sep 6 00:14:25.103442 env[1225]: time="2025-09-06T00:14:25.103416073Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Sep 6 00:14:25.103888 env[1225]: time="2025-09-06T00:14:25.103815850Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Sep 6 00:14:25.111231 env[1225]: time="2025-09-06T00:14:25.104211214Z" level=info msg="Connect containerd service" Sep 6 00:14:25.111231 env[1225]: time="2025-09-06T00:14:25.104288244Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Sep 6 00:14:25.111231 env[1225]: time="2025-09-06T00:14:25.105749011Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 6 00:14:25.111231 env[1225]: time="2025-09-06T00:14:25.105949865Z" level=info msg="Start subscribing containerd event" Sep 6 00:14:25.111231 env[1225]: time="2025-09-06T00:14:25.106095056Z" level=info msg="Start recovering state" Sep 6 00:14:25.111231 env[1225]: time="2025-09-06T00:14:25.106246494Z" level=info msg="Start event monitor" Sep 6 00:14:25.111231 env[1225]: time="2025-09-06T00:14:25.106282252Z" level=info msg="Start snapshots syncer" Sep 6 00:14:25.111231 env[1225]: time="2025-09-06T00:14:25.106298741Z" level=info msg="Start cni network conf syncer for default" Sep 6 00:14:25.111231 env[1225]: time="2025-09-06T00:14:25.106311518Z" level=info msg="Start streaming server" Sep 6 00:14:25.111231 env[1225]: time="2025-09-06T00:14:25.106253749Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Sep 6 00:14:25.111231 env[1225]: time="2025-09-06T00:14:25.106448238Z" level=info msg=serving... address=/run/containerd/containerd.sock Sep 6 00:14:25.111231 env[1225]: time="2025-09-06T00:14:25.108705760Z" level=info msg="containerd successfully booted in 0.186618s" Sep 6 00:14:25.106664 systemd[1]: Started containerd.service. Sep 6 00:14:25.419070 systemd[1]: Finished systemd-networkd-wait-online.service. Sep 6 00:14:25.420783 systemd[1]: Reached target network-online.target. Sep 6 00:14:25.424220 systemd[1]: Starting kubelet.service... Sep 6 00:14:25.553539 locksmithd[1260]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Sep 6 00:14:25.760990 sshd_keygen[1217]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Sep 6 00:14:25.952558 systemd[1]: Finished sshd-keygen.service. Sep 6 00:14:25.984945 systemd[1]: Starting issuegen.service... Sep 6 00:14:25.999530 systemd[1]: issuegen.service: Deactivated successfully. Sep 6 00:14:25.999777 systemd[1]: Finished issuegen.service. Sep 6 00:14:26.006754 systemd[1]: Starting systemd-user-sessions.service... Sep 6 00:14:26.090499 systemd[1]: Finished systemd-user-sessions.service. Sep 6 00:14:26.120267 systemd[1]: Started getty@tty1.service. Sep 6 00:14:26.129367 systemd[1]: Started serial-getty@ttyS0.service. Sep 6 00:14:26.137577 systemd[1]: Reached target getty.target. Sep 6 00:14:27.363813 tar[1223]: linux-amd64/README.md Sep 6 00:14:27.371916 systemd[1]: Finished prepare-helm.service. Sep 6 00:14:30.320178 systemd[1]: Started kubelet.service. Sep 6 00:14:30.329948 systemd[1]: Reached target multi-user.target. Sep 6 00:14:30.340155 systemd[1]: Starting systemd-update-utmp-runlevel.service... Sep 6 00:14:30.361473 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Sep 6 00:14:30.363501 systemd[1]: Finished systemd-update-utmp-runlevel.service. Sep 6 00:14:30.379381 systemd[1]: Startup finished in 2.108s (kernel) + 12.202s (initrd) + 20.835s (userspace) = 35.146s. Sep 6 00:14:31.910212 systemd[1]: Created slice system-sshd.slice. Sep 6 00:14:32.088681 systemd[1]: Started sshd@0-10.0.0.22:22-10.0.0.1:58666.service. Sep 6 00:14:32.189344 sshd[1299]: Accepted publickey for core from 10.0.0.1 port 58666 ssh2: RSA SHA256:mcWI8lWnD23EhgVbwJM01vCNerY3y/CLOw6SIUCzfEA Sep 6 00:14:32.192788 sshd[1299]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:14:32.236923 systemd-logind[1218]: New session 1 of user core. Sep 6 00:14:32.242273 systemd[1]: Created slice user-500.slice. Sep 6 00:14:32.256211 systemd[1]: Starting user-runtime-dir@500.service... Sep 6 00:14:32.308808 systemd[1]: Finished user-runtime-dir@500.service. Sep 6 00:14:32.351531 systemd[1]: Starting user@500.service... Sep 6 00:14:32.376049 (systemd)[1302]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:14:32.660359 systemd[1302]: Queued start job for default target default.target. Sep 6 00:14:32.661250 systemd[1302]: Reached target paths.target. Sep 6 00:14:32.661285 systemd[1302]: Reached target sockets.target. Sep 6 00:14:32.661303 systemd[1302]: Reached target timers.target. Sep 6 00:14:32.661319 systemd[1302]: Reached target basic.target. Sep 6 00:14:32.661392 systemd[1302]: Reached target default.target. Sep 6 00:14:32.661430 systemd[1302]: Startup finished in 233ms. Sep 6 00:14:32.661550 systemd[1]: Started user@500.service. Sep 6 00:14:32.672720 systemd[1]: Started session-1.scope. Sep 6 00:14:32.815133 systemd[1]: Started sshd@1-10.0.0.22:22-10.0.0.1:58676.service. Sep 6 00:14:32.920669 sshd[1312]: Accepted publickey for core from 10.0.0.1 port 58676 ssh2: RSA SHA256:mcWI8lWnD23EhgVbwJM01vCNerY3y/CLOw6SIUCzfEA Sep 6 00:14:32.936947 sshd[1312]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:14:32.946678 systemd-logind[1218]: New session 2 of user core. Sep 6 00:14:32.947332 systemd[1]: Started session-2.scope. Sep 6 00:14:33.045055 sshd[1312]: pam_unix(sshd:session): session closed for user core Sep 6 00:14:33.051804 systemd[1]: sshd@1-10.0.0.22:22-10.0.0.1:58676.service: Deactivated successfully. Sep 6 00:14:33.052797 systemd[1]: session-2.scope: Deactivated successfully. Sep 6 00:14:33.053743 systemd-logind[1218]: Session 2 logged out. Waiting for processes to exit. Sep 6 00:14:33.057562 systemd[1]: Started sshd@2-10.0.0.22:22-10.0.0.1:58682.service. Sep 6 00:14:33.059259 systemd-logind[1218]: Removed session 2. Sep 6 00:14:33.427675 sshd[1318]: Accepted publickey for core from 10.0.0.1 port 58682 ssh2: RSA SHA256:mcWI8lWnD23EhgVbwJM01vCNerY3y/CLOw6SIUCzfEA Sep 6 00:14:33.430256 sshd[1318]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:14:33.438950 systemd-logind[1218]: New session 3 of user core. Sep 6 00:14:33.443538 systemd[1]: Started session-3.scope. Sep 6 00:14:33.503940 kubelet[1291]: E0906 00:14:33.503815 1291 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 00:14:33.506539 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 00:14:33.506708 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 00:14:33.507052 systemd[1]: kubelet.service: Consumed 5.975s CPU time. Sep 6 00:14:33.521368 sshd[1318]: pam_unix(sshd:session): session closed for user core Sep 6 00:14:33.526074 systemd[1]: sshd@2-10.0.0.22:22-10.0.0.1:58682.service: Deactivated successfully. Sep 6 00:14:33.527215 systemd[1]: session-3.scope: Deactivated successfully. Sep 6 00:14:33.531520 systemd-logind[1218]: Session 3 logged out. Waiting for processes to exit. Sep 6 00:14:33.539365 systemd[1]: Started sshd@3-10.0.0.22:22-10.0.0.1:58688.service. Sep 6 00:14:33.541969 systemd-logind[1218]: Removed session 3. Sep 6 00:14:33.587213 sshd[1326]: Accepted publickey for core from 10.0.0.1 port 58688 ssh2: RSA SHA256:mcWI8lWnD23EhgVbwJM01vCNerY3y/CLOw6SIUCzfEA Sep 6 00:14:33.593946 sshd[1326]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:14:33.610784 systemd-logind[1218]: New session 4 of user core. Sep 6 00:14:33.612198 systemd[1]: Started session-4.scope. Sep 6 00:14:33.700282 sshd[1326]: pam_unix(sshd:session): session closed for user core Sep 6 00:14:33.704413 systemd[1]: Started sshd@4-10.0.0.22:22-10.0.0.1:58704.service. Sep 6 00:14:33.706872 systemd[1]: sshd@3-10.0.0.22:22-10.0.0.1:58688.service: Deactivated successfully. Sep 6 00:14:33.710472 systemd[1]: session-4.scope: Deactivated successfully. Sep 6 00:14:33.711296 systemd-logind[1218]: Session 4 logged out. Waiting for processes to exit. Sep 6 00:14:33.721470 systemd-logind[1218]: Removed session 4. Sep 6 00:14:33.759623 sshd[1331]: Accepted publickey for core from 10.0.0.1 port 58704 ssh2: RSA SHA256:mcWI8lWnD23EhgVbwJM01vCNerY3y/CLOw6SIUCzfEA Sep 6 00:14:33.761610 sshd[1331]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:14:33.772615 systemd-logind[1218]: New session 5 of user core. Sep 6 00:14:33.773043 systemd[1]: Started session-5.scope. Sep 6 00:14:33.877959 sudo[1335]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Sep 6 00:14:33.878269 sudo[1335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 6 00:14:33.898077 dbus-daemon[1199]: \xd0\xdd2\u0008\xd6U: received setenforce notice (enforcing=1742603776) Sep 6 00:14:33.899574 sudo[1335]: pam_unix(sudo:session): session closed for user root Sep 6 00:14:33.908453 sshd[1331]: pam_unix(sshd:session): session closed for user core Sep 6 00:14:33.920045 systemd[1]: Started sshd@5-10.0.0.22:22-10.0.0.1:58708.service. Sep 6 00:14:33.926816 systemd[1]: sshd@4-10.0.0.22:22-10.0.0.1:58704.service: Deactivated successfully. Sep 6 00:14:33.927666 systemd[1]: session-5.scope: Deactivated successfully. Sep 6 00:14:33.928895 systemd-logind[1218]: Session 5 logged out. Waiting for processes to exit. Sep 6 00:14:33.930882 systemd-logind[1218]: Removed session 5. Sep 6 00:14:33.982726 sshd[1338]: Accepted publickey for core from 10.0.0.1 port 58708 ssh2: RSA SHA256:mcWI8lWnD23EhgVbwJM01vCNerY3y/CLOw6SIUCzfEA Sep 6 00:14:33.989159 sshd[1338]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:14:34.021070 systemd-logind[1218]: New session 6 of user core. Sep 6 00:14:34.022030 systemd[1]: Started session-6.scope. Sep 6 00:14:34.100545 sudo[1343]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Sep 6 00:14:34.100913 sudo[1343]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 6 00:14:34.111272 sudo[1343]: pam_unix(sudo:session): session closed for user root Sep 6 00:14:34.121554 sudo[1342]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Sep 6 00:14:34.121885 sudo[1342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 6 00:14:34.141045 systemd[1]: Stopping audit-rules.service... Sep 6 00:14:34.149000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 6 00:14:34.151491 auditctl[1346]: No rules Sep 6 00:14:34.151715 systemd[1]: audit-rules.service: Deactivated successfully. Sep 6 00:14:34.151933 systemd[1]: Stopped audit-rules.service. Sep 6 00:14:34.163033 kernel: kauditd_printk_skb: 41 callbacks suppressed Sep 6 00:14:34.163187 kernel: audit: type=1305 audit(1757117674.149:207): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 6 00:14:34.163234 kernel: audit: type=1300 audit(1757117674.149:207): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff5f8aa410 a2=420 a3=0 items=0 ppid=1 pid=1346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:34.149000 audit[1346]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff5f8aa410 a2=420 a3=0 items=0 ppid=1 pid=1346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:34.155144 systemd[1]: Starting audit-rules.service... Sep 6 00:14:34.149000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Sep 6 00:14:34.169573 kernel: audit: type=1327 audit(1757117674.149:207): proctitle=2F7362696E2F617564697463746C002D44 Sep 6 00:14:34.174935 kernel: audit: type=1131 audit(1757117674.150:208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:34.150000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:34.195621 augenrules[1363]: No rules Sep 6 00:14:34.196000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:34.197615 systemd[1]: Finished audit-rules.service. Sep 6 00:14:34.202192 sudo[1342]: pam_unix(sudo:session): session closed for user root Sep 6 00:14:34.207995 kernel: audit: type=1130 audit(1757117674.196:209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:34.208139 kernel: audit: type=1106 audit(1757117674.201:210): pid=1342 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:14:34.201000 audit[1342]: USER_END pid=1342 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:14:34.207405 sshd[1338]: pam_unix(sshd:session): session closed for user core Sep 6 00:14:34.212351 systemd[1]: Started sshd@6-10.0.0.22:22-10.0.0.1:58716.service. Sep 6 00:14:34.227894 kernel: audit: type=1104 audit(1757117674.201:211): pid=1342 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:14:34.201000 audit[1342]: CRED_DISP pid=1342 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:14:34.227440 systemd[1]: sshd@5-10.0.0.22:22-10.0.0.1:58708.service: Deactivated successfully. Sep 6 00:14:34.211000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.22:22-10.0.0.1:58716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:34.221000 audit[1338]: USER_END pid=1338 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:14:34.229529 systemd[1]: session-6.scope: Deactivated successfully. Sep 6 00:14:34.230841 systemd-logind[1218]: Session 6 logged out. Waiting for processes to exit. Sep 6 00:14:34.237808 systemd-logind[1218]: Removed session 6. Sep 6 00:14:34.242809 kernel: audit: type=1130 audit(1757117674.211:212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.22:22-10.0.0.1:58716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:34.242947 kernel: audit: type=1106 audit(1757117674.221:213): pid=1338 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:14:34.221000 audit[1338]: CRED_DISP pid=1338 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:14:34.250809 kernel: audit: type=1104 audit(1757117674.221:214): pid=1338 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:14:34.227000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.22:22-10.0.0.1:58708 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:34.280000 audit[1368]: USER_ACCT pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:14:34.285259 sshd[1368]: Accepted publickey for core from 10.0.0.1 port 58716 ssh2: RSA SHA256:mcWI8lWnD23EhgVbwJM01vCNerY3y/CLOw6SIUCzfEA Sep 6 00:14:34.284000 audit[1368]: CRED_ACQ pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:14:34.284000 audit[1368]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffad801340 a2=3 a3=0 items=0 ppid=1 pid=1368 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:34.284000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:14:34.286206 sshd[1368]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:14:34.308572 systemd-logind[1218]: New session 7 of user core. Sep 6 00:14:34.309625 systemd[1]: Started session-7.scope. Sep 6 00:14:34.361000 audit[1368]: USER_START pid=1368 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:14:34.363000 audit[1371]: CRED_ACQ pid=1371 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:14:34.436000 audit[1372]: USER_ACCT pid=1372 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:14:34.439700 sudo[1372]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Sep 6 00:14:34.438000 audit[1372]: CRED_REFR pid=1372 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:14:34.443653 sudo[1372]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 6 00:14:34.448000 audit[1372]: USER_START pid=1372 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:14:34.982210 systemd[1]: Starting docker.service... Sep 6 00:14:35.536256 env[1384]: time="2025-09-06T00:14:35.536144398Z" level=info msg="Starting up" Sep 6 00:14:35.541153 env[1384]: time="2025-09-06T00:14:35.541081202Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 6 00:14:35.541153 env[1384]: time="2025-09-06T00:14:35.541131016Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 6 00:14:35.541153 env[1384]: time="2025-09-06T00:14:35.541162055Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 6 00:14:35.541443 env[1384]: time="2025-09-06T00:14:35.541177864Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 6 00:14:35.548706 env[1384]: time="2025-09-06T00:14:35.548621046Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 6 00:14:35.548706 env[1384]: time="2025-09-06T00:14:35.548668982Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 6 00:14:35.548706 env[1384]: time="2025-09-06T00:14:35.548696905Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 6 00:14:35.548706 env[1384]: time="2025-09-06T00:14:35.548714562Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 6 00:14:35.656155 env[1384]: time="2025-09-06T00:14:35.656068474Z" level=info msg="Loading containers: start." Sep 6 00:14:35.795000 audit[1419]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1419 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:14:35.795000 audit[1419]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffeb6ae0760 a2=0 a3=7ffeb6ae074c items=0 ppid=1384 pid=1419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:35.795000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Sep 6 00:14:35.801000 audit[1421]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1421 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:14:35.801000 audit[1421]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffc72ed4490 a2=0 a3=7ffc72ed447c items=0 ppid=1384 pid=1421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:35.801000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Sep 6 00:14:35.806000 audit[1423]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1423 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:14:35.806000 audit[1423]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffec6470c40 a2=0 a3=7ffec6470c2c items=0 ppid=1384 pid=1423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:35.806000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 6 00:14:35.811000 audit[1425]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1425 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:14:35.811000 audit[1425]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffcedea01a0 a2=0 a3=7ffcedea018c items=0 ppid=1384 pid=1425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:35.811000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 6 00:14:35.816000 audit[1427]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1427 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:14:35.816000 audit[1427]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc421fd090 a2=0 a3=7ffc421fd07c items=0 ppid=1384 pid=1427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:35.816000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Sep 6 00:14:35.852000 audit[1432]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1432 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:14:35.852000 audit[1432]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffdfa3628f0 a2=0 a3=7ffdfa3628dc items=0 ppid=1384 pid=1432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:35.852000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Sep 6 00:14:35.873000 audit[1434]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:14:35.873000 audit[1434]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd817b9ee0 a2=0 a3=7ffd817b9ecc items=0 ppid=1384 pid=1434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:35.873000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Sep 6 00:14:35.877000 audit[1436]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1436 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:14:35.877000 audit[1436]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7fffafadae10 a2=0 a3=7fffafadadfc items=0 ppid=1384 pid=1436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:35.877000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Sep 6 00:14:35.880000 audit[1438]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1438 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:14:35.880000 audit[1438]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffda6aaa740 a2=0 a3=7ffda6aaa72c items=0 ppid=1384 pid=1438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:35.880000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 6 00:14:35.901000 audit[1442]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1442 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:14:35.901000 audit[1442]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffd94fc9400 a2=0 a3=7ffd94fc93ec items=0 ppid=1384 pid=1442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:35.901000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 6 00:14:35.908000 audit[1443]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1443 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:14:35.908000 audit[1443]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd7ab9fbd0 a2=0 a3=7ffd7ab9fbbc items=0 ppid=1384 pid=1443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:35.908000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 6 00:14:35.947474 kernel: Initializing XFRM netlink socket Sep 6 00:14:36.031775 env[1384]: time="2025-09-06T00:14:36.031663563Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Sep 6 00:14:36.103000 audit[1451]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1451 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:14:36.103000 audit[1451]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffce2bfd710 a2=0 a3=7ffce2bfd6fc items=0 ppid=1384 pid=1451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:36.103000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Sep 6 00:14:36.127000 audit[1454]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1454 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:14:36.127000 audit[1454]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7fffbef8bec0 a2=0 a3=7fffbef8beac items=0 ppid=1384 pid=1454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:36.127000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Sep 6 00:14:36.141000 audit[1457]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1457 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:14:36.141000 audit[1457]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd4e9b0d00 a2=0 a3=7ffd4e9b0cec items=0 ppid=1384 pid=1457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:36.141000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Sep 6 00:14:36.145000 audit[1459]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1459 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:14:36.145000 audit[1459]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd8537f210 a2=0 a3=7ffd8537f1fc items=0 ppid=1384 pid=1459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:36.145000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Sep 6 00:14:36.148000 audit[1461]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1461 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:14:36.148000 audit[1461]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffe8a286ae0 a2=0 a3=7ffe8a286acc items=0 ppid=1384 pid=1461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:36.148000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Sep 6 00:14:36.150000 audit[1463]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1463 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:14:36.150000 audit[1463]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffcc99c6c40 a2=0 a3=7ffcc99c6c2c items=0 ppid=1384 pid=1463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:36.150000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Sep 6 00:14:36.156000 audit[1465]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1465 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:14:36.156000 audit[1465]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffcaee61940 a2=0 a3=7ffcaee6192c items=0 ppid=1384 pid=1465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:36.156000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Sep 6 00:14:36.172000 audit[1468]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1468 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:14:36.172000 audit[1468]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffe42ca5ef0 a2=0 a3=7ffe42ca5edc items=0 ppid=1384 pid=1468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:36.172000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Sep 6 00:14:36.179000 audit[1470]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1470 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:14:36.179000 audit[1470]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffc7433b220 a2=0 a3=7ffc7433b20c items=0 ppid=1384 pid=1470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:36.179000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 6 00:14:36.182000 audit[1472]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1472 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:14:36.182000 audit[1472]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffcefa44d60 a2=0 a3=7ffcefa44d4c items=0 ppid=1384 pid=1472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:36.182000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 6 00:14:36.199000 audit[1474]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1474 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:14:36.199000 audit[1474]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff4b95ad80 a2=0 a3=7fff4b95ad6c items=0 ppid=1384 pid=1474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:36.199000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Sep 6 00:14:36.204472 systemd-networkd[1055]: docker0: Link UP Sep 6 00:14:36.248000 audit[1478]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1478 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:14:36.248000 audit[1478]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd35b074b0 a2=0 a3=7ffd35b0749c items=0 ppid=1384 pid=1478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:36.248000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 6 00:14:36.256000 audit[1479]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1479 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:14:36.256000 audit[1479]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffe678b58b0 a2=0 a3=7ffe678b589c items=0 ppid=1384 pid=1479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:14:36.256000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 6 00:14:36.261314 env[1384]: time="2025-09-06T00:14:36.261225324Z" level=info msg="Loading containers: done." Sep 6 00:14:36.327677 env[1384]: time="2025-09-06T00:14:36.327520417Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Sep 6 00:14:36.328284 env[1384]: time="2025-09-06T00:14:36.328238215Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Sep 6 00:14:36.328687 env[1384]: time="2025-09-06T00:14:36.328645241Z" level=info msg="Daemon has completed initialization" Sep 6 00:14:36.417000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:36.418262 systemd[1]: Started docker.service. Sep 6 00:14:36.432709 env[1384]: time="2025-09-06T00:14:36.432058922Z" level=info msg="API listen on /run/docker.sock" Sep 6 00:14:38.897483 env[1225]: time="2025-09-06T00:14:38.895156000Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.8\"" Sep 6 00:14:39.955475 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2783630821.mount: Deactivated successfully. Sep 6 00:14:43.535531 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Sep 6 00:14:43.535828 systemd[1]: Stopped kubelet.service. Sep 6 00:14:43.535954 systemd[1]: kubelet.service: Consumed 5.975s CPU time. Sep 6 00:14:43.534000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:43.539578 kernel: kauditd_printk_skb: 84 callbacks suppressed Sep 6 00:14:43.539656 kernel: audit: type=1130 audit(1757117683.534:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:43.539118 systemd[1]: Starting kubelet.service... Sep 6 00:14:43.549894 kernel: audit: type=1131 audit(1757117683.534:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:43.534000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:43.750649 systemd[1]: Started kubelet.service. Sep 6 00:14:43.748000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:43.756020 kernel: audit: type=1130 audit(1757117683.748:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:43.994025 kubelet[1520]: E0906 00:14:43.992858 1520 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 00:14:44.005597 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 00:14:44.005817 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 00:14:44.003000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 00:14:44.013021 kernel: audit: type=1131 audit(1757117684.003:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 00:14:46.508671 env[1225]: time="2025-09-06T00:14:46.508536046Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.32.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:14:46.516396 env[1225]: time="2025-09-06T00:14:46.514929991Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0d4edaa48e2f940c934e0f7cfd5209fc85e65ab5e842b980f41263d1764661f1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:14:46.527644 env[1225]: time="2025-09-06T00:14:46.526376981Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.32.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:14:46.528995 env[1225]: time="2025-09-06T00:14:46.528882249Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:6e1a2f9b24f69ee77d0c0edaf32b31fdbb5e1a613f4476272197e6e1e239050b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:14:46.532903 env[1225]: time="2025-09-06T00:14:46.531034515Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.8\" returns image reference \"sha256:0d4edaa48e2f940c934e0f7cfd5209fc85e65ab5e842b980f41263d1764661f1\"" Sep 6 00:14:46.535047 env[1225]: time="2025-09-06T00:14:46.533626612Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.8\"" Sep 6 00:14:51.028918 env[1225]: time="2025-09-06T00:14:51.028777724Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.32.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:14:51.035634 env[1225]: time="2025-09-06T00:14:51.035514108Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b248d0b0c74ad8230e0bae0cbed477560e8a1e8c7ef5f29b7e75c1f273c8a091,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:14:51.041044 env[1225]: time="2025-09-06T00:14:51.040911356Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.32.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:14:51.049644 env[1225]: time="2025-09-06T00:14:51.045528425Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:8788ccd28ceed9e2e5f8fc31375ef5771df8ea6e518b362c9a06f3cc709cd6c7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:14:51.049644 env[1225]: time="2025-09-06T00:14:51.046375766Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.8\" returns image reference \"sha256:b248d0b0c74ad8230e0bae0cbed477560e8a1e8c7ef5f29b7e75c1f273c8a091\"" Sep 6 00:14:51.054776 env[1225]: time="2025-09-06T00:14:51.054716025Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.8\"" Sep 6 00:14:54.032536 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Sep 6 00:14:54.046548 kernel: audit: type=1130 audit(1757117694.031:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:54.046630 kernel: audit: type=1131 audit(1757117694.031:254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:54.031000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:54.031000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:54.032843 systemd[1]: Stopped kubelet.service. Sep 6 00:14:54.039298 systemd[1]: Starting kubelet.service... Sep 6 00:14:54.787965 systemd[1]: Started kubelet.service. Sep 6 00:14:54.787000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:54.796295 kernel: audit: type=1130 audit(1757117694.787:255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:14:55.533105 kubelet[1533]: E0906 00:14:55.533016 1533 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 00:14:55.543867 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 00:14:55.544748 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 00:14:55.546000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 00:14:55.554466 env[1225]: time="2025-09-06T00:14:55.549616284Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.32.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:14:55.565878 kernel: audit: type=1131 audit(1757117695.546:256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 00:14:55.571710 env[1225]: time="2025-09-06T00:14:55.570259917Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2ac266f06c9a5a3d0d20ae482dbccb54d3be454d5ca49f48b528bdf5bae3e908,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:14:55.578300 env[1225]: time="2025-09-06T00:14:55.577652076Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.32.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:14:55.587758 env[1225]: time="2025-09-06T00:14:55.585919023Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:43c58bcbd1c7812dd19f8bfa5ae11093ebefd28699453ce86fc710869e155cd4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:14:55.591599 env[1225]: time="2025-09-06T00:14:55.588384983Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.8\" returns image reference \"sha256:2ac266f06c9a5a3d0d20ae482dbccb54d3be454d5ca49f48b528bdf5bae3e908\"" Sep 6 00:14:55.593435 env[1225]: time="2025-09-06T00:14:55.593355927Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.8\"" Sep 6 00:14:58.750668 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount740465992.mount: Deactivated successfully. Sep 6 00:15:01.067349 env[1225]: time="2025-09-06T00:15:01.067214037Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.32.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:01.071739 env[1225]: time="2025-09-06T00:15:01.071664949Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d7b94972d43c5d6ce8088a8bcd08614a5ecf2bf04166232c688adcd0b8ed4b12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:01.076799 env[1225]: time="2025-09-06T00:15:01.076450449Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.32.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:01.079426 env[1225]: time="2025-09-06T00:15:01.078791159Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:adc1335b480ddd833aac3b0bd20f68ff0f3c3cf7a0bd337933b006d9f5cec40a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:01.079426 env[1225]: time="2025-09-06T00:15:01.079166371Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.8\" returns image reference \"sha256:d7b94972d43c5d6ce8088a8bcd08614a5ecf2bf04166232c688adcd0b8ed4b12\"" Sep 6 00:15:01.081141 env[1225]: time="2025-09-06T00:15:01.081094339Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Sep 6 00:15:01.922580 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3773079495.mount: Deactivated successfully. Sep 6 00:15:05.803423 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Sep 6 00:15:05.803715 systemd[1]: Stopped kubelet.service. Sep 6 00:15:05.802000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:15:05.813857 kernel: audit: type=1130 audit(1757117705.802:257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:15:05.814059 kernel: audit: type=1131 audit(1757117705.802:258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:15:05.802000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:15:05.823682 systemd[1]: Starting kubelet.service... Sep 6 00:15:06.323601 env[1225]: time="2025-09-06T00:15:06.323494296Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:06.347959 env[1225]: time="2025-09-06T00:15:06.347409755Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:06.365741 env[1225]: time="2025-09-06T00:15:06.365091517Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:06.395151 env[1225]: time="2025-09-06T00:15:06.395079944Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:06.395926 env[1225]: time="2025-09-06T00:15:06.395880918Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6\"" Sep 6 00:15:06.398371 env[1225]: time="2025-09-06T00:15:06.398202088Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Sep 6 00:15:06.419071 systemd[1]: Started kubelet.service. Sep 6 00:15:06.418000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:15:06.426058 kernel: audit: type=1130 audit(1757117706.418:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:15:07.481178 kubelet[1545]: E0906 00:15:07.480941 1545 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 00:15:07.487459 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 00:15:07.487685 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 00:15:07.489000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 00:15:07.490755 systemd[1]: kubelet.service: Consumed 1.128s CPU time. Sep 6 00:15:07.498054 kernel: audit: type=1131 audit(1757117707.489:260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 00:15:08.259277 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2698329155.mount: Deactivated successfully. Sep 6 00:15:08.279750 env[1225]: time="2025-09-06T00:15:08.279656198Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:08.289404 env[1225]: time="2025-09-06T00:15:08.289325731Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:08.291798 env[1225]: time="2025-09-06T00:15:08.291660311Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:08.294720 env[1225]: time="2025-09-06T00:15:08.293760666Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:08.295597 env[1225]: time="2025-09-06T00:15:08.295532642Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Sep 6 00:15:08.296995 env[1225]: time="2025-09-06T00:15:08.296644634Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\"" Sep 6 00:15:09.347037 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3094133941.mount: Deactivated successfully. Sep 6 00:15:10.267104 update_engine[1220]: I0906 00:15:10.261624 1220 update_attempter.cc:509] Updating boot flags... Sep 6 00:15:16.392814 env[1225]: time="2025-09-06T00:15:16.392225609Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:16.398817 env[1225]: time="2025-09-06T00:15:16.398711240Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a9e7e6b294baf1695fccb862d956c5d3ad8510e1e4ca1535f35dc09f247abbfc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:16.405966 env[1225]: time="2025-09-06T00:15:16.405882376Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:16.410615 env[1225]: time="2025-09-06T00:15:16.410529255Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:c6a9d11cc5c04b114ccdef39a9265eeef818e3d02f5359be035ae784097fdec5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:16.411102 env[1225]: time="2025-09-06T00:15:16.411037872Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\" returns image reference \"sha256:a9e7e6b294baf1695fccb862d956c5d3ad8510e1e4ca1535f35dc09f247abbfc\"" Sep 6 00:15:17.552000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:15:17.537798 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 4. Sep 6 00:15:17.545912 systemd[1]: Stopped kubelet.service. Sep 6 00:15:17.557086 systemd[1]: kubelet.service: Consumed 1.128s CPU time. Sep 6 00:15:17.583508 kernel: audit: type=1130 audit(1757117717.552:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:15:17.583725 kernel: audit: type=1131 audit(1757117717.553:262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:15:17.553000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:15:17.568578 systemd[1]: Starting kubelet.service... Sep 6 00:15:17.792000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:15:17.791998 systemd[1]: Started kubelet.service. Sep 6 00:15:17.798008 kernel: audit: type=1130 audit(1757117717.792:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:15:18.024508 kubelet[1591]: E0906 00:15:18.023686 1591 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 00:15:18.026638 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 00:15:18.026798 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 00:15:18.026000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 00:15:18.043354 kernel: audit: type=1131 audit(1757117718.026:264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 00:15:20.671449 systemd[1]: Stopped kubelet.service. Sep 6 00:15:20.673000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:15:20.673000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:15:20.688810 kernel: audit: type=1130 audit(1757117720.673:265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:15:20.688859 kernel: audit: type=1131 audit(1757117720.673:266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:15:20.683525 systemd[1]: Starting kubelet.service... Sep 6 00:15:20.743743 systemd[1]: Reloading. Sep 6 00:15:20.952812 /usr/lib/systemd/system-generators/torcx-generator[1625]: time="2025-09-06T00:15:20Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 6 00:15:20.952852 /usr/lib/systemd/system-generators/torcx-generator[1625]: time="2025-09-06T00:15:20Z" level=info msg="torcx already run" Sep 6 00:15:21.799384 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 6 00:15:21.803199 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 6 00:15:21.849819 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 6 00:15:21.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:21.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:21.974509 kernel: audit: type=1400 audit(1757117721.963:267): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:21.974667 kernel: audit: type=1400 audit(1757117721.963:268): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:21.974707 kernel: audit: type=1400 audit(1757117721.963:269): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:21.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:21.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:21.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:21.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.010024 kernel: audit: type=1400 audit(1757117721.963:270): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:21.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:21.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:21.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:21.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:21.973000 audit: BPF prog-id=43 op=LOAD Sep 6 00:15:21.973000 audit: BPF prog-id=41 op=UNLOAD Sep 6 00:15:21.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:21.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:21.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:21.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:21.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:21.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:21.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:21.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:21.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:21.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:21.999000 audit: BPF prog-id=44 op=LOAD Sep 6 00:15:21.999000 audit: BPF prog-id=36 op=UNLOAD Sep 6 00:15:22.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.002000 audit: BPF prog-id=45 op=LOAD Sep 6 00:15:22.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.002000 audit: BPF prog-id=46 op=LOAD Sep 6 00:15:22.002000 audit: BPF prog-id=27 op=UNLOAD Sep 6 00:15:22.002000 audit: BPF prog-id=28 op=UNLOAD Sep 6 00:15:22.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.013000 audit: BPF prog-id=47 op=LOAD Sep 6 00:15:22.016000 audit: BPF prog-id=37 op=UNLOAD Sep 6 00:15:22.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.028000 audit: BPF prog-id=48 op=LOAD Sep 6 00:15:22.033000 audit: BPF prog-id=29 op=UNLOAD Sep 6 00:15:22.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.054000 audit: BPF prog-id=49 op=LOAD Sep 6 00:15:22.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.055000 audit: BPF prog-id=50 op=LOAD Sep 6 00:15:22.056000 audit: BPF prog-id=30 op=UNLOAD Sep 6 00:15:22.056000 audit: BPF prog-id=31 op=UNLOAD Sep 6 00:15:22.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.067000 audit: BPF prog-id=51 op=LOAD Sep 6 00:15:22.068000 audit: BPF prog-id=32 op=UNLOAD Sep 6 00:15:22.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.070000 audit: BPF prog-id=52 op=LOAD Sep 6 00:15:22.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.071000 audit: BPF prog-id=53 op=LOAD Sep 6 00:15:22.071000 audit: BPF prog-id=33 op=UNLOAD Sep 6 00:15:22.071000 audit: BPF prog-id=34 op=UNLOAD Sep 6 00:15:22.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.073000 audit: BPF prog-id=54 op=LOAD Sep 6 00:15:22.073000 audit: BPF prog-id=38 op=UNLOAD Sep 6 00:15:22.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.075000 audit: BPF prog-id=55 op=LOAD Sep 6 00:15:22.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.077000 audit: BPF prog-id=56 op=LOAD Sep 6 00:15:22.077000 audit: BPF prog-id=39 op=UNLOAD Sep 6 00:15:22.077000 audit: BPF prog-id=40 op=UNLOAD Sep 6 00:15:22.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:22.080000 audit: BPF prog-id=57 op=LOAD Sep 6 00:15:22.080000 audit: BPF prog-id=35 op=UNLOAD Sep 6 00:15:22.143349 systemd[1]: Started kubelet.service. Sep 6 00:15:22.143000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:15:22.167489 systemd[1]: Stopping kubelet.service... Sep 6 00:15:22.172581 systemd[1]: kubelet.service: Deactivated successfully. Sep 6 00:15:22.173954 systemd[1]: Stopped kubelet.service. Sep 6 00:15:22.178582 systemd[1]: Starting kubelet.service... Sep 6 00:15:22.174000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:15:22.517869 systemd[1]: Started kubelet.service. Sep 6 00:15:22.517000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:15:22.737017 kubelet[1679]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 6 00:15:22.737017 kubelet[1679]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Sep 6 00:15:22.737017 kubelet[1679]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 6 00:15:22.737569 kubelet[1679]: I0906 00:15:22.737141 1679 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 6 00:15:22.949773 kubelet[1679]: I0906 00:15:22.949219 1679 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Sep 6 00:15:22.949773 kubelet[1679]: I0906 00:15:22.949281 1679 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 6 00:15:22.949773 kubelet[1679]: I0906 00:15:22.949697 1679 server.go:954] "Client rotation is on, will bootstrap in background" Sep 6 00:15:23.186604 kubelet[1679]: E0906 00:15:23.186151 1679 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.22:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.22:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:15:23.190152 kubelet[1679]: I0906 00:15:23.187423 1679 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 6 00:15:23.230310 kubelet[1679]: E0906 00:15:23.230101 1679 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 6 00:15:23.230310 kubelet[1679]: I0906 00:15:23.230167 1679 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 6 00:15:23.242717 kubelet[1679]: I0906 00:15:23.242626 1679 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 6 00:15:23.245520 kubelet[1679]: I0906 00:15:23.245414 1679 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 6 00:15:23.245814 kubelet[1679]: I0906 00:15:23.245503 1679 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 6 00:15:23.246932 kubelet[1679]: I0906 00:15:23.246855 1679 topology_manager.go:138] "Creating topology manager with none policy" Sep 6 00:15:23.246932 kubelet[1679]: I0906 00:15:23.246892 1679 container_manager_linux.go:304] "Creating device plugin manager" Sep 6 00:15:23.247166 kubelet[1679]: I0906 00:15:23.247134 1679 state_mem.go:36] "Initialized new in-memory state store" Sep 6 00:15:23.252535 kubelet[1679]: I0906 00:15:23.252462 1679 kubelet.go:446] "Attempting to sync node with API server" Sep 6 00:15:23.252535 kubelet[1679]: I0906 00:15:23.252534 1679 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 6 00:15:23.252734 kubelet[1679]: I0906 00:15:23.252579 1679 kubelet.go:352] "Adding apiserver pod source" Sep 6 00:15:23.252734 kubelet[1679]: I0906 00:15:23.252604 1679 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 6 00:15:23.448603 kubelet[1679]: W0906 00:15:23.448454 1679 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.22:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.22:6443: connect: connection refused Sep 6 00:15:23.448603 kubelet[1679]: E0906 00:15:23.448589 1679 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.22:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.22:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:15:23.448951 kubelet[1679]: W0906 00:15:23.448735 1679 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.22:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.22:6443: connect: connection refused Sep 6 00:15:23.448951 kubelet[1679]: E0906 00:15:23.448783 1679 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.22:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.22:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:15:23.459125 kubelet[1679]: I0906 00:15:23.455059 1679 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 6 00:15:23.459125 kubelet[1679]: I0906 00:15:23.456824 1679 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Sep 6 00:15:23.472764 kubelet[1679]: W0906 00:15:23.470348 1679 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Sep 6 00:15:23.494206 kubelet[1679]: I0906 00:15:23.493851 1679 watchdog_linux.go:99] "Systemd watchdog is not enabled" Sep 6 00:15:23.494206 kubelet[1679]: I0906 00:15:23.493956 1679 server.go:1287] "Started kubelet" Sep 6 00:15:23.497131 kubelet[1679]: I0906 00:15:23.494525 1679 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Sep 6 00:15:23.497131 kubelet[1679]: I0906 00:15:23.496019 1679 server.go:479] "Adding debug handlers to kubelet server" Sep 6 00:15:23.524022 kubelet[1679]: I0906 00:15:23.523953 1679 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Sep 6 00:15:23.524317 kubelet[1679]: I0906 00:15:23.524293 1679 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Sep 6 00:15:23.524493 kubelet[1679]: I0906 00:15:23.524474 1679 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 6 00:15:23.529019 kernel: kauditd_printk_skb: 171 callbacks suppressed Sep 6 00:15:23.529177 kernel: audit: type=1400 audit(1757117723.522:442): avc: denied { mac_admin } for pid=1679 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:23.522000 audit[1679]: AVC avc: denied { mac_admin } for pid=1679 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:23.522000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 00:15:23.533168 kubelet[1679]: E0906 00:15:23.528478 1679 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.22:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.22:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.186289428965bb35 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-09-06 00:15:23.493907253 +0000 UTC m=+0.956843586,LastTimestamp:2025-09-06 00:15:23.493907253 +0000 UTC m=+0.956843586,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Sep 6 00:15:23.534179 kernel: audit: type=1401 audit(1757117723.522:442): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 00:15:23.534234 kernel: audit: type=1300 audit(1757117723.522:442): arch=c000003e syscall=188 success=no exit=-22 a0=c0000cf770 a1=c000b96ed0 a2=c0000cf740 a3=25 items=0 ppid=1 pid=1679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:23.522000 audit[1679]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0000cf770 a1=c000b96ed0 a2=c0000cf740 a3=25 items=0 ppid=1 pid=1679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:23.534959 kubelet[1679]: I0906 00:15:23.534932 1679 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 6 00:15:23.559681 kernel: audit: type=1327 audit(1757117723.522:442): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 00:15:23.559860 kernel: audit: type=1400 audit(1757117723.523:443): avc: denied { mac_admin } for pid=1679 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:23.559922 kernel: audit: type=1401 audit(1757117723.523:443): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 00:15:23.522000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 00:15:23.523000 audit[1679]: AVC avc: denied { mac_admin } for pid=1679 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:23.523000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 00:15:23.523000 audit[1679]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b88060 a1=c000b96ee8 a2=c0000cf800 a3=25 items=0 ppid=1 pid=1679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:23.576014 kernel: audit: type=1300 audit(1757117723.523:443): arch=c000003e syscall=188 success=no exit=-22 a0=c000b88060 a1=c000b96ee8 a2=c0000cf800 a3=25 items=0 ppid=1 pid=1679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:23.576186 kernel: audit: type=1327 audit(1757117723.523:443): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 00:15:23.523000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 00:15:23.578592 kernel: audit: type=1325 audit(1757117723.534:444): table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1692 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:15:23.534000 audit[1692]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1692 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:15:23.583521 kernel: audit: type=1300 audit(1757117723.534:444): arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff88ff22e0 a2=0 a3=7fff88ff22cc items=0 ppid=1679 pid=1692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:23.534000 audit[1692]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff88ff22e0 a2=0 a3=7fff88ff22cc items=0 ppid=1679 pid=1692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:23.534000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 6 00:15:23.538000 audit[1693]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1693 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:15:23.538000 audit[1693]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe914bb040 a2=0 a3=7ffe914bb02c items=0 ppid=1679 pid=1693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:23.538000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 6 00:15:23.754044 kubelet[1679]: I0906 00:15:23.753020 1679 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Sep 6 00:15:23.755252 kubelet[1679]: I0906 00:15:23.755213 1679 volume_manager.go:297] "Starting Kubelet Volume Manager" Sep 6 00:15:23.755459 kubelet[1679]: I0906 00:15:23.755435 1679 reconciler.go:26] "Reconciler: start to sync state" Sep 6 00:15:23.755921 kubelet[1679]: E0906 00:15:23.755892 1679 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 6 00:15:23.756078 kubelet[1679]: I0906 00:15:23.724407 1679 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 6 00:15:23.756716 kubelet[1679]: E0906 00:15:23.756150 1679 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Sep 6 00:15:23.756716 kubelet[1679]: E0906 00:15:23.756689 1679 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.22:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.22:6443: connect: connection refused" interval="200ms" Sep 6 00:15:23.757403 kubelet[1679]: I0906 00:15:23.757098 1679 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 6 00:15:23.757486 kubelet[1679]: I0906 00:15:23.757471 1679 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 6 00:15:23.757995 kubelet[1679]: W0906 00:15:23.757928 1679 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.22:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.22:6443: connect: connection refused Sep 6 00:15:23.758070 kubelet[1679]: E0906 00:15:23.758043 1679 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.22:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.22:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:15:23.762000 audit[1695]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1695 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:15:23.762000 audit[1695]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffdfb027a80 a2=0 a3=7ffdfb027a6c items=0 ppid=1679 pid=1695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:23.762000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 6 00:15:23.764222 kubelet[1679]: I0906 00:15:23.764181 1679 factory.go:221] Registration of the containerd container factory successfully Sep 6 00:15:23.764222 kubelet[1679]: I0906 00:15:23.764210 1679 factory.go:221] Registration of the systemd container factory successfully Sep 6 00:15:23.766000 audit[1698]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1698 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:15:23.766000 audit[1698]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc269e3450 a2=0 a3=7ffc269e343c items=0 ppid=1679 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:23.766000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 6 00:15:23.799000 audit[1704]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1704 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:15:23.799000 audit[1704]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7fffb262efe0 a2=0 a3=7fffb262efcc items=0 ppid=1679 pid=1704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:23.799000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Sep 6 00:15:23.801859 kubelet[1679]: I0906 00:15:23.800520 1679 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Sep 6 00:15:23.801000 audit[1706]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1706 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:15:23.801000 audit[1706]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff3dc82230 a2=0 a3=7fff3dc8221c items=0 ppid=1679 pid=1706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:23.801000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 6 00:15:23.804106 kubelet[1679]: I0906 00:15:23.804067 1679 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Sep 6 00:15:23.804175 kubelet[1679]: I0906 00:15:23.804117 1679 status_manager.go:227] "Starting to sync pod status with apiserver" Sep 6 00:15:23.804175 kubelet[1679]: I0906 00:15:23.804150 1679 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Sep 6 00:15:23.804175 kubelet[1679]: I0906 00:15:23.804161 1679 kubelet.go:2382] "Starting kubelet main sync loop" Sep 6 00:15:23.804268 kubelet[1679]: E0906 00:15:23.804234 1679 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Sep 6 00:15:23.803000 audit[1708]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1708 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:15:23.803000 audit[1708]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffa3460990 a2=0 a3=7fffa346097c items=0 ppid=1679 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:23.803000 audit[1709]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1709 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:15:23.803000 audit[1709]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd61d9df20 a2=0 a3=7ffd61d9df0c items=0 ppid=1679 pid=1709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:23.803000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 6 00:15:23.803000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 6 00:15:23.806000 audit[1710]: NETFILTER_CFG table=nat:34 family=10 entries=2 op=nft_register_chain pid=1710 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:15:23.806000 audit[1710]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffca6395980 a2=0 a3=7ffca639596c items=0 ppid=1679 pid=1710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:23.806000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 6 00:15:23.808244 kubelet[1679]: W0906 00:15:23.804965 1679 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.22:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.22:6443: connect: connection refused Sep 6 00:15:23.808244 kubelet[1679]: E0906 00:15:23.805049 1679 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.22:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.22:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:15:23.808244 kubelet[1679]: I0906 00:15:23.807299 1679 cpu_manager.go:221] "Starting CPU manager" policy="none" Sep 6 00:15:23.808244 kubelet[1679]: I0906 00:15:23.807314 1679 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Sep 6 00:15:23.808244 kubelet[1679]: I0906 00:15:23.807340 1679 state_mem.go:36] "Initialized new in-memory state store" Sep 6 00:15:23.807000 audit[1711]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=1711 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:15:23.807000 audit[1711]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff9ec32800 a2=0 a3=7fff9ec327ec items=0 ppid=1679 pid=1711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:23.807000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 6 00:15:23.809000 audit[1712]: NETFILTER_CFG table=filter:36 family=10 entries=2 op=nft_register_chain pid=1712 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:15:23.809000 audit[1712]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff260e7280 a2=0 a3=7fff260e726c items=0 ppid=1679 pid=1712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:23.809000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 6 00:15:23.810000 audit[1713]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_chain pid=1713 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:15:23.810000 audit[1713]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffed3d2f450 a2=0 a3=7ffed3d2f43c items=0 ppid=1679 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:23.810000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 6 00:15:23.857296 kubelet[1679]: E0906 00:15:23.857213 1679 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 6 00:15:23.904616 kubelet[1679]: E0906 00:15:23.904487 1679 kubelet.go:2406] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Sep 6 00:15:23.957564 kubelet[1679]: E0906 00:15:23.957492 1679 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 6 00:15:23.958533 kubelet[1679]: E0906 00:15:23.958494 1679 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.22:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.22:6443: connect: connection refused" interval="400ms" Sep 6 00:15:24.058402 kubelet[1679]: E0906 00:15:24.058239 1679 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 6 00:15:24.105564 kubelet[1679]: E0906 00:15:24.105063 1679 kubelet.go:2406] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Sep 6 00:15:24.158668 kubelet[1679]: E0906 00:15:24.158558 1679 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 6 00:15:24.262967 kubelet[1679]: E0906 00:15:24.262249 1679 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 6 00:15:24.322145 kubelet[1679]: W0906 00:15:24.321783 1679 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.22:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.22:6443: connect: connection refused Sep 6 00:15:24.322145 kubelet[1679]: E0906 00:15:24.321892 1679 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.22:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.22:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:15:24.366102 kubelet[1679]: E0906 00:15:24.363307 1679 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 6 00:15:24.366102 kubelet[1679]: E0906 00:15:24.364169 1679 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.22:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.22:6443: connect: connection refused" interval="800ms" Sep 6 00:15:24.463927 kubelet[1679]: E0906 00:15:24.463782 1679 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 6 00:15:24.468124 kubelet[1679]: I0906 00:15:24.468048 1679 policy_none.go:49] "None policy: Start" Sep 6 00:15:24.468124 kubelet[1679]: I0906 00:15:24.468128 1679 memory_manager.go:186] "Starting memorymanager" policy="None" Sep 6 00:15:24.468399 kubelet[1679]: I0906 00:15:24.468164 1679 state_mem.go:35] "Initializing new in-memory state store" Sep 6 00:15:24.506648 kubelet[1679]: E0906 00:15:24.506551 1679 kubelet.go:2406] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Sep 6 00:15:24.564294 kubelet[1679]: E0906 00:15:24.564137 1679 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 6 00:15:24.623359 systemd[1]: Created slice kubepods.slice. Sep 6 00:15:24.633252 systemd[1]: Created slice kubepods-burstable.slice. Sep 6 00:15:24.650330 systemd[1]: Created slice kubepods-besteffort.slice. Sep 6 00:15:24.658332 kubelet[1679]: I0906 00:15:24.658274 1679 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Sep 6 00:15:24.657000 audit[1679]: AVC avc: denied { mac_admin } for pid=1679 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:24.657000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 00:15:24.657000 audit[1679]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0009761b0 a1=c000b13158 a2=c000976180 a3=25 items=0 ppid=1 pid=1679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:24.657000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 00:15:24.658818 kubelet[1679]: I0906 00:15:24.658379 1679 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Sep 6 00:15:24.658818 kubelet[1679]: I0906 00:15:24.658569 1679 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 6 00:15:24.658818 kubelet[1679]: I0906 00:15:24.658594 1679 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 6 00:15:24.661054 kubelet[1679]: E0906 00:15:24.660902 1679 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Sep 6 00:15:24.664092 kubelet[1679]: E0906 00:15:24.664055 1679 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Sep 6 00:15:24.664300 kubelet[1679]: I0906 00:15:24.664281 1679 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 6 00:15:24.760588 kubelet[1679]: I0906 00:15:24.760524 1679 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Sep 6 00:15:24.761174 kubelet[1679]: E0906 00:15:24.761126 1679 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.22:6443/api/v1/nodes\": dial tcp 10.0.0.22:6443: connect: connection refused" node="localhost" Sep 6 00:15:24.937483 kubelet[1679]: W0906 00:15:24.937151 1679 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.22:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.22:6443: connect: connection refused Sep 6 00:15:24.937483 kubelet[1679]: E0906 00:15:24.937218 1679 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.22:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.22:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:15:24.964369 kubelet[1679]: I0906 00:15:24.963917 1679 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Sep 6 00:15:24.964716 kubelet[1679]: E0906 00:15:24.964686 1679 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.22:6443/api/v1/nodes\": dial tcp 10.0.0.22:6443: connect: connection refused" node="localhost" Sep 6 00:15:24.998398 kubelet[1679]: W0906 00:15:24.998283 1679 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.22:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.22:6443: connect: connection refused Sep 6 00:15:24.998398 kubelet[1679]: E0906 00:15:24.998401 1679 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.22:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.22:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:15:25.165763 kubelet[1679]: E0906 00:15:25.165142 1679 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.22:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.22:6443: connect: connection refused" interval="1.6s" Sep 6 00:15:25.224266 kubelet[1679]: W0906 00:15:25.222360 1679 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.22:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.22:6443: connect: connection refused Sep 6 00:15:25.224266 kubelet[1679]: E0906 00:15:25.222439 1679 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.22:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.22:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:15:25.264756 kubelet[1679]: E0906 00:15:25.264633 1679 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.22:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.22:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:15:25.346836 systemd[1]: Created slice kubepods-burstable-poddd3ff0e036e76a77e8a9637a3f6bd955.slice. Sep 6 00:15:25.362348 kubelet[1679]: E0906 00:15:25.362292 1679 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 6 00:15:25.371026 kubelet[1679]: I0906 00:15:25.370278 1679 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Sep 6 00:15:25.371026 kubelet[1679]: I0906 00:15:25.370647 1679 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/dd3ff0e036e76a77e8a9637a3f6bd955-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"dd3ff0e036e76a77e8a9637a3f6bd955\") " pod="kube-system/kube-apiserver-localhost" Sep 6 00:15:25.371026 kubelet[1679]: I0906 00:15:25.370684 1679 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/a88c9297c136b0f15880bf567e89a977-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"a88c9297c136b0f15880bf567e89a977\") " pod="kube-system/kube-controller-manager-localhost" Sep 6 00:15:25.371026 kubelet[1679]: I0906 00:15:25.370707 1679 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/a88c9297c136b0f15880bf567e89a977-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"a88c9297c136b0f15880bf567e89a977\") " pod="kube-system/kube-controller-manager-localhost" Sep 6 00:15:25.371026 kubelet[1679]: E0906 00:15:25.370711 1679 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.22:6443/api/v1/nodes\": dial tcp 10.0.0.22:6443: connect: connection refused" node="localhost" Sep 6 00:15:25.371026 kubelet[1679]: I0906 00:15:25.370731 1679 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/a88c9297c136b0f15880bf567e89a977-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"a88c9297c136b0f15880bf567e89a977\") " pod="kube-system/kube-controller-manager-localhost" Sep 6 00:15:25.371423 kubelet[1679]: I0906 00:15:25.370752 1679 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/dd3ff0e036e76a77e8a9637a3f6bd955-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"dd3ff0e036e76a77e8a9637a3f6bd955\") " pod="kube-system/kube-apiserver-localhost" Sep 6 00:15:25.371423 kubelet[1679]: I0906 00:15:25.370790 1679 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/dd3ff0e036e76a77e8a9637a3f6bd955-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"dd3ff0e036e76a77e8a9637a3f6bd955\") " pod="kube-system/kube-apiserver-localhost" Sep 6 00:15:25.371423 kubelet[1679]: I0906 00:15:25.370817 1679 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/a88c9297c136b0f15880bf567e89a977-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"a88c9297c136b0f15880bf567e89a977\") " pod="kube-system/kube-controller-manager-localhost" Sep 6 00:15:25.371423 kubelet[1679]: I0906 00:15:25.370838 1679 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a88c9297c136b0f15880bf567e89a977-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"a88c9297c136b0f15880bf567e89a977\") " pod="kube-system/kube-controller-manager-localhost" Sep 6 00:15:25.371423 kubelet[1679]: I0906 00:15:25.370877 1679 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a9176403b596d0b29ae8ad12d635226d-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"a9176403b596d0b29ae8ad12d635226d\") " pod="kube-system/kube-scheduler-localhost" Sep 6 00:15:25.377212 systemd[1]: Created slice kubepods-burstable-poda88c9297c136b0f15880bf567e89a977.slice. Sep 6 00:15:25.388057 kubelet[1679]: E0906 00:15:25.387950 1679 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 6 00:15:25.391712 systemd[1]: Created slice kubepods-burstable-poda9176403b596d0b29ae8ad12d635226d.slice. Sep 6 00:15:25.399449 kubelet[1679]: E0906 00:15:25.399342 1679 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 6 00:15:25.670799 kubelet[1679]: E0906 00:15:25.663917 1679 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:25.674820 env[1225]: time="2025-09-06T00:15:25.674351078Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:dd3ff0e036e76a77e8a9637a3f6bd955,Namespace:kube-system,Attempt:0,}" Sep 6 00:15:25.690104 kubelet[1679]: E0906 00:15:25.688859 1679 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:25.690301 env[1225]: time="2025-09-06T00:15:25.689580547Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:a88c9297c136b0f15880bf567e89a977,Namespace:kube-system,Attempt:0,}" Sep 6 00:15:25.706079 kubelet[1679]: E0906 00:15:25.700577 1679 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:25.707082 env[1225]: time="2025-09-06T00:15:25.706641473Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:a9176403b596d0b29ae8ad12d635226d,Namespace:kube-system,Attempt:0,}" Sep 6 00:15:25.979792 kubelet[1679]: W0906 00:15:25.979582 1679 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.22:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.22:6443: connect: connection refused Sep 6 00:15:25.979792 kubelet[1679]: E0906 00:15:25.979649 1679 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.22:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.22:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:15:26.173333 kubelet[1679]: I0906 00:15:26.173259 1679 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Sep 6 00:15:26.173827 kubelet[1679]: E0906 00:15:26.173692 1679 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.22:6443/api/v1/nodes\": dial tcp 10.0.0.22:6443: connect: connection refused" node="localhost" Sep 6 00:15:26.731680 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1030096093.mount: Deactivated successfully. Sep 6 00:15:26.767218 env[1225]: time="2025-09-06T00:15:26.767123718Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:26.770237 kubelet[1679]: E0906 00:15:26.770181 1679 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.22:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.22:6443: connect: connection refused" interval="3.2s" Sep 6 00:15:26.776206 kubelet[1679]: W0906 00:15:26.775969 1679 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.22:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.22:6443: connect: connection refused Sep 6 00:15:26.776206 kubelet[1679]: E0906 00:15:26.776087 1679 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.22:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.22:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:15:26.779829 env[1225]: time="2025-09-06T00:15:26.779186153Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:26.786219 env[1225]: time="2025-09-06T00:15:26.783841108Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:26.786219 env[1225]: time="2025-09-06T00:15:26.784809124Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:26.786219 env[1225]: time="2025-09-06T00:15:26.786098690Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:26.794238 env[1225]: time="2025-09-06T00:15:26.794078629Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:26.798903 env[1225]: time="2025-09-06T00:15:26.798063083Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:26.804640 env[1225]: time="2025-09-06T00:15:26.803027275Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:26.805531 env[1225]: time="2025-09-06T00:15:26.805464732Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:26.809908 env[1225]: time="2025-09-06T00:15:26.809799630Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:26.811698 env[1225]: time="2025-09-06T00:15:26.811627109Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:26.821196 env[1225]: time="2025-09-06T00:15:26.821118799Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:26.908193 kubelet[1679]: E0906 00:15:26.907868 1679 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.22:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.22:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.186289428965bb35 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-09-06 00:15:23.493907253 +0000 UTC m=+0.956843586,LastTimestamp:2025-09-06 00:15:23.493907253 +0000 UTC m=+0.956843586,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Sep 6 00:15:27.074622 env[1225]: time="2025-09-06T00:15:27.074487395Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:15:27.074622 env[1225]: time="2025-09-06T00:15:27.074542357Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:15:27.074622 env[1225]: time="2025-09-06T00:15:27.074554820Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:15:27.077019 env[1225]: time="2025-09-06T00:15:27.074716232Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e1b1091aa9c29e5685d56fb73607742d8d0f2e69d686a094a23831622d2ab09f pid=1739 runtime=io.containerd.runc.v2 Sep 6 00:15:27.082645 env[1225]: time="2025-09-06T00:15:27.077396113Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:15:27.082645 env[1225]: time="2025-09-06T00:15:27.077456485Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:15:27.082645 env[1225]: time="2025-09-06T00:15:27.077471293Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:15:27.082645 env[1225]: time="2025-09-06T00:15:27.077757067Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c17251640069d4816c460b63593e2d0bb53a12eb1a1b5411c67452ff496d863f pid=1733 runtime=io.containerd.runc.v2 Sep 6 00:15:27.090144 env[1225]: time="2025-09-06T00:15:27.082322877Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:15:27.090144 env[1225]: time="2025-09-06T00:15:27.082386124Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:15:27.090144 env[1225]: time="2025-09-06T00:15:27.082402455Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:15:27.090144 env[1225]: time="2025-09-06T00:15:27.082576058Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/42d6d08fdd4e29163ec0cad4c911e405294adb4636de3658bd7572fe8c85d821 pid=1734 runtime=io.containerd.runc.v2 Sep 6 00:15:27.120553 systemd[1]: Started cri-containerd-e1b1091aa9c29e5685d56fb73607742d8d0f2e69d686a094a23831622d2ab09f.scope. Sep 6 00:15:27.290168 systemd[1]: Started cri-containerd-c17251640069d4816c460b63593e2d0bb53a12eb1a1b5411c67452ff496d863f.scope. Sep 6 00:15:27.314875 systemd[1]: Started cri-containerd-42d6d08fdd4e29163ec0cad4c911e405294adb4636de3658bd7572fe8c85d821.scope. Sep 6 00:15:27.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.404000 audit: BPF prog-id=58 op=LOAD Sep 6 00:15:27.405000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.405000 audit[1769]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=1733 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:27.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331373235313634303036396434383136633436306236333539336532 Sep 6 00:15:27.407000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.407000 audit[1769]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=1733 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:27.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331373235313634303036396434383136633436306236333539336532 Sep 6 00:15:27.407000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.407000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.407000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.407000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.407000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.407000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.407000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.407000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.407000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.407000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.407000 audit: BPF prog-id=59 op=LOAD Sep 6 00:15:27.407000 audit[1769]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000024a60 items=0 ppid=1733 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:27.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331373235313634303036396434383136633436306236333539336532 Sep 6 00:15:27.416000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.416000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.416000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.416000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.416000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.416000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.416000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.416000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.416000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.416000 audit: BPF prog-id=60 op=LOAD Sep 6 00:15:27.416000 audit[1769]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000024aa8 items=0 ppid=1733 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:27.416000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331373235313634303036396434383136633436306236333539336532 Sep 6 00:15:27.417000 audit: BPF prog-id=60 op=UNLOAD Sep 6 00:15:27.418000 audit: BPF prog-id=59 op=UNLOAD Sep 6 00:15:27.418000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.418000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.418000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.418000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.418000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.418000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.418000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.418000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.418000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.418000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.432000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.418000 audit: BPF prog-id=61 op=LOAD Sep 6 00:15:27.432000 audit: BPF prog-id=62 op=LOAD Sep 6 00:15:27.418000 audit[1769]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000024eb8 items=0 ppid=1733 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:27.418000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331373235313634303036396434383136633436306236333539336532 Sep 6 00:15:27.434000 audit[1757]: AVC avc: denied { bpf } for pid=1757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.434000 audit[1757]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=1739 pid=1757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:27.434000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531623130393161613963323965353638356435366662373336303737 Sep 6 00:15:27.434000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.434000 audit[1757]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=1739 pid=1757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:27.434000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531623130393161613963323965353638356435366662373336303737 Sep 6 00:15:27.434000 audit[1757]: AVC avc: denied { bpf } for pid=1757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.434000 audit[1757]: AVC avc: denied { bpf } for pid=1757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.434000 audit[1757]: AVC avc: denied { bpf } for pid=1757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.434000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.434000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.434000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.434000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.434000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.434000 audit[1757]: AVC avc: denied { bpf } for pid=1757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.434000 audit[1757]: AVC avc: denied { bpf } for pid=1757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.434000 audit: BPF prog-id=63 op=LOAD Sep 6 00:15:27.434000 audit[1757]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0000a0710 items=0 ppid=1739 pid=1757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:27.434000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531623130393161613963323965353638356435366662373336303737 Sep 6 00:15:27.434000 audit[1757]: AVC avc: denied { bpf } for pid=1757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.434000 audit[1757]: AVC avc: denied { bpf } for pid=1757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.434000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.434000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.434000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.434000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.434000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.434000 audit[1757]: AVC avc: denied { bpf } for pid=1757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.434000 audit[1757]: AVC avc: denied { bpf } for pid=1757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.434000 audit: BPF prog-id=64 op=LOAD Sep 6 00:15:27.434000 audit[1757]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0000a0758 items=0 ppid=1739 pid=1757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:27.434000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531623130393161613963323965353638356435366662373336303737 Sep 6 00:15:27.434000 audit: BPF prog-id=64 op=UNLOAD Sep 6 00:15:27.434000 audit: BPF prog-id=63 op=UNLOAD Sep 6 00:15:27.434000 audit[1757]: AVC avc: denied { bpf } for pid=1757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.434000 audit[1757]: AVC avc: denied { bpf } for pid=1757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.434000 audit[1757]: AVC avc: denied { bpf } for pid=1757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.434000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.434000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.434000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.434000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.434000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.434000 audit[1757]: AVC avc: denied { bpf } for pid=1757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.434000 audit[1757]: AVC avc: denied { bpf } for pid=1757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.434000 audit: BPF prog-id=65 op=LOAD Sep 6 00:15:27.434000 audit[1757]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0000a0b68 items=0 ppid=1739 pid=1757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:27.434000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531623130393161613963323965353638356435366662373336303737 Sep 6 00:15:27.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.488000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.488000 audit: BPF prog-id=66 op=LOAD Sep 6 00:15:27.488000 audit[1770]: AVC avc: denied { bpf } for pid=1770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.488000 audit[1770]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1734 pid=1770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:27.488000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432643664303866646434653239313633656330636164346339313165 Sep 6 00:15:27.488000 audit[1770]: AVC avc: denied { perfmon } for pid=1770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.488000 audit[1770]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=1734 pid=1770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:27.488000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432643664303866646434653239313633656330636164346339313165 Sep 6 00:15:27.488000 audit[1770]: AVC avc: denied { bpf } for pid=1770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.488000 audit[1770]: AVC avc: denied { bpf } for pid=1770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.488000 audit[1770]: AVC avc: denied { bpf } for pid=1770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.488000 audit[1770]: AVC avc: denied { perfmon } for pid=1770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.488000 audit[1770]: AVC avc: denied { perfmon } for pid=1770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.488000 audit[1770]: AVC avc: denied { perfmon } for pid=1770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.488000 audit[1770]: AVC avc: denied { perfmon } for pid=1770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.488000 audit[1770]: AVC avc: denied { perfmon } for pid=1770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.488000 audit[1770]: AVC avc: denied { bpf } for pid=1770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.488000 audit[1770]: AVC avc: denied { bpf } for pid=1770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.488000 audit: BPF prog-id=67 op=LOAD Sep 6 00:15:27.488000 audit[1770]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001cada0 items=0 ppid=1734 pid=1770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:27.488000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432643664303866646434653239313633656330636164346339313165 Sep 6 00:15:27.490000 audit[1770]: AVC avc: denied { bpf } for pid=1770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.490000 audit[1770]: AVC avc: denied { bpf } for pid=1770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.490000 audit[1770]: AVC avc: denied { perfmon } for pid=1770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.490000 audit[1770]: AVC avc: denied { perfmon } for pid=1770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.490000 audit[1770]: AVC avc: denied { perfmon } for pid=1770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.490000 audit[1770]: AVC avc: denied { perfmon } for pid=1770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.490000 audit[1770]: AVC avc: denied { perfmon } for pid=1770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.490000 audit[1770]: AVC avc: denied { bpf } for pid=1770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.490000 audit[1770]: AVC avc: denied { bpf } for pid=1770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.490000 audit: BPF prog-id=68 op=LOAD Sep 6 00:15:27.490000 audit[1770]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001cade8 items=0 ppid=1734 pid=1770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:27.490000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432643664303866646434653239313633656330636164346339313165 Sep 6 00:15:27.492000 audit: BPF prog-id=68 op=UNLOAD Sep 6 00:15:27.492000 audit: BPF prog-id=67 op=UNLOAD Sep 6 00:15:27.492000 audit[1770]: AVC avc: denied { bpf } for pid=1770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.492000 audit[1770]: AVC avc: denied { bpf } for pid=1770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.492000 audit[1770]: AVC avc: denied { bpf } for pid=1770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.492000 audit[1770]: AVC avc: denied { perfmon } for pid=1770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.492000 audit[1770]: AVC avc: denied { perfmon } for pid=1770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.492000 audit[1770]: AVC avc: denied { perfmon } for pid=1770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.492000 audit[1770]: AVC avc: denied { perfmon } for pid=1770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.492000 audit[1770]: AVC avc: denied { perfmon } for pid=1770 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.492000 audit[1770]: AVC avc: denied { bpf } for pid=1770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.492000 audit[1770]: AVC avc: denied { bpf } for pid=1770 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.492000 audit: BPF prog-id=69 op=LOAD Sep 6 00:15:27.492000 audit[1770]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001cb1f8 items=0 ppid=1734 pid=1770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:27.492000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432643664303866646434653239313633656330636164346339313165 Sep 6 00:15:27.525423 env[1225]: time="2025-09-06T00:15:27.525339556Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:a9176403b596d0b29ae8ad12d635226d,Namespace:kube-system,Attempt:0,} returns sandbox id \"c17251640069d4816c460b63593e2d0bb53a12eb1a1b5411c67452ff496d863f\"" Sep 6 00:15:27.534143 kubelet[1679]: E0906 00:15:27.531000 1679 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:27.537332 env[1225]: time="2025-09-06T00:15:27.536876514Z" level=info msg="CreateContainer within sandbox \"c17251640069d4816c460b63593e2d0bb53a12eb1a1b5411c67452ff496d863f\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Sep 6 00:15:27.547051 env[1225]: time="2025-09-06T00:15:27.546942638Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:a88c9297c136b0f15880bf567e89a977,Namespace:kube-system,Attempt:0,} returns sandbox id \"e1b1091aa9c29e5685d56fb73607742d8d0f2e69d686a094a23831622d2ab09f\"" Sep 6 00:15:27.550586 kubelet[1679]: E0906 00:15:27.550526 1679 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:27.554804 env[1225]: time="2025-09-06T00:15:27.553277120Z" level=info msg="CreateContainer within sandbox \"e1b1091aa9c29e5685d56fb73607742d8d0f2e69d686a094a23831622d2ab09f\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Sep 6 00:15:27.618310 env[1225]: time="2025-09-06T00:15:27.616369484Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:dd3ff0e036e76a77e8a9637a3f6bd955,Namespace:kube-system,Attempt:0,} returns sandbox id \"42d6d08fdd4e29163ec0cad4c911e405294adb4636de3658bd7572fe8c85d821\"" Sep 6 00:15:27.620089 kubelet[1679]: E0906 00:15:27.619724 1679 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:27.627017 env[1225]: time="2025-09-06T00:15:27.626947784Z" level=info msg="CreateContainer within sandbox \"42d6d08fdd4e29163ec0cad4c911e405294adb4636de3658bd7572fe8c85d821\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Sep 6 00:15:27.639558 env[1225]: time="2025-09-06T00:15:27.639449714Z" level=info msg="CreateContainer within sandbox \"e1b1091aa9c29e5685d56fb73607742d8d0f2e69d686a094a23831622d2ab09f\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"312b93a5ac6d66164d5c64c608d83b1ff4e9fedfcc10f4960433196b5aac6c56\"" Sep 6 00:15:27.652353 env[1225]: time="2025-09-06T00:15:27.650217426Z" level=info msg="StartContainer for \"312b93a5ac6d66164d5c64c608d83b1ff4e9fedfcc10f4960433196b5aac6c56\"" Sep 6 00:15:27.666211 env[1225]: time="2025-09-06T00:15:27.665576758Z" level=info msg="CreateContainer within sandbox \"c17251640069d4816c460b63593e2d0bb53a12eb1a1b5411c67452ff496d863f\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"bbc9c4a20f7f961b12bfd1131bf7604dae254e29feaf3153f683c180e0c8e3a4\"" Sep 6 00:15:27.667803 env[1225]: time="2025-09-06T00:15:27.667764049Z" level=info msg="StartContainer for \"bbc9c4a20f7f961b12bfd1131bf7604dae254e29feaf3153f683c180e0c8e3a4\"" Sep 6 00:15:27.733233 env[1225]: time="2025-09-06T00:15:27.733160143Z" level=info msg="CreateContainer within sandbox \"42d6d08fdd4e29163ec0cad4c911e405294adb4636de3658bd7572fe8c85d821\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"ee8d848f44d65bea076a76e171cd2b1a95afead801eccb41abe8d71c52bb3558\"" Sep 6 00:15:27.742443 env[1225]: time="2025-09-06T00:15:27.742376632Z" level=info msg="StartContainer for \"ee8d848f44d65bea076a76e171cd2b1a95afead801eccb41abe8d71c52bb3558\"" Sep 6 00:15:27.744492 systemd[1]: Started cri-containerd-312b93a5ac6d66164d5c64c608d83b1ff4e9fedfcc10f4960433196b5aac6c56.scope. Sep 6 00:15:27.753778 systemd[1]: Started cri-containerd-bbc9c4a20f7f961b12bfd1131bf7604dae254e29feaf3153f683c180e0c8e3a4.scope. Sep 6 00:15:27.780332 kubelet[1679]: I0906 00:15:27.779096 1679 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Sep 6 00:15:27.780332 kubelet[1679]: E0906 00:15:27.779610 1679 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.22:6443/api/v1/nodes\": dial tcp 10.0.0.22:6443: connect: connection refused" node="localhost" Sep 6 00:15:27.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.797000 audit: BPF prog-id=70 op=LOAD Sep 6 00:15:27.797000 audit[1853]: AVC avc: denied { bpf } for pid=1853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.797000 audit[1853]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=1739 pid=1853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:27.797000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331326239336135616336643636313634643563363463363038643833 Sep 6 00:15:27.797000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.797000 audit[1853]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=1739 pid=1853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:27.797000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331326239336135616336643636313634643563363463363038643833 Sep 6 00:15:27.797000 audit[1853]: AVC avc: denied { bpf } for pid=1853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.797000 audit[1853]: AVC avc: denied { bpf } for pid=1853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.797000 audit[1853]: AVC avc: denied { bpf } for pid=1853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.797000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.797000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.797000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.797000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.797000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.797000 audit[1853]: AVC avc: denied { bpf } for pid=1853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.797000 audit[1853]: AVC avc: denied { bpf } for pid=1853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.797000 audit: BPF prog-id=71 op=LOAD Sep 6 00:15:27.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.808000 audit: BPF prog-id=72 op=LOAD Sep 6 00:15:27.797000 audit[1853]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000024650 items=0 ppid=1739 pid=1853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:27.797000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331326239336135616336643636313634643563363463363038643833 Sep 6 00:15:27.808000 audit[1853]: AVC avc: denied { bpf } for pid=1853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.808000 audit[1853]: AVC avc: denied { bpf } for pid=1853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.808000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.808000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.808000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.808000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.808000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.808000 audit[1853]: AVC avc: denied { bpf } for pid=1853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.809000 audit[1865]: AVC avc: denied { bpf } for pid=1865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.808000 audit[1853]: AVC avc: denied { bpf } for pid=1853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.808000 audit: BPF prog-id=73 op=LOAD Sep 6 00:15:27.808000 audit[1853]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000024698 items=0 ppid=1739 pid=1853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:27.808000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331326239336135616336643636313634643563363463363038643833 Sep 6 00:15:27.809000 audit: BPF prog-id=73 op=UNLOAD Sep 6 00:15:27.809000 audit: BPF prog-id=71 op=UNLOAD Sep 6 00:15:27.809000 audit[1853]: AVC avc: denied { bpf } for pid=1853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.809000 audit[1853]: AVC avc: denied { bpf } for pid=1853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.809000 audit[1853]: AVC avc: denied { bpf } for pid=1853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.809000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.809000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.809000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.809000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.809000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.809000 audit[1853]: AVC avc: denied { bpf } for pid=1853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.809000 audit[1853]: AVC avc: denied { bpf } for pid=1853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.809000 audit: BPF prog-id=74 op=LOAD Sep 6 00:15:27.809000 audit[1853]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000024aa8 items=0 ppid=1739 pid=1853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:27.809000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331326239336135616336643636313634643563363463363038643833 Sep 6 00:15:27.809000 audit[1865]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1733 pid=1865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:27.809000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262633963346132306637663936316231326266643131333162663736 Sep 6 00:15:27.810000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.810000 audit[1865]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=1733 pid=1865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:27.810000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262633963346132306637663936316231326266643131333162663736 Sep 6 00:15:27.810000 audit[1865]: AVC avc: denied { bpf } for pid=1865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.810000 audit[1865]: AVC avc: denied { bpf } for pid=1865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.810000 audit[1865]: AVC avc: denied { bpf } for pid=1865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.810000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.810000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.810000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.810000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.810000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.810000 audit[1865]: AVC avc: denied { bpf } for pid=1865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.810000 audit[1865]: AVC avc: denied { bpf } for pid=1865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.810000 audit: BPF prog-id=75 op=LOAD Sep 6 00:15:27.810000 audit[1865]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001a8980 items=0 ppid=1733 pid=1865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:27.810000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262633963346132306637663936316231326266643131333162663736 Sep 6 00:15:27.816000 audit[1865]: AVC avc: denied { bpf } for pid=1865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.816000 audit[1865]: AVC avc: denied { bpf } for pid=1865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.816000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.816000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.816000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.816000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.816000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.816000 audit[1865]: AVC avc: denied { bpf } for pid=1865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.816000 audit[1865]: AVC avc: denied { bpf } for pid=1865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.816000 audit: BPF prog-id=76 op=LOAD Sep 6 00:15:27.816000 audit[1865]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0001a89c8 items=0 ppid=1733 pid=1865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:27.816000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262633963346132306637663936316231326266643131333162663736 Sep 6 00:15:27.838000 audit: BPF prog-id=76 op=UNLOAD Sep 6 00:15:27.838000 audit: BPF prog-id=75 op=UNLOAD Sep 6 00:15:27.838000 audit[1865]: AVC avc: denied { bpf } for pid=1865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.838000 audit[1865]: AVC avc: denied { bpf } for pid=1865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.838000 audit[1865]: AVC avc: denied { bpf } for pid=1865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.838000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.838000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.838000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.838000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.838000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.838000 audit[1865]: AVC avc: denied { bpf } for pid=1865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.838000 audit[1865]: AVC avc: denied { bpf } for pid=1865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.838000 audit: BPF prog-id=77 op=LOAD Sep 6 00:15:27.838000 audit[1865]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0001a8dd8 items=0 ppid=1733 pid=1865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:27.838000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262633963346132306637663936316231326266643131333162663736 Sep 6 00:15:27.965514 systemd[1]: Started cri-containerd-ee8d848f44d65bea076a76e171cd2b1a95afead801eccb41abe8d71c52bb3558.scope. Sep 6 00:15:27.967727 kubelet[1679]: W0906 00:15:27.967571 1679 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.22:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.22:6443: connect: connection refused Sep 6 00:15:27.967727 kubelet[1679]: E0906 00:15:27.967675 1679 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.22:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.22:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:15:27.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.994610 kubelet[1679]: W0906 00:15:27.994501 1679 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.22:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.22:6443: connect: connection refused Sep 6 00:15:27.994742 kubelet[1679]: E0906 00:15:27.994661 1679 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.22:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.22:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:15:27.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.994000 audit: BPF prog-id=78 op=LOAD Sep 6 00:15:27.995000 audit[1900]: AVC avc: denied { bpf } for pid=1900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.995000 audit[1900]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=1734 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:27.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565386438343866343464363562656130373661373665313731636432 Sep 6 00:15:27.995000 audit[1900]: AVC avc: denied { perfmon } for pid=1900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.995000 audit[1900]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=1734 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:27.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565386438343866343464363562656130373661373665313731636432 Sep 6 00:15:27.995000 audit[1900]: AVC avc: denied { bpf } for pid=1900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.995000 audit[1900]: AVC avc: denied { bpf } for pid=1900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.995000 audit[1900]: AVC avc: denied { bpf } for pid=1900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.995000 audit[1900]: AVC avc: denied { perfmon } for pid=1900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.995000 audit[1900]: AVC avc: denied { perfmon } for pid=1900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.995000 audit[1900]: AVC avc: denied { perfmon } for pid=1900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.995000 audit[1900]: AVC avc: denied { perfmon } for pid=1900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.995000 audit[1900]: AVC avc: denied { perfmon } for pid=1900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.995000 audit[1900]: AVC avc: denied { bpf } for pid=1900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.995000 audit[1900]: AVC avc: denied { bpf } for pid=1900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.995000 audit: BPF prog-id=79 op=LOAD Sep 6 00:15:27.995000 audit[1900]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00011f9d8 a2=78 a3=c0003c45f0 items=0 ppid=1734 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:27.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565386438343866343464363562656130373661373665313731636432 Sep 6 00:15:27.995000 audit[1900]: AVC avc: denied { bpf } for pid=1900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.995000 audit[1900]: AVC avc: denied { bpf } for pid=1900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.995000 audit[1900]: AVC avc: denied { perfmon } for pid=1900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.995000 audit[1900]: AVC avc: denied { perfmon } for pid=1900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.995000 audit[1900]: AVC avc: denied { perfmon } for pid=1900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.995000 audit[1900]: AVC avc: denied { perfmon } for pid=1900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.995000 audit[1900]: AVC avc: denied { perfmon } for pid=1900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.995000 audit[1900]: AVC avc: denied { bpf } for pid=1900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.995000 audit[1900]: AVC avc: denied { bpf } for pid=1900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.995000 audit: BPF prog-id=80 op=LOAD Sep 6 00:15:27.995000 audit[1900]: SYSCALL arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c00011f770 a2=78 a3=c0003c4638 items=0 ppid=1734 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:27.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565386438343866343464363562656130373661373665313731636432 Sep 6 00:15:27.995000 audit: BPF prog-id=80 op=UNLOAD Sep 6 00:15:27.995000 audit: BPF prog-id=79 op=UNLOAD Sep 6 00:15:27.995000 audit[1900]: AVC avc: denied { bpf } for pid=1900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.995000 audit[1900]: AVC avc: denied { bpf } for pid=1900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.995000 audit[1900]: AVC avc: denied { bpf } for pid=1900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.995000 audit[1900]: AVC avc: denied { perfmon } for pid=1900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.995000 audit[1900]: AVC avc: denied { perfmon } for pid=1900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.995000 audit[1900]: AVC avc: denied { perfmon } for pid=1900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.995000 audit[1900]: AVC avc: denied { perfmon } for pid=1900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.995000 audit[1900]: AVC avc: denied { perfmon } for pid=1900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.995000 audit[1900]: AVC avc: denied { bpf } for pid=1900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.995000 audit[1900]: AVC avc: denied { bpf } for pid=1900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:27.995000 audit: BPF prog-id=81 op=LOAD Sep 6 00:15:27.995000 audit[1900]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00011fc30 a2=78 a3=c0003c4a48 items=0 ppid=1734 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:27.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565386438343866343464363562656130373661373665313731636432 Sep 6 00:15:28.021237 env[1225]: time="2025-09-06T00:15:28.021159026Z" level=info msg="StartContainer for \"312b93a5ac6d66164d5c64c608d83b1ff4e9fedfcc10f4960433196b5aac6c56\" returns successfully" Sep 6 00:15:28.030401 env[1225]: time="2025-09-06T00:15:28.030344719Z" level=info msg="StartContainer for \"bbc9c4a20f7f961b12bfd1131bf7604dae254e29feaf3153f683c180e0c8e3a4\" returns successfully" Sep 6 00:15:28.055840 env[1225]: time="2025-09-06T00:15:28.055729898Z" level=info msg="StartContainer for \"ee8d848f44d65bea076a76e171cd2b1a95afead801eccb41abe8d71c52bb3558\" returns successfully" Sep 6 00:15:28.847216 kubelet[1679]: E0906 00:15:28.847172 1679 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 6 00:15:28.847906 kubelet[1679]: E0906 00:15:28.847874 1679 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:28.851520 kubelet[1679]: E0906 00:15:28.851491 1679 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 6 00:15:28.852022 kubelet[1679]: E0906 00:15:28.851954 1679 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:28.857701 kubelet[1679]: E0906 00:15:28.857645 1679 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 6 00:15:28.858269 kubelet[1679]: E0906 00:15:28.858237 1679 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:29.274021 kernel: kauditd_printk_skb: 380 callbacks suppressed Sep 6 00:15:29.274186 kernel: audit: type=1400 audit(1757117729.269:565): avc: denied { watch } for pid=1884 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:15:29.269000 audit[1884]: AVC avc: denied { watch } for pid=1884 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:15:29.269000 audit[1884]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000374040 a2=fc6 a3=0 items=0 ppid=1739 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 key=(null) Sep 6 00:15:29.290734 kernel: audit: type=1300 audit(1757117729.269:565): arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000374040 a2=fc6 a3=0 items=0 ppid=1739 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 key=(null) Sep 6 00:15:29.291003 kernel: audit: type=1327 audit(1757117729.269:565): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:15:29.269000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:15:29.271000 audit[1884]: AVC avc: denied { watch } for pid=1884 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:15:29.305362 kernel: audit: type=1400 audit(1757117729.271:566): avc: denied { watch } for pid=1884 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:15:29.305537 kernel: audit: type=1300 audit(1757117729.271:566): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000c62000 a2=fc6 a3=0 items=0 ppid=1739 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 key=(null) Sep 6 00:15:29.271000 audit[1884]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000c62000 a2=fc6 a3=0 items=0 ppid=1739 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 key=(null) Sep 6 00:15:29.321731 kernel: audit: type=1327 audit(1757117729.271:566): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:15:29.271000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:15:29.859726 kubelet[1679]: E0906 00:15:29.859683 1679 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 6 00:15:29.860217 kubelet[1679]: E0906 00:15:29.859835 1679 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:29.860709 kubelet[1679]: E0906 00:15:29.860679 1679 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 6 00:15:29.862050 kubelet[1679]: E0906 00:15:29.861495 1679 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 6 00:15:29.862050 kubelet[1679]: E0906 00:15:29.861739 1679 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:29.866925 kubelet[1679]: E0906 00:15:29.862296 1679 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:30.869418 kubelet[1679]: E0906 00:15:30.869353 1679 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 6 00:15:30.870176 kubelet[1679]: E0906 00:15:30.870151 1679 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:30.870516 kubelet[1679]: E0906 00:15:30.870495 1679 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 6 00:15:30.870754 kubelet[1679]: E0906 00:15:30.870734 1679 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:30.990571 kubelet[1679]: I0906 00:15:30.990509 1679 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Sep 6 00:15:32.633000 audit[1911]: AVC avc: denied { watch } for pid=1911 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:15:32.651805 kernel: audit: type=1400 audit(1757117732.633:567): avc: denied { watch } for pid=1911 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:15:32.652015 kernel: audit: type=1300 audit(1757117732.633:567): arch=c000003e syscall=254 success=no exit=-13 a0=3f a1=c004ce6330 a2=fc6 a3=0 items=0 ppid=1734 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 key=(null) Sep 6 00:15:32.633000 audit[1911]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3f a1=c004ce6330 a2=fc6 a3=0 items=0 ppid=1734 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 key=(null) Sep 6 00:15:32.633000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 6 00:15:32.642000 audit[1911]: AVC avc: denied { watch } for pid=1911 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:15:32.669156 kernel: audit: type=1327 audit(1757117732.633:567): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 6 00:15:32.669324 kernel: audit: type=1400 audit(1757117732.642:568): avc: denied { watch } for pid=1911 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:15:32.642000 audit[1911]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c002183660 a2=fc6 a3=0 items=0 ppid=1734 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 key=(null) Sep 6 00:15:32.642000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 6 00:15:32.645000 audit[1911]: AVC avc: denied { watch } for pid=1911 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:15:32.645000 audit[1911]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c004d202d0 a2=fc6 a3=0 items=0 ppid=1734 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 key=(null) Sep 6 00:15:32.645000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 6 00:15:32.645000 audit[1911]: AVC avc: denied { watch } for pid=1911 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:15:32.645000 audit[1911]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c004d20300 a2=fc6 a3=0 items=0 ppid=1734 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 key=(null) Sep 6 00:15:32.645000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 6 00:15:32.660000 audit[1911]: AVC avc: denied { watch } for pid=1911 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:15:32.660000 audit[1911]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5c a1=c003b6e340 a2=fc6 a3=0 items=0 ppid=1734 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 key=(null) Sep 6 00:15:32.660000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 6 00:15:32.660000 audit[1911]: AVC avc: denied { watch } for pid=1911 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:15:32.660000 audit[1911]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5c a1=c003ad85a0 a2=fc6 a3=0 items=0 ppid=1734 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 key=(null) Sep 6 00:15:32.660000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 6 00:15:32.788863 kubelet[1679]: E0906 00:15:32.788728 1679 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Sep 6 00:15:32.915483 kubelet[1679]: I0906 00:15:32.914699 1679 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Sep 6 00:15:32.915483 kubelet[1679]: E0906 00:15:32.914771 1679 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Sep 6 00:15:32.959810 kubelet[1679]: I0906 00:15:32.958731 1679 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Sep 6 00:15:32.998527 kubelet[1679]: E0906 00:15:32.998461 1679 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Sep 6 00:15:32.998527 kubelet[1679]: I0906 00:15:32.998516 1679 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Sep 6 00:15:33.007205 kubelet[1679]: E0906 00:15:33.007144 1679 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Sep 6 00:15:33.007205 kubelet[1679]: I0906 00:15:33.007200 1679 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Sep 6 00:15:33.011202 kubelet[1679]: E0906 00:15:33.010719 1679 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Sep 6 00:15:33.292460 kubelet[1679]: I0906 00:15:33.292364 1679 apiserver.go:52] "Watching apiserver" Sep 6 00:15:33.353813 kubelet[1679]: I0906 00:15:33.353670 1679 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Sep 6 00:15:36.839687 kubelet[1679]: I0906 00:15:36.837345 1679 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Sep 6 00:15:37.005079 kubelet[1679]: E0906 00:15:37.005034 1679 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:37.148668 kubelet[1679]: E0906 00:15:37.148397 1679 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:37.405346 kubelet[1679]: I0906 00:15:37.405115 1679 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Sep 6 00:15:37.419246 kubelet[1679]: E0906 00:15:37.419182 1679 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:38.150538 kubelet[1679]: E0906 00:15:38.150502 1679 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:39.505192 kubelet[1679]: I0906 00:15:39.500631 1679 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Sep 6 00:15:39.514426 kubelet[1679]: E0906 00:15:39.512891 1679 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:39.542604 systemd[1]: Reloading. Sep 6 00:15:39.598774 kubelet[1679]: I0906 00:15:39.598685 1679 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=3.59865183 podStartE2EDuration="3.59865183s" podCreationTimestamp="2025-09-06 00:15:36 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 00:15:39.598431749 +0000 UTC m=+17.061368072" watchObservedRunningTime="2025-09-06 00:15:39.59865183 +0000 UTC m=+17.061588153" Sep 6 00:15:39.599211 kubelet[1679]: I0906 00:15:39.599176 1679 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=2.5991651190000002 podStartE2EDuration="2.599165119s" podCreationTimestamp="2025-09-06 00:15:37 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 00:15:39.565354539 +0000 UTC m=+17.028290862" watchObservedRunningTime="2025-09-06 00:15:39.599165119 +0000 UTC m=+17.062101442" Sep 6 00:15:39.733115 /usr/lib/systemd/system-generators/torcx-generator[1985]: time="2025-09-06T00:15:39Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 6 00:15:39.733165 /usr/lib/systemd/system-generators/torcx-generator[1985]: time="2025-09-06T00:15:39Z" level=info msg="torcx already run" Sep 6 00:15:39.888176 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 6 00:15:39.888206 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 6 00:15:39.917680 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 6 00:15:40.069684 kernel: kauditd_printk_skb: 14 callbacks suppressed Sep 6 00:15:40.069884 kernel: audit: type=1400 audit(1757117740.044:573): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.069912 kernel: audit: type=1400 audit(1757117740.044:574): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.069934 kernel: audit: type=1400 audit(1757117740.044:575): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.085625 kernel: audit: type=1400 audit(1757117740.044:576): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.085831 kernel: audit: type=1400 audit(1757117740.044:577): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.085873 kernel: audit: type=1400 audit(1757117740.044:578): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.091754 kernel: audit: type=1400 audit(1757117740.044:579): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.091913 kernel: audit: type=1400 audit(1757117740.044:580): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.094714 kernel: audit: type=1400 audit(1757117740.044:581): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.101044 kernel: audit: type=1400 audit(1757117740.063:582): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.063000 audit: BPF prog-id=82 op=LOAD Sep 6 00:15:40.063000 audit: BPF prog-id=43 op=UNLOAD Sep 6 00:15:40.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.083000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.083000 audit: BPF prog-id=83 op=LOAD Sep 6 00:15:40.084000 audit: BPF prog-id=62 op=UNLOAD Sep 6 00:15:40.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.087000 audit: BPF prog-id=84 op=LOAD Sep 6 00:15:40.087000 audit: BPF prog-id=44 op=UNLOAD Sep 6 00:15:40.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.093000 audit: BPF prog-id=85 op=LOAD Sep 6 00:15:40.093000 audit: BPF prog-id=78 op=UNLOAD Sep 6 00:15:40.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.096000 audit: BPF prog-id=86 op=LOAD Sep 6 00:15:40.097000 audit: BPF prog-id=70 op=UNLOAD Sep 6 00:15:40.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.100000 audit: BPF prog-id=87 op=LOAD Sep 6 00:15:40.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.100000 audit: BPF prog-id=88 op=LOAD Sep 6 00:15:40.100000 audit: BPF prog-id=45 op=UNLOAD Sep 6 00:15:40.100000 audit: BPF prog-id=46 op=UNLOAD Sep 6 00:15:40.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.101000 audit: BPF prog-id=89 op=LOAD Sep 6 00:15:40.101000 audit: BPF prog-id=47 op=UNLOAD Sep 6 00:15:40.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.101000 audit: BPF prog-id=90 op=LOAD Sep 6 00:15:40.101000 audit: BPF prog-id=48 op=UNLOAD Sep 6 00:15:40.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.102000 audit: BPF prog-id=91 op=LOAD Sep 6 00:15:40.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.102000 audit: BPF prog-id=92 op=LOAD Sep 6 00:15:40.102000 audit: BPF prog-id=49 op=UNLOAD Sep 6 00:15:40.102000 audit: BPF prog-id=50 op=UNLOAD Sep 6 00:15:40.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.103000 audit: BPF prog-id=93 op=LOAD Sep 6 00:15:40.103000 audit: BPF prog-id=58 op=UNLOAD Sep 6 00:15:40.105000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.105000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.105000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.105000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.105000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.105000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.105000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.105000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.105000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.106000 audit: BPF prog-id=94 op=LOAD Sep 6 00:15:40.106000 audit: BPF prog-id=51 op=UNLOAD Sep 6 00:15:40.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.106000 audit: BPF prog-id=95 op=LOAD Sep 6 00:15:40.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.106000 audit: BPF prog-id=96 op=LOAD Sep 6 00:15:40.106000 audit: BPF prog-id=52 op=UNLOAD Sep 6 00:15:40.106000 audit: BPF prog-id=53 op=UNLOAD Sep 6 00:15:40.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.108000 audit: BPF prog-id=97 op=LOAD Sep 6 00:15:40.108000 audit: BPF prog-id=54 op=UNLOAD Sep 6 00:15:40.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.108000 audit: BPF prog-id=98 op=LOAD Sep 6 00:15:40.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.108000 audit: BPF prog-id=99 op=LOAD Sep 6 00:15:40.108000 audit: BPF prog-id=55 op=UNLOAD Sep 6 00:15:40.108000 audit: BPF prog-id=56 op=UNLOAD Sep 6 00:15:40.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.110000 audit: BPF prog-id=100 op=LOAD Sep 6 00:15:40.110000 audit: BPF prog-id=66 op=UNLOAD Sep 6 00:15:40.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.111000 audit: BPF prog-id=101 op=LOAD Sep 6 00:15:40.111000 audit: BPF prog-id=57 op=UNLOAD Sep 6 00:15:40.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.113000 audit: BPF prog-id=102 op=LOAD Sep 6 00:15:40.113000 audit: BPF prog-id=72 op=UNLOAD Sep 6 00:15:40.146165 systemd[1]: Stopping kubelet.service... Sep 6 00:15:40.186596 systemd[1]: kubelet.service: Deactivated successfully. Sep 6 00:15:40.186878 systemd[1]: Stopped kubelet.service. Sep 6 00:15:40.186969 systemd[1]: kubelet.service: Consumed 2.876s CPU time. Sep 6 00:15:40.185000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:15:40.192213 systemd[1]: Starting kubelet.service... Sep 6 00:15:40.393345 systemd[1]: Started kubelet.service. Sep 6 00:15:40.390000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:15:40.428000 audit[1884]: AVC avc: denied { watch } for pid=1884 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=7305 scontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Sep 6 00:15:40.428000 audit[1884]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000ef9300 a2=fc6 a3=0 items=0 ppid=1739 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 key=(null) Sep 6 00:15:40.428000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:15:40.534173 kubelet[2030]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 6 00:15:40.534173 kubelet[2030]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Sep 6 00:15:40.538345 kubelet[2030]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 6 00:15:40.538345 kubelet[2030]: I0906 00:15:40.534903 2030 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 6 00:15:40.556888 kubelet[2030]: I0906 00:15:40.556807 2030 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Sep 6 00:15:40.557249 kubelet[2030]: I0906 00:15:40.557224 2030 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 6 00:15:40.557786 kubelet[2030]: I0906 00:15:40.557762 2030 server.go:954] "Client rotation is on, will bootstrap in background" Sep 6 00:15:40.559836 kubelet[2030]: I0906 00:15:40.559793 2030 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Sep 6 00:15:40.563195 kubelet[2030]: I0906 00:15:40.563126 2030 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 6 00:15:40.594284 kubelet[2030]: E0906 00:15:40.594233 2030 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 6 00:15:40.602014 kubelet[2030]: I0906 00:15:40.594695 2030 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 6 00:15:40.628925 kubelet[2030]: I0906 00:15:40.623403 2030 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 6 00:15:40.628925 kubelet[2030]: I0906 00:15:40.623773 2030 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 6 00:15:40.628925 kubelet[2030]: I0906 00:15:40.623826 2030 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 6 00:15:40.628925 kubelet[2030]: I0906 00:15:40.624128 2030 topology_manager.go:138] "Creating topology manager with none policy" Sep 6 00:15:40.629389 kubelet[2030]: I0906 00:15:40.624140 2030 container_manager_linux.go:304] "Creating device plugin manager" Sep 6 00:15:40.629389 kubelet[2030]: I0906 00:15:40.624225 2030 state_mem.go:36] "Initialized new in-memory state store" Sep 6 00:15:40.629389 kubelet[2030]: I0906 00:15:40.624396 2030 kubelet.go:446] "Attempting to sync node with API server" Sep 6 00:15:40.629389 kubelet[2030]: I0906 00:15:40.624423 2030 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 6 00:15:40.629389 kubelet[2030]: I0906 00:15:40.624453 2030 kubelet.go:352] "Adding apiserver pod source" Sep 6 00:15:40.629389 kubelet[2030]: I0906 00:15:40.624470 2030 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 6 00:15:40.630241 kubelet[2030]: I0906 00:15:40.630220 2030 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 6 00:15:40.630848 kubelet[2030]: I0906 00:15:40.630831 2030 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Sep 6 00:15:40.631470 kubelet[2030]: I0906 00:15:40.631453 2030 watchdog_linux.go:99] "Systemd watchdog is not enabled" Sep 6 00:15:40.636935 kubelet[2030]: I0906 00:15:40.636904 2030 server.go:1287] "Started kubelet" Sep 6 00:15:40.644356 kubelet[2030]: I0906 00:15:40.644300 2030 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Sep 6 00:15:40.640000 audit[2030]: AVC avc: denied { mac_admin } for pid=2030 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.640000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 00:15:40.640000 audit[2030]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0009cc810 a1=c00035f320 a2=c0009cc7e0 a3=25 items=0 ppid=1 pid=2030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:40.640000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 00:15:40.646000 audit[2030]: AVC avc: denied { mac_admin } for pid=2030 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.646000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 00:15:40.646000 audit[2030]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000423d20 a1=c00035f338 a2=c0009cc8a0 a3=25 items=0 ppid=1 pid=2030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:40.646000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 00:15:40.648607 kubelet[2030]: I0906 00:15:40.648561 2030 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Sep 6 00:15:40.648778 kubelet[2030]: I0906 00:15:40.648757 2030 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 6 00:15:40.668818 kubelet[2030]: I0906 00:15:40.664147 2030 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Sep 6 00:15:40.673704 kubelet[2030]: I0906 00:15:40.671862 2030 server.go:479] "Adding debug handlers to kubelet server" Sep 6 00:15:40.673704 kubelet[2030]: I0906 00:15:40.672271 2030 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 6 00:15:40.675225 kubelet[2030]: I0906 00:15:40.675180 2030 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 6 00:15:40.675766 kubelet[2030]: I0906 00:15:40.675728 2030 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 6 00:15:40.686311 kubelet[2030]: E0906 00:15:40.686255 2030 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 6 00:15:40.688629 kubelet[2030]: I0906 00:15:40.686614 2030 volume_manager.go:297] "Starting Kubelet Volume Manager" Sep 6 00:15:40.688629 kubelet[2030]: I0906 00:15:40.687373 2030 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Sep 6 00:15:40.688629 kubelet[2030]: I0906 00:15:40.687609 2030 reconciler.go:26] "Reconciler: start to sync state" Sep 6 00:15:40.690518 kubelet[2030]: E0906 00:15:40.690468 2030 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Sep 6 00:15:40.690917 kubelet[2030]: I0906 00:15:40.690891 2030 factory.go:221] Registration of the systemd container factory successfully Sep 6 00:15:40.691107 kubelet[2030]: I0906 00:15:40.691074 2030 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 6 00:15:40.695394 kubelet[2030]: I0906 00:15:40.695354 2030 factory.go:221] Registration of the containerd container factory successfully Sep 6 00:15:40.701296 kubelet[2030]: I0906 00:15:40.701222 2030 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Sep 6 00:15:40.702314 kubelet[2030]: I0906 00:15:40.702274 2030 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Sep 6 00:15:40.702314 kubelet[2030]: I0906 00:15:40.702306 2030 status_manager.go:227] "Starting to sync pod status with apiserver" Sep 6 00:15:40.702420 kubelet[2030]: I0906 00:15:40.702332 2030 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Sep 6 00:15:40.702420 kubelet[2030]: I0906 00:15:40.702343 2030 kubelet.go:2382] "Starting kubelet main sync loop" Sep 6 00:15:40.702420 kubelet[2030]: E0906 00:15:40.702400 2030 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Sep 6 00:15:40.784875 kubelet[2030]: I0906 00:15:40.784582 2030 cpu_manager.go:221] "Starting CPU manager" policy="none" Sep 6 00:15:40.784875 kubelet[2030]: I0906 00:15:40.784614 2030 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Sep 6 00:15:40.784875 kubelet[2030]: I0906 00:15:40.784649 2030 state_mem.go:36] "Initialized new in-memory state store" Sep 6 00:15:40.784875 kubelet[2030]: I0906 00:15:40.784873 2030 state_mem.go:88] "Updated default CPUSet" cpuSet="" Sep 6 00:15:40.784875 kubelet[2030]: I0906 00:15:40.784887 2030 state_mem.go:96] "Updated CPUSet assignments" assignments={} Sep 6 00:15:40.785745 kubelet[2030]: I0906 00:15:40.784938 2030 policy_none.go:49] "None policy: Start" Sep 6 00:15:40.785745 kubelet[2030]: I0906 00:15:40.784958 2030 memory_manager.go:186] "Starting memorymanager" policy="None" Sep 6 00:15:40.785745 kubelet[2030]: I0906 00:15:40.784999 2030 state_mem.go:35] "Initializing new in-memory state store" Sep 6 00:15:40.785745 kubelet[2030]: I0906 00:15:40.785150 2030 state_mem.go:75] "Updated machine memory state" Sep 6 00:15:40.802786 kubelet[2030]: E0906 00:15:40.802726 2030 kubelet.go:2406] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Sep 6 00:15:40.803696 kubelet[2030]: I0906 00:15:40.803673 2030 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Sep 6 00:15:40.803909 kubelet[2030]: I0906 00:15:40.803884 2030 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Sep 6 00:15:40.802000 audit[2030]: AVC avc: denied { mac_admin } for pid=2030 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:40.802000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 00:15:40.802000 audit[2030]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000482fc0 a1=c0011dcae0 a2=c000482f60 a3=25 items=0 ppid=1 pid=2030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:40.802000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 00:15:40.805169 kubelet[2030]: I0906 00:15:40.805143 2030 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 6 00:15:40.805334 kubelet[2030]: I0906 00:15:40.805269 2030 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 6 00:15:40.806337 kubelet[2030]: I0906 00:15:40.806319 2030 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 6 00:15:40.814030 kubelet[2030]: E0906 00:15:40.813967 2030 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Sep 6 00:15:40.937818 kubelet[2030]: I0906 00:15:40.936380 2030 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Sep 6 00:15:40.987563 kubelet[2030]: I0906 00:15:40.987499 2030 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Sep 6 00:15:40.987778 kubelet[2030]: I0906 00:15:40.987625 2030 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Sep 6 00:15:41.010969 kubelet[2030]: I0906 00:15:41.010891 2030 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Sep 6 00:15:41.016562 kubelet[2030]: I0906 00:15:41.011402 2030 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Sep 6 00:15:41.016562 kubelet[2030]: I0906 00:15:41.013065 2030 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Sep 6 00:15:41.050685 kubelet[2030]: E0906 00:15:41.050626 2030 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Sep 6 00:15:41.053699 kubelet[2030]: E0906 00:15:41.053624 2030 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Sep 6 00:15:41.061809 kubelet[2030]: E0906 00:15:41.061750 2030 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Sep 6 00:15:41.193057 kubelet[2030]: I0906 00:15:41.192842 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/dd3ff0e036e76a77e8a9637a3f6bd955-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"dd3ff0e036e76a77e8a9637a3f6bd955\") " pod="kube-system/kube-apiserver-localhost" Sep 6 00:15:41.193057 kubelet[2030]: I0906 00:15:41.192922 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/a88c9297c136b0f15880bf567e89a977-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"a88c9297c136b0f15880bf567e89a977\") " pod="kube-system/kube-controller-manager-localhost" Sep 6 00:15:41.193057 kubelet[2030]: I0906 00:15:41.192958 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/a88c9297c136b0f15880bf567e89a977-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"a88c9297c136b0f15880bf567e89a977\") " pod="kube-system/kube-controller-manager-localhost" Sep 6 00:15:41.193057 kubelet[2030]: I0906 00:15:41.193011 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a9176403b596d0b29ae8ad12d635226d-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"a9176403b596d0b29ae8ad12d635226d\") " pod="kube-system/kube-scheduler-localhost" Sep 6 00:15:41.193057 kubelet[2030]: I0906 00:15:41.193052 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/dd3ff0e036e76a77e8a9637a3f6bd955-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"dd3ff0e036e76a77e8a9637a3f6bd955\") " pod="kube-system/kube-apiserver-localhost" Sep 6 00:15:41.193461 kubelet[2030]: I0906 00:15:41.193077 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/a88c9297c136b0f15880bf567e89a977-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"a88c9297c136b0f15880bf567e89a977\") " pod="kube-system/kube-controller-manager-localhost" Sep 6 00:15:41.193461 kubelet[2030]: I0906 00:15:41.193099 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a88c9297c136b0f15880bf567e89a977-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"a88c9297c136b0f15880bf567e89a977\") " pod="kube-system/kube-controller-manager-localhost" Sep 6 00:15:41.193461 kubelet[2030]: I0906 00:15:41.193126 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/a88c9297c136b0f15880bf567e89a977-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"a88c9297c136b0f15880bf567e89a977\") " pod="kube-system/kube-controller-manager-localhost" Sep 6 00:15:41.193461 kubelet[2030]: I0906 00:15:41.193152 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/dd3ff0e036e76a77e8a9637a3f6bd955-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"dd3ff0e036e76a77e8a9637a3f6bd955\") " pod="kube-system/kube-apiserver-localhost" Sep 6 00:15:41.351527 kubelet[2030]: E0906 00:15:41.351446 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:41.355116 kubelet[2030]: E0906 00:15:41.354929 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:41.364037 kubelet[2030]: E0906 00:15:41.363927 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:41.629165 kubelet[2030]: I0906 00:15:41.629087 2030 apiserver.go:52] "Watching apiserver" Sep 6 00:15:41.693170 kubelet[2030]: I0906 00:15:41.688858 2030 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Sep 6 00:15:41.754866 kubelet[2030]: E0906 00:15:41.754815 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:41.755181 kubelet[2030]: E0906 00:15:41.754842 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:41.757708 kubelet[2030]: E0906 00:15:41.755960 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:42.200000 audit[1884]: AVC avc: denied { watch } for pid=1884 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:15:42.200000 audit[1884]: AVC avc: denied { watch } for pid=1884 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:15:42.200000 audit[1884]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000780280 a2=fc6 a3=0 items=0 ppid=1739 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 key=(null) Sep 6 00:15:42.200000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:15:42.202000 audit[1884]: AVC avc: denied { watch } for pid=1884 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:15:42.200000 audit[1884]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00153ce20 a2=fc6 a3=0 items=0 ppid=1739 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 key=(null) Sep 6 00:15:42.200000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:15:42.202000 audit[1884]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000780440 a2=fc6 a3=0 items=0 ppid=1739 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 key=(null) Sep 6 00:15:42.202000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:15:42.203000 audit[1884]: AVC avc: denied { watch } for pid=1884 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:15:42.203000 audit[1884]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00137b020 a2=fc6 a3=0 items=0 ppid=1739 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 key=(null) Sep 6 00:15:42.203000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:15:42.758182 kubelet[2030]: E0906 00:15:42.758120 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:42.760583 kubelet[2030]: E0906 00:15:42.760547 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:43.018703 kubelet[2030]: E0906 00:15:43.018505 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:43.765494 kubelet[2030]: E0906 00:15:43.764035 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:44.896406 kubelet[2030]: I0906 00:15:44.895421 2030 kuberuntime_manager.go:1702] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Sep 6 00:15:44.896406 kubelet[2030]: I0906 00:15:44.896018 2030 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Sep 6 00:15:44.896896 env[1225]: time="2025-09-06T00:15:44.895820526Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Sep 6 00:15:45.538932 kubelet[2030]: E0906 00:15:45.538851 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:45.806422 kubelet[2030]: E0906 00:15:45.805527 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:46.231561 systemd[1]: Created slice kubepods-besteffort-podd6db1b16_fe2f_4964_9ff7_d3994cf7fcd3.slice. Sep 6 00:15:46.262834 systemd[1]: Created slice kubepods-besteffort-pod40ee6fe1_c6f8_4aa9_8c25_a3b7b155b429.slice. Sep 6 00:15:46.309733 kubelet[2030]: I0906 00:15:46.309669 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nrbvl\" (UniqueName: \"kubernetes.io/projected/40ee6fe1-c6f8-4aa9-8c25-a3b7b155b429-kube-api-access-nrbvl\") pod \"tigera-operator-755d956888-cm4xh\" (UID: \"40ee6fe1-c6f8-4aa9-8c25-a3b7b155b429\") " pod="tigera-operator/tigera-operator-755d956888-cm4xh" Sep 6 00:15:46.310546 kubelet[2030]: I0906 00:15:46.310352 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/d6db1b16-fe2f-4964-9ff7-d3994cf7fcd3-kube-proxy\") pod \"kube-proxy-qtkd6\" (UID: \"d6db1b16-fe2f-4964-9ff7-d3994cf7fcd3\") " pod="kube-system/kube-proxy-qtkd6" Sep 6 00:15:46.310831 kubelet[2030]: I0906 00:15:46.310744 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-sr6jc\" (UniqueName: \"kubernetes.io/projected/d6db1b16-fe2f-4964-9ff7-d3994cf7fcd3-kube-api-access-sr6jc\") pod \"kube-proxy-qtkd6\" (UID: \"d6db1b16-fe2f-4964-9ff7-d3994cf7fcd3\") " pod="kube-system/kube-proxy-qtkd6" Sep 6 00:15:46.310831 kubelet[2030]: I0906 00:15:46.310825 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/40ee6fe1-c6f8-4aa9-8c25-a3b7b155b429-var-lib-calico\") pod \"tigera-operator-755d956888-cm4xh\" (UID: \"40ee6fe1-c6f8-4aa9-8c25-a3b7b155b429\") " pod="tigera-operator/tigera-operator-755d956888-cm4xh" Sep 6 00:15:46.311142 kubelet[2030]: I0906 00:15:46.310866 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/d6db1b16-fe2f-4964-9ff7-d3994cf7fcd3-xtables-lock\") pod \"kube-proxy-qtkd6\" (UID: \"d6db1b16-fe2f-4964-9ff7-d3994cf7fcd3\") " pod="kube-system/kube-proxy-qtkd6" Sep 6 00:15:46.311142 kubelet[2030]: I0906 00:15:46.310895 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/d6db1b16-fe2f-4964-9ff7-d3994cf7fcd3-lib-modules\") pod \"kube-proxy-qtkd6\" (UID: \"d6db1b16-fe2f-4964-9ff7-d3994cf7fcd3\") " pod="kube-system/kube-proxy-qtkd6" Sep 6 00:15:46.430084 kubelet[2030]: I0906 00:15:46.430028 2030 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Sep 6 00:15:46.547408 kubelet[2030]: E0906 00:15:46.545473 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:46.547638 env[1225]: time="2025-09-06T00:15:46.546641799Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-qtkd6,Uid:d6db1b16-fe2f-4964-9ff7-d3994cf7fcd3,Namespace:kube-system,Attempt:0,}" Sep 6 00:15:46.578497 env[1225]: time="2025-09-06T00:15:46.577700191Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-755d956888-cm4xh,Uid:40ee6fe1-c6f8-4aa9-8c25-a3b7b155b429,Namespace:tigera-operator,Attempt:0,}" Sep 6 00:15:46.641830 env[1225]: time="2025-09-06T00:15:46.641693323Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:15:46.642070 env[1225]: time="2025-09-06T00:15:46.641829729Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:15:46.642070 env[1225]: time="2025-09-06T00:15:46.641855637Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:15:46.642183 env[1225]: time="2025-09-06T00:15:46.642057975Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ec7a72a6ac4164ccb125d057b7f6fde21c7d5cc30aa89ebafd6e8fd86c53ea22 pid=2088 runtime=io.containerd.runc.v2 Sep 6 00:15:46.683658 env[1225]: time="2025-09-06T00:15:46.681770766Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:15:46.683658 env[1225]: time="2025-09-06T00:15:46.681846307Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:15:46.683658 env[1225]: time="2025-09-06T00:15:46.681863349Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:15:46.683658 env[1225]: time="2025-09-06T00:15:46.682070647Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bb6334d87fa5710f85b49dfe5db7a9bd96232d4017bc81690459d0c8c11b04a3 pid=2107 runtime=io.containerd.runc.v2 Sep 6 00:15:46.707134 systemd[1]: Started cri-containerd-ec7a72a6ac4164ccb125d057b7f6fde21c7d5cc30aa89ebafd6e8fd86c53ea22.scope. Sep 6 00:15:46.734474 systemd[1]: Started cri-containerd-bb6334d87fa5710f85b49dfe5db7a9bd96232d4017bc81690459d0c8c11b04a3.scope. Sep 6 00:15:46.757516 kernel: kauditd_printk_skb: 263 callbacks suppressed Sep 6 00:15:46.757734 kernel: audit: type=1400 audit(1757117746.743:827): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.757783 kernel: audit: type=1400 audit(1757117746.743:828): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.757817 kernel: audit: type=1400 audit(1757117746.743:829): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.760623 kernel: audit: type=1400 audit(1757117746.743:830): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.768828 kernel: audit: type=1400 audit(1757117746.743:831): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.773139 kernel: audit: type=1400 audit(1757117746.743:832): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.777083 kernel: audit: type=1400 audit(1757117746.743:833): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.792048 kernel: audit: type=1400 audit(1757117746.743:834): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.792235 kernel: audit: type=1400 audit(1757117746.743:835): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.792268 kernel: audit: type=1400 audit(1757117746.748:836): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.748000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.748000 audit: BPF prog-id=103 op=LOAD Sep 6 00:15:46.748000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.748000 audit[2099]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2088 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:46.748000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563376137326136616334313634636362313235643035376237663666 Sep 6 00:15:46.748000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.748000 audit[2099]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2088 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:46.748000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563376137326136616334313634636362313235643035376237663666 Sep 6 00:15:46.748000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.748000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.748000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.748000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.748000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.748000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.748000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.748000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.748000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.748000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.748000 audit: BPF prog-id=104 op=LOAD Sep 6 00:15:46.748000 audit[2099]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000300860 items=0 ppid=2088 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:46.748000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563376137326136616334313634636362313235643035376237663666 Sep 6 00:15:46.758000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.758000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.758000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.758000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.758000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.758000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.758000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.758000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.758000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.758000 audit: BPF prog-id=105 op=LOAD Sep 6 00:15:46.758000 audit[2099]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00021b3b8 items=0 ppid=2088 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:46.758000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563376137326136616334313634636362313235643035376237663666 Sep 6 00:15:46.763000 audit: BPF prog-id=105 op=UNLOAD Sep 6 00:15:46.763000 audit: BPF prog-id=104 op=UNLOAD Sep 6 00:15:46.763000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.763000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.763000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.763000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.763000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.763000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.763000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.763000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.763000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.763000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.763000 audit: BPF prog-id=106 op=LOAD Sep 6 00:15:46.763000 audit[2099]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00021b7c8 items=0 ppid=2088 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:46.763000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563376137326136616334313634636362313235643035376237663666 Sep 6 00:15:46.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.791000 audit: BPF prog-id=107 op=LOAD Sep 6 00:15:46.796000 audit[2123]: AVC avc: denied { bpf } for pid=2123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.796000 audit[2123]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2107 pid=2123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:46.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262363333346438376661353731306638356234396466653564623761 Sep 6 00:15:46.796000 audit[2123]: AVC avc: denied { perfmon } for pid=2123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.796000 audit[2123]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2107 pid=2123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:46.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262363333346438376661353731306638356234396466653564623761 Sep 6 00:15:46.796000 audit[2123]: AVC avc: denied { bpf } for pid=2123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.796000 audit[2123]: AVC avc: denied { bpf } for pid=2123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.796000 audit[2123]: AVC avc: denied { bpf } for pid=2123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.796000 audit[2123]: AVC avc: denied { perfmon } for pid=2123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.796000 audit[2123]: AVC avc: denied { perfmon } for pid=2123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.796000 audit[2123]: AVC avc: denied { perfmon } for pid=2123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.796000 audit[2123]: AVC avc: denied { perfmon } for pid=2123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.796000 audit[2123]: AVC avc: denied { perfmon } for pid=2123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.796000 audit[2123]: AVC avc: denied { bpf } for pid=2123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.807214 kubelet[2030]: E0906 00:15:46.805103 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:46.796000 audit[2123]: AVC avc: denied { bpf } for pid=2123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.796000 audit: BPF prog-id=108 op=LOAD Sep 6 00:15:46.796000 audit[2123]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000099360 items=0 ppid=2107 pid=2123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:46.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262363333346438376661353731306638356234396466653564623761 Sep 6 00:15:46.808000 audit[2123]: AVC avc: denied { bpf } for pid=2123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.808000 audit[2123]: AVC avc: denied { bpf } for pid=2123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.808000 audit[2123]: AVC avc: denied { perfmon } for pid=2123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.808000 audit[2123]: AVC avc: denied { perfmon } for pid=2123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.808000 audit[2123]: AVC avc: denied { perfmon } for pid=2123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.808000 audit[2123]: AVC avc: denied { perfmon } for pid=2123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.808000 audit[2123]: AVC avc: denied { perfmon } for pid=2123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.808000 audit[2123]: AVC avc: denied { bpf } for pid=2123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.808000 audit[2123]: AVC avc: denied { bpf } for pid=2123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.808000 audit: BPF prog-id=109 op=LOAD Sep 6 00:15:46.808000 audit[2123]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000993a8 items=0 ppid=2107 pid=2123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:46.808000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262363333346438376661353731306638356234396466653564623761 Sep 6 00:15:46.810000 audit: BPF prog-id=109 op=UNLOAD Sep 6 00:15:46.810000 audit: BPF prog-id=108 op=UNLOAD Sep 6 00:15:46.810000 audit[2123]: AVC avc: denied { bpf } for pid=2123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.810000 audit[2123]: AVC avc: denied { bpf } for pid=2123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.810000 audit[2123]: AVC avc: denied { bpf } for pid=2123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.810000 audit[2123]: AVC avc: denied { perfmon } for pid=2123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.810000 audit[2123]: AVC avc: denied { perfmon } for pid=2123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.810000 audit[2123]: AVC avc: denied { perfmon } for pid=2123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.810000 audit[2123]: AVC avc: denied { perfmon } for pid=2123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.810000 audit[2123]: AVC avc: denied { perfmon } for pid=2123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.810000 audit[2123]: AVC avc: denied { bpf } for pid=2123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.810000 audit[2123]: AVC avc: denied { bpf } for pid=2123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:46.810000 audit: BPF prog-id=110 op=LOAD Sep 6 00:15:46.810000 audit[2123]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0000997b8 items=0 ppid=2107 pid=2123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:46.810000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262363333346438376661353731306638356234396466653564623761 Sep 6 00:15:46.881001 env[1225]: time="2025-09-06T00:15:46.880888156Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-qtkd6,Uid:d6db1b16-fe2f-4964-9ff7-d3994cf7fcd3,Namespace:kube-system,Attempt:0,} returns sandbox id \"bb6334d87fa5710f85b49dfe5db7a9bd96232d4017bc81690459d0c8c11b04a3\"" Sep 6 00:15:46.884435 kubelet[2030]: E0906 00:15:46.882664 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:46.902606 env[1225]: time="2025-09-06T00:15:46.900608533Z" level=info msg="CreateContainer within sandbox \"bb6334d87fa5710f85b49dfe5db7a9bd96232d4017bc81690459d0c8c11b04a3\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Sep 6 00:15:47.167563 env[1225]: time="2025-09-06T00:15:47.165575790Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-755d956888-cm4xh,Uid:40ee6fe1-c6f8-4aa9-8c25-a3b7b155b429,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"ec7a72a6ac4164ccb125d057b7f6fde21c7d5cc30aa89ebafd6e8fd86c53ea22\"" Sep 6 00:15:47.170197 env[1225]: time="2025-09-06T00:15:47.170127950Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\"" Sep 6 00:15:47.175136 env[1225]: time="2025-09-06T00:15:47.175062596Z" level=info msg="CreateContainer within sandbox \"bb6334d87fa5710f85b49dfe5db7a9bd96232d4017bc81690459d0c8c11b04a3\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"a8956d36f11a6d34aceb8b065052ef8c82c36aab171de461ecbebaefd1193b79\"" Sep 6 00:15:47.175871 env[1225]: time="2025-09-06T00:15:47.175815774Z" level=info msg="StartContainer for \"a8956d36f11a6d34aceb8b065052ef8c82c36aab171de461ecbebaefd1193b79\"" Sep 6 00:15:47.206366 systemd[1]: Started cri-containerd-a8956d36f11a6d34aceb8b065052ef8c82c36aab171de461ecbebaefd1193b79.scope. Sep 6 00:15:47.277000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:47.277000 audit[2169]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f18800e6148 items=0 ppid=2107 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138393536643336663131613664333461636562386230363530353265 Sep 6 00:15:47.277000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:47.277000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:47.277000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:47.277000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:47.277000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:47.277000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:47.277000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:47.277000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:47.277000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:47.277000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:47.277000 audit: BPF prog-id=111 op=LOAD Sep 6 00:15:47.277000 audit[2169]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003f8218 items=0 ppid=2107 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138393536643336663131613664333461636562386230363530353265 Sep 6 00:15:47.278000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:47.278000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:47.278000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:47.278000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:47.278000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:47.278000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:47.278000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:47.278000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:47.278000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:47.278000 audit: BPF prog-id=112 op=LOAD Sep 6 00:15:47.278000 audit[2169]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003f8268 items=0 ppid=2107 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.278000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138393536643336663131613664333461636562386230363530353265 Sep 6 00:15:47.279000 audit: BPF prog-id=112 op=UNLOAD Sep 6 00:15:47.279000 audit: BPF prog-id=111 op=UNLOAD Sep 6 00:15:47.279000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:47.279000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:47.279000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:47.279000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:47.279000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:47.279000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:47.279000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:47.279000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:47.279000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:47.279000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:47.279000 audit: BPF prog-id=113 op=LOAD Sep 6 00:15:47.279000 audit[2169]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003f82f8 items=0 ppid=2107 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138393536643336663131613664333461636562386230363530353265 Sep 6 00:15:47.329676 env[1225]: time="2025-09-06T00:15:47.329363097Z" level=info msg="StartContainer for \"a8956d36f11a6d34aceb8b065052ef8c82c36aab171de461ecbebaefd1193b79\" returns successfully" Sep 6 00:15:47.527000 audit[2230]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2230 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:15:47.527000 audit[2230]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe73e7c760 a2=0 a3=7ffe73e7c74c items=0 ppid=2180 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.527000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 6 00:15:47.530000 audit[2233]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2233 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:15:47.530000 audit[2233]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc1f8a2990 a2=0 a3=7ffc1f8a297c items=0 ppid=2180 pid=2233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.530000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 6 00:15:47.532000 audit[2231]: NETFILTER_CFG table=mangle:40 family=10 entries=1 op=nft_register_chain pid=2231 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:15:47.532000 audit[2231]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe60885990 a2=0 a3=7ffe6088597c items=0 ppid=2180 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.532000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 6 00:15:47.534000 audit[2234]: NETFILTER_CFG table=nat:41 family=10 entries=1 op=nft_register_chain pid=2234 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:15:47.534000 audit[2234]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc2ab465d0 a2=0 a3=7ffc2ab465bc items=0 ppid=2180 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.534000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 6 00:15:47.535000 audit[2235]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_chain pid=2235 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:15:47.535000 audit[2235]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdd8117ca0 a2=0 a3=7ffdd8117c8c items=0 ppid=2180 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.535000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 6 00:15:47.536000 audit[2236]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2236 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:15:47.536000 audit[2236]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffed9f64bd0 a2=0 a3=7ffed9f64bbc items=0 ppid=2180 pid=2236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.536000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 6 00:15:47.630000 audit[2237]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2237 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:15:47.630000 audit[2237]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc481906b0 a2=0 a3=7ffc4819069c items=0 ppid=2180 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.630000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 6 00:15:47.637000 audit[2239]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2239 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:15:47.637000 audit[2239]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fffd546d170 a2=0 a3=7fffd546d15c items=0 ppid=2180 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.637000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Sep 6 00:15:47.646000 audit[2242]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2242 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:15:47.646000 audit[2242]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffdcfe2e240 a2=0 a3=7ffdcfe2e22c items=0 ppid=2180 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.646000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Sep 6 00:15:47.651000 audit[2243]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2243 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:15:47.651000 audit[2243]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff291bced0 a2=0 a3=7fff291bcebc items=0 ppid=2180 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.651000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 6 00:15:47.657000 audit[2245]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2245 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:15:47.657000 audit[2245]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffefb574930 a2=0 a3=7ffefb57491c items=0 ppid=2180 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.657000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 6 00:15:47.661000 audit[2246]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2246 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:15:47.661000 audit[2246]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff7ecf3a80 a2=0 a3=7fff7ecf3a6c items=0 ppid=2180 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.661000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 6 00:15:47.665000 audit[2248]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2248 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:15:47.665000 audit[2248]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fffc39e02d0 a2=0 a3=7fffc39e02bc items=0 ppid=2180 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.665000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 6 00:15:47.672000 audit[2251]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2251 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:15:47.672000 audit[2251]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffdf20392f0 a2=0 a3=7ffdf20392dc items=0 ppid=2180 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.672000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Sep 6 00:15:47.681000 audit[2252]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2252 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:15:47.681000 audit[2252]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc32f9ae60 a2=0 a3=7ffc32f9ae4c items=0 ppid=2180 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.681000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 6 00:15:47.690000 audit[2254]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2254 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:15:47.690000 audit[2254]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffef0416040 a2=0 a3=7ffef041602c items=0 ppid=2180 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.690000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 6 00:15:47.691000 audit[2255]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2255 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:15:47.691000 audit[2255]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffeb0632c70 a2=0 a3=7ffeb0632c5c items=0 ppid=2180 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.691000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 6 00:15:47.697000 audit[2257]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2257 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:15:47.697000 audit[2257]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffff30549a0 a2=0 a3=7ffff305498c items=0 ppid=2180 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.697000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 6 00:15:47.704000 audit[2260]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2260 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:15:47.704000 audit[2260]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffec33e9d40 a2=0 a3=7ffec33e9d2c items=0 ppid=2180 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.704000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 6 00:15:47.717000 audit[2263]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2263 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:15:47.717000 audit[2263]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd992d0960 a2=0 a3=7ffd992d094c items=0 ppid=2180 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.717000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 6 00:15:47.722000 audit[2264]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2264 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:15:47.722000 audit[2264]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc22c6b240 a2=0 a3=7ffc22c6b22c items=0 ppid=2180 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.722000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 6 00:15:47.733000 audit[2266]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2266 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:15:47.733000 audit[2266]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7fffa8392680 a2=0 a3=7fffa839266c items=0 ppid=2180 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.733000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 6 00:15:47.741000 audit[2269]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2269 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:15:47.741000 audit[2269]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff69732650 a2=0 a3=7fff6973263c items=0 ppid=2180 pid=2269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.741000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 6 00:15:47.742000 audit[2270]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2270 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:15:47.742000 audit[2270]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffde8b34b40 a2=0 a3=7ffde8b34b2c items=0 ppid=2180 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.742000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 6 00:15:47.749000 audit[2272]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2272 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:15:47.749000 audit[2272]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffeef8b0f70 a2=0 a3=7ffeef8b0f5c items=0 ppid=2180 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.749000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 6 00:15:47.813206 kubelet[2030]: E0906 00:15:47.813170 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:47.858000 audit[2278]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2278 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:15:47.858000 audit[2278]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc8bb52920 a2=0 a3=7ffc8bb5290c items=0 ppid=2180 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.858000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:15:47.879000 audit[2278]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2278 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:15:47.879000 audit[2278]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffc8bb52920 a2=0 a3=7ffc8bb5290c items=0 ppid=2180 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.879000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:15:47.891000 audit[2283]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2283 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:15:47.891000 audit[2283]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd14aa8740 a2=0 a3=7ffd14aa872c items=0 ppid=2180 pid=2283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.891000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 6 00:15:47.894000 audit[2285]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2285 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:15:47.894000 audit[2285]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffe8de5c910 a2=0 a3=7ffe8de5c8fc items=0 ppid=2180 pid=2285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.894000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Sep 6 00:15:47.911000 audit[2288]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2288 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:15:47.911000 audit[2288]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fffc81a1a30 a2=0 a3=7fffc81a1a1c items=0 ppid=2180 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.911000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Sep 6 00:15:47.914000 audit[2289]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2289 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:15:47.914000 audit[2289]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd47a1d5e0 a2=0 a3=7ffd47a1d5cc items=0 ppid=2180 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.914000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 6 00:15:47.924000 audit[2291]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2291 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:15:47.924000 audit[2291]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd5380f660 a2=0 a3=7ffd5380f64c items=0 ppid=2180 pid=2291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.924000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 6 00:15:47.929000 audit[2292]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2292 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:15:47.929000 audit[2292]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcf8827640 a2=0 a3=7ffcf882762c items=0 ppid=2180 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.929000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 6 00:15:47.938000 audit[2294]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2294 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:15:47.938000 audit[2294]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff2cac81e0 a2=0 a3=7fff2cac81cc items=0 ppid=2180 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.938000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Sep 6 00:15:47.947000 audit[2297]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2297 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:15:47.947000 audit[2297]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffd9c0f2310 a2=0 a3=7ffd9c0f22fc items=0 ppid=2180 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.947000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 6 00:15:47.954000 audit[2298]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2298 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:15:47.954000 audit[2298]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdf59f26b0 a2=0 a3=7ffdf59f269c items=0 ppid=2180 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.954000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 6 00:15:47.959000 audit[2300]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2300 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:15:47.959000 audit[2300]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc9b164ae0 a2=0 a3=7ffc9b164acc items=0 ppid=2180 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.959000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 6 00:15:47.959000 audit[2301]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2301 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:15:47.959000 audit[2301]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd7e2b6b90 a2=0 a3=7ffd7e2b6b7c items=0 ppid=2180 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.959000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 6 00:15:47.966000 audit[2303]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2303 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:15:47.966000 audit[2303]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffda0f98360 a2=0 a3=7ffda0f9834c items=0 ppid=2180 pid=2303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.966000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 6 00:15:47.971000 audit[2306]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2306 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:15:47.971000 audit[2306]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffefe5a4690 a2=0 a3=7ffefe5a467c items=0 ppid=2180 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.971000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 6 00:15:47.980000 audit[2309]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2309 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:15:47.980000 audit[2309]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff831795c0 a2=0 a3=7fff831795ac items=0 ppid=2180 pid=2309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.980000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Sep 6 00:15:47.980000 audit[2310]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2310 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:15:47.980000 audit[2310]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe8cecd430 a2=0 a3=7ffe8cecd41c items=0 ppid=2180 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.980000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 6 00:15:47.988000 audit[2312]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2312 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:15:47.988000 audit[2312]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffc36974ab0 a2=0 a3=7ffc36974a9c items=0 ppid=2180 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.988000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 6 00:15:47.997000 audit[2315]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2315 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:15:47.997000 audit[2315]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffcb94e96a0 a2=0 a3=7ffcb94e968c items=0 ppid=2180 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.997000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 6 00:15:47.999000 audit[2316]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2316 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:15:47.999000 audit[2316]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff4dd726d0 a2=0 a3=7fff4dd726bc items=0 ppid=2180 pid=2316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:47.999000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 6 00:15:48.002000 audit[2318]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2318 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:15:48.002000 audit[2318]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffc1c6495f0 a2=0 a3=7ffc1c6495dc items=0 ppid=2180 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:48.002000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 6 00:15:48.004000 audit[2319]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2319 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:15:48.004000 audit[2319]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff44d02cd0 a2=0 a3=7fff44d02cbc items=0 ppid=2180 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:48.004000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 6 00:15:48.008000 audit[2321]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2321 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:15:48.008000 audit[2321]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd95c6d510 a2=0 a3=7ffd95c6d4fc items=0 ppid=2180 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:48.008000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 6 00:15:48.014000 audit[2324]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2324 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:15:48.014000 audit[2324]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd39c1fc50 a2=0 a3=7ffd39c1fc3c items=0 ppid=2180 pid=2324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:48.014000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 6 00:15:48.035000 audit[2326]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2326 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 6 00:15:48.035000 audit[2326]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffcd0248da0 a2=0 a3=7ffcd0248d8c items=0 ppid=2180 pid=2326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:48.035000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:15:48.036000 audit[2326]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2326 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 6 00:15:48.036000 audit[2326]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffcd0248da0 a2=0 a3=7ffcd0248d8c items=0 ppid=2180 pid=2326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:48.036000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:15:48.688283 kubelet[2030]: E0906 00:15:48.685758 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:48.772561 kubelet[2030]: I0906 00:15:48.772288 2030 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-qtkd6" podStartSLOduration=2.772257646 podStartE2EDuration="2.772257646s" podCreationTimestamp="2025-09-06 00:15:46 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 00:15:47.844204532 +0000 UTC m=+7.438428827" watchObservedRunningTime="2025-09-06 00:15:48.772257646 +0000 UTC m=+8.366481941" Sep 6 00:15:48.823216 kubelet[2030]: E0906 00:15:48.823155 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:48.842344 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1713463276.mount: Deactivated successfully. Sep 6 00:15:49.833341 kubelet[2030]: E0906 00:15:49.832864 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:15:50.406140 env[1225]: time="2025-09-06T00:15:50.406018886Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:50.411261 env[1225]: time="2025-09-06T00:15:50.411185816Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1911afdd8478c6ca3036ff85614050d5d19acc0f0c3f6a5a7b3e34b38dd309c9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:50.413773 env[1225]: time="2025-09-06T00:15:50.413693666Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:50.418583 env[1225]: time="2025-09-06T00:15:50.418495534Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:00a7a9b62f9b9a4e0856128b078539783b8352b07f707bff595cb604cc580f6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:15:50.419155 env[1225]: time="2025-09-06T00:15:50.419103651Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\" returns image reference \"sha256:1911afdd8478c6ca3036ff85614050d5d19acc0f0c3f6a5a7b3e34b38dd309c9\"" Sep 6 00:15:50.428641 env[1225]: time="2025-09-06T00:15:50.428551296Z" level=info msg="CreateContainer within sandbox \"ec7a72a6ac4164ccb125d057b7f6fde21c7d5cc30aa89ebafd6e8fd86c53ea22\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Sep 6 00:15:50.473128 env[1225]: time="2025-09-06T00:15:50.473026765Z" level=info msg="CreateContainer within sandbox \"ec7a72a6ac4164ccb125d057b7f6fde21c7d5cc30aa89ebafd6e8fd86c53ea22\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"f4c1ad07e5f12fd8711099aed1d85e2d9b617bff5dab2b79fe6b18fbe4a18956\"" Sep 6 00:15:50.478589 env[1225]: time="2025-09-06T00:15:50.478529794Z" level=info msg="StartContainer for \"f4c1ad07e5f12fd8711099aed1d85e2d9b617bff5dab2b79fe6b18fbe4a18956\"" Sep 6 00:15:50.565848 systemd[1]: Started cri-containerd-f4c1ad07e5f12fd8711099aed1d85e2d9b617bff5dab2b79fe6b18fbe4a18956.scope. Sep 6 00:15:50.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.594000 audit: BPF prog-id=114 op=LOAD Sep 6 00:15:50.595000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.595000 audit[2334]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=2088 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:50.595000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634633161643037653566313266643837313130393961656431643835 Sep 6 00:15:50.595000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.595000 audit[2334]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=8 items=0 ppid=2088 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:50.595000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634633161643037653566313266643837313130393961656431643835 Sep 6 00:15:50.595000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.595000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.595000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.595000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.595000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.595000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.595000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.595000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.595000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.595000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.595000 audit: BPF prog-id=115 op=LOAD Sep 6 00:15:50.595000 audit[2334]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c0000246f0 items=0 ppid=2088 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:50.595000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634633161643037653566313266643837313130393961656431643835 Sep 6 00:15:50.599000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.599000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.599000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.599000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.599000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.599000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.599000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.599000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.599000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.599000 audit: BPF prog-id=116 op=LOAD Sep 6 00:15:50.599000 audit[2334]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c000024738 items=0 ppid=2088 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:50.599000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634633161643037653566313266643837313130393961656431643835 Sep 6 00:15:50.600000 audit: BPF prog-id=116 op=UNLOAD Sep 6 00:15:50.600000 audit: BPF prog-id=115 op=UNLOAD Sep 6 00:15:50.600000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.600000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.600000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.600000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.600000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.600000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.600000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.600000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.600000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.600000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:15:50.600000 audit: BPF prog-id=117 op=LOAD Sep 6 00:15:50.600000 audit[2334]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c000024b48 items=0 ppid=2088 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:50.600000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634633161643037653566313266643837313130393961656431643835 Sep 6 00:15:50.651383 env[1225]: time="2025-09-06T00:15:50.650604365Z" level=info msg="StartContainer for \"f4c1ad07e5f12fd8711099aed1d85e2d9b617bff5dab2b79fe6b18fbe4a18956\" returns successfully" Sep 6 00:15:50.878936 kubelet[2030]: I0906 00:15:50.878491 2030 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-755d956888-cm4xh" podStartSLOduration=1.6253588780000001 podStartE2EDuration="4.878461264s" podCreationTimestamp="2025-09-06 00:15:46 +0000 UTC" firstStartedPulling="2025-09-06 00:15:47.167290917 +0000 UTC m=+6.761515202" lastFinishedPulling="2025-09-06 00:15:50.420393303 +0000 UTC m=+10.014617588" observedRunningTime="2025-09-06 00:15:50.878339296 +0000 UTC m=+10.472563611" watchObservedRunningTime="2025-09-06 00:15:50.878461264 +0000 UTC m=+10.472685579" Sep 6 00:15:56.522853 sudo[1372]: pam_unix(sudo:session): session closed for user root Sep 6 00:15:56.521000 audit[1372]: USER_END pid=1372 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:15:56.524259 kernel: kauditd_printk_skb: 357 callbacks suppressed Sep 6 00:15:56.524332 kernel: audit: type=1106 audit(1757117756.521:938): pid=1372 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:15:56.522000 audit[1372]: CRED_DISP pid=1372 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:15:56.536306 sshd[1368]: pam_unix(sshd:session): session closed for user core Sep 6 00:15:56.539727 systemd-logind[1218]: Session 7 logged out. Waiting for processes to exit. Sep 6 00:15:56.534000 audit[1368]: USER_END pid=1368 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:15:56.541502 systemd[1]: sshd@6-10.0.0.22:22-10.0.0.1:58716.service: Deactivated successfully. Sep 6 00:15:56.542509 systemd[1]: session-7.scope: Deactivated successfully. Sep 6 00:15:56.542904 systemd[1]: session-7.scope: Consumed 10.311s CPU time. Sep 6 00:15:56.548390 systemd-logind[1218]: Removed session 7. Sep 6 00:15:56.550657 kernel: audit: type=1104 audit(1757117756.522:939): pid=1372 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:15:56.550759 kernel: audit: type=1106 audit(1757117756.534:940): pid=1368 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:15:56.534000 audit[1368]: CRED_DISP pid=1368 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:15:56.557186 kernel: audit: type=1104 audit(1757117756.534:941): pid=1368 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:15:56.561281 kernel: audit: type=1131 audit(1757117756.540:942): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.22:22-10.0.0.1:58716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:15:56.540000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.22:22-10.0.0.1:58716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:15:57.217000 audit[2419]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2419 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:15:57.217000 audit[2419]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffc39b38fb0 a2=0 a3=7ffc39b38f9c items=0 ppid=2180 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:57.230360 kernel: audit: type=1325 audit(1757117757.217:943): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2419 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:15:57.230847 kernel: audit: type=1300 audit(1757117757.217:943): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffc39b38fb0 a2=0 a3=7ffc39b38f9c items=0 ppid=2180 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:57.231097 kernel: audit: type=1327 audit(1757117757.217:943): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:15:57.217000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:15:57.237000 audit[2419]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2419 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:15:57.243200 kernel: audit: type=1325 audit(1757117757.237:944): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2419 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:15:57.237000 audit[2419]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc39b38fb0 a2=0 a3=0 items=0 ppid=2180 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:57.251098 kernel: audit: type=1300 audit(1757117757.237:944): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc39b38fb0 a2=0 a3=0 items=0 ppid=2180 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:57.237000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:15:57.261000 audit[2422]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2422 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:15:57.261000 audit[2422]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffe15fb0760 a2=0 a3=7ffe15fb074c items=0 ppid=2180 pid=2422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:57.261000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:15:57.269000 audit[2422]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2422 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:15:57.269000 audit[2422]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe15fb0760 a2=0 a3=0 items=0 ppid=2180 pid=2422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:15:57.269000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:00.281000 audit[2424]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2424 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:00.281000 audit[2424]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffdeb72a210 a2=0 a3=7ffdeb72a1fc items=0 ppid=2180 pid=2424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:00.281000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:00.286000 audit[2424]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2424 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:00.286000 audit[2424]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffdeb72a210 a2=0 a3=0 items=0 ppid=2180 pid=2424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:00.286000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:00.310000 audit[2426]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=2426 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:00.310000 audit[2426]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7fff486266b0 a2=0 a3=7fff4862669c items=0 ppid=2180 pid=2426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:00.310000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:00.321000 audit[2426]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2426 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:00.321000 audit[2426]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff486266b0 a2=0 a3=0 items=0 ppid=2180 pid=2426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:00.321000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:00.874959 kubelet[2030]: I0906 00:16:00.873197 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1f903523-d455-4edb-bde5-de801c747a65-tigera-ca-bundle\") pod \"calico-typha-7975869f8c-6pb7h\" (UID: \"1f903523-d455-4edb-bde5-de801c747a65\") " pod="calico-system/calico-typha-7975869f8c-6pb7h" Sep 6 00:16:00.874959 kubelet[2030]: I0906 00:16:00.873263 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/1f903523-d455-4edb-bde5-de801c747a65-typha-certs\") pod \"calico-typha-7975869f8c-6pb7h\" (UID: \"1f903523-d455-4edb-bde5-de801c747a65\") " pod="calico-system/calico-typha-7975869f8c-6pb7h" Sep 6 00:16:00.874959 kubelet[2030]: I0906 00:16:00.873287 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-f94tt\" (UniqueName: \"kubernetes.io/projected/1f903523-d455-4edb-bde5-de801c747a65-kube-api-access-f94tt\") pod \"calico-typha-7975869f8c-6pb7h\" (UID: \"1f903523-d455-4edb-bde5-de801c747a65\") " pod="calico-system/calico-typha-7975869f8c-6pb7h" Sep 6 00:16:00.880759 systemd[1]: Created slice kubepods-besteffort-pod1f903523_d455_4edb_bde5_de801c747a65.slice. Sep 6 00:16:01.343000 audit[2431]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=2431 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:01.343000 audit[2431]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7fff778143d0 a2=0 a3=7fff778143bc items=0 ppid=2180 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:01.343000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:01.351000 audit[2431]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2431 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:01.351000 audit[2431]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff778143d0 a2=0 a3=0 items=0 ppid=2180 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:01.351000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:01.489869 kubelet[2030]: E0906 00:16:01.489476 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:16:01.492203 env[1225]: time="2025-09-06T00:16:01.491343007Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-7975869f8c-6pb7h,Uid:1f903523-d455-4edb-bde5-de801c747a65,Namespace:calico-system,Attempt:0,}" Sep 6 00:16:01.602238 env[1225]: time="2025-09-06T00:16:01.601020785Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:16:01.602238 env[1225]: time="2025-09-06T00:16:01.601097113Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:16:01.602238 env[1225]: time="2025-09-06T00:16:01.601113166Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:16:01.602238 env[1225]: time="2025-09-06T00:16:01.601499382Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/248e3cb7a4c1e60f781e4614a5674bbb479a0997ffb0b0daac5b0ac79d17089f pid=2439 runtime=io.containerd.runc.v2 Sep 6 00:16:01.638525 systemd[1]: Started cri-containerd-248e3cb7a4c1e60f781e4614a5674bbb479a0997ffb0b0daac5b0ac79d17089f.scope. Sep 6 00:16:01.695644 kernel: kauditd_printk_skb: 25 callbacks suppressed Sep 6 00:16:01.695885 kernel: audit: type=1400 audit(1757117761.673:953): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.695951 kernel: audit: type=1400 audit(1757117761.673:954): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.696031 kernel: audit: type=1400 audit(1757117761.673:955): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.696495 kubelet[2030]: I0906 00:16:01.682382 2030 status_manager.go:890] "Failed to get status for pod" podUID="d1607e66-dcf8-4ef6-b995-426491745616" pod="calico-system/calico-node-86pvn" err="pods \"calico-node-86pvn\" is forbidden: User \"system:node:localhost\" cannot get resource \"pods\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'localhost' and this object" Sep 6 00:16:01.696495 kubelet[2030]: W0906 00:16:01.682525 2030 reflector.go:569] object-"calico-system"/"cni-config": failed to list *v1.ConfigMap: configmaps "cni-config" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'localhost' and this object Sep 6 00:16:01.696495 kubelet[2030]: E0906 00:16:01.682563 2030 reflector.go:166] "Unhandled Error" err="object-\"calico-system\"/\"cni-config\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"cni-config\" is forbidden: User \"system:node:localhost\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'localhost' and this object" logger="UnhandledError" Sep 6 00:16:01.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.701114 kernel: audit: type=1400 audit(1757117761.673:956): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.709600 kernel: audit: type=1400 audit(1757117761.673:957): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.709742 kernel: audit: type=1400 audit(1757117761.673:958): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.713617 kernel: audit: type=1400 audit(1757117761.673:959): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.713147 systemd[1]: Created slice kubepods-besteffort-podd1607e66_dcf8_4ef6_b995_426491745616.slice. Sep 6 00:16:01.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.723620 kernel: audit: type=1400 audit(1757117761.673:960): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.723761 kernel: audit: type=1400 audit(1757117761.673:961): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.732477 kernel: audit: type=1400 audit(1757117761.674:962): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.674000 audit: BPF prog-id=118 op=LOAD Sep 6 00:16:01.692000 audit[2450]: AVC avc: denied { bpf } for pid=2450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.692000 audit[2450]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2439 pid=2450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:01.692000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234386533636237613463316536306637383165343631346135363734 Sep 6 00:16:01.692000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.692000 audit[2450]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2439 pid=2450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:01.692000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234386533636237613463316536306637383165343631346135363734 Sep 6 00:16:01.692000 audit[2450]: AVC avc: denied { bpf } for pid=2450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.692000 audit[2450]: AVC avc: denied { bpf } for pid=2450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.692000 audit[2450]: AVC avc: denied { bpf } for pid=2450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.692000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.692000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.692000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.692000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.692000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.692000 audit[2450]: AVC avc: denied { bpf } for pid=2450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.692000 audit[2450]: AVC avc: denied { bpf } for pid=2450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.692000 audit: BPF prog-id=119 op=LOAD Sep 6 00:16:01.692000 audit[2450]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0002221d0 items=0 ppid=2439 pid=2450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:01.692000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234386533636237613463316536306637383165343631346135363734 Sep 6 00:16:01.711000 audit[2450]: AVC avc: denied { bpf } for pid=2450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.711000 audit[2450]: AVC avc: denied { bpf } for pid=2450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.711000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.711000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.711000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.711000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.711000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.711000 audit[2450]: AVC avc: denied { bpf } for pid=2450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.711000 audit[2450]: AVC avc: denied { bpf } for pid=2450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.711000 audit: BPF prog-id=120 op=LOAD Sep 6 00:16:01.711000 audit[2450]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000222218 items=0 ppid=2439 pid=2450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:01.711000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234386533636237613463316536306637383165343631346135363734 Sep 6 00:16:01.722000 audit: BPF prog-id=120 op=UNLOAD Sep 6 00:16:01.722000 audit: BPF prog-id=119 op=UNLOAD Sep 6 00:16:01.723000 audit[2450]: AVC avc: denied { bpf } for pid=2450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.723000 audit[2450]: AVC avc: denied { bpf } for pid=2450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.723000 audit[2450]: AVC avc: denied { bpf } for pid=2450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.723000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.723000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.723000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.723000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.723000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.723000 audit[2450]: AVC avc: denied { bpf } for pid=2450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.723000 audit[2450]: AVC avc: denied { bpf } for pid=2450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:01.723000 audit: BPF prog-id=121 op=LOAD Sep 6 00:16:01.723000 audit[2450]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000222628 items=0 ppid=2439 pid=2450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:01.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234386533636237613463316536306637383165343631346135363734 Sep 6 00:16:01.792849 kubelet[2030]: E0906 00:16:01.791453 2030 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-pkfnl" podUID="5fcc5872-6420-4c35-9d81-fbabf8a0c640" Sep 6 00:16:01.792849 kubelet[2030]: I0906 00:16:01.791928 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/d1607e66-dcf8-4ef6-b995-426491745616-node-certs\") pod \"calico-node-86pvn\" (UID: \"d1607e66-dcf8-4ef6-b995-426491745616\") " pod="calico-system/calico-node-86pvn" Sep 6 00:16:01.792849 kubelet[2030]: I0906 00:16:01.791963 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/d1607e66-dcf8-4ef6-b995-426491745616-var-lib-calico\") pod \"calico-node-86pvn\" (UID: \"d1607e66-dcf8-4ef6-b995-426491745616\") " pod="calico-system/calico-node-86pvn" Sep 6 00:16:01.792849 kubelet[2030]: I0906 00:16:01.792042 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/d1607e66-dcf8-4ef6-b995-426491745616-xtables-lock\") pod \"calico-node-86pvn\" (UID: \"d1607e66-dcf8-4ef6-b995-426491745616\") " pod="calico-system/calico-node-86pvn" Sep 6 00:16:01.792849 kubelet[2030]: I0906 00:16:01.792074 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/d1607e66-dcf8-4ef6-b995-426491745616-cni-bin-dir\") pod \"calico-node-86pvn\" (UID: \"d1607e66-dcf8-4ef6-b995-426491745616\") " pod="calico-system/calico-node-86pvn" Sep 6 00:16:01.793405 kubelet[2030]: I0906 00:16:01.792102 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/d1607e66-dcf8-4ef6-b995-426491745616-flexvol-driver-host\") pod \"calico-node-86pvn\" (UID: \"d1607e66-dcf8-4ef6-b995-426491745616\") " pod="calico-system/calico-node-86pvn" Sep 6 00:16:01.793405 kubelet[2030]: I0906 00:16:01.792128 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/d1607e66-dcf8-4ef6-b995-426491745616-lib-modules\") pod \"calico-node-86pvn\" (UID: \"d1607e66-dcf8-4ef6-b995-426491745616\") " pod="calico-system/calico-node-86pvn" Sep 6 00:16:01.793405 kubelet[2030]: I0906 00:16:01.792154 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/d1607e66-dcf8-4ef6-b995-426491745616-policysync\") pod \"calico-node-86pvn\" (UID: \"d1607e66-dcf8-4ef6-b995-426491745616\") " pod="calico-system/calico-node-86pvn" Sep 6 00:16:01.793405 kubelet[2030]: I0906 00:16:01.792195 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/d1607e66-dcf8-4ef6-b995-426491745616-var-run-calico\") pod \"calico-node-86pvn\" (UID: \"d1607e66-dcf8-4ef6-b995-426491745616\") " pod="calico-system/calico-node-86pvn" Sep 6 00:16:01.793405 kubelet[2030]: I0906 00:16:01.792221 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-znrvg\" (UniqueName: \"kubernetes.io/projected/d1607e66-dcf8-4ef6-b995-426491745616-kube-api-access-znrvg\") pod \"calico-node-86pvn\" (UID: \"d1607e66-dcf8-4ef6-b995-426491745616\") " pod="calico-system/calico-node-86pvn" Sep 6 00:16:01.793553 kubelet[2030]: I0906 00:16:01.792247 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/d1607e66-dcf8-4ef6-b995-426491745616-cni-log-dir\") pod \"calico-node-86pvn\" (UID: \"d1607e66-dcf8-4ef6-b995-426491745616\") " pod="calico-system/calico-node-86pvn" Sep 6 00:16:01.793553 kubelet[2030]: I0906 00:16:01.792270 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/d1607e66-dcf8-4ef6-b995-426491745616-cni-net-dir\") pod \"calico-node-86pvn\" (UID: \"d1607e66-dcf8-4ef6-b995-426491745616\") " pod="calico-system/calico-node-86pvn" Sep 6 00:16:01.793553 kubelet[2030]: I0906 00:16:01.792293 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d1607e66-dcf8-4ef6-b995-426491745616-tigera-ca-bundle\") pod \"calico-node-86pvn\" (UID: \"d1607e66-dcf8-4ef6-b995-426491745616\") " pod="calico-system/calico-node-86pvn" Sep 6 00:16:01.799222 env[1225]: time="2025-09-06T00:16:01.799150460Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-7975869f8c-6pb7h,Uid:1f903523-d455-4edb-bde5-de801c747a65,Namespace:calico-system,Attempt:0,} returns sandbox id \"248e3cb7a4c1e60f781e4614a5674bbb479a0997ffb0b0daac5b0ac79d17089f\"" Sep 6 00:16:01.800425 kubelet[2030]: E0906 00:16:01.800370 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:16:01.811876 env[1225]: time="2025-09-06T00:16:01.811788458Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\"" Sep 6 00:16:01.899279 kubelet[2030]: I0906 00:16:01.893308 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/5fcc5872-6420-4c35-9d81-fbabf8a0c640-kubelet-dir\") pod \"csi-node-driver-pkfnl\" (UID: \"5fcc5872-6420-4c35-9d81-fbabf8a0c640\") " pod="calico-system/csi-node-driver-pkfnl" Sep 6 00:16:01.899279 kubelet[2030]: I0906 00:16:01.893400 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/5fcc5872-6420-4c35-9d81-fbabf8a0c640-varrun\") pod \"csi-node-driver-pkfnl\" (UID: \"5fcc5872-6420-4c35-9d81-fbabf8a0c640\") " pod="calico-system/csi-node-driver-pkfnl" Sep 6 00:16:01.899279 kubelet[2030]: I0906 00:16:01.893458 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qhz4c\" (UniqueName: \"kubernetes.io/projected/5fcc5872-6420-4c35-9d81-fbabf8a0c640-kube-api-access-qhz4c\") pod \"csi-node-driver-pkfnl\" (UID: \"5fcc5872-6420-4c35-9d81-fbabf8a0c640\") " pod="calico-system/csi-node-driver-pkfnl" Sep 6 00:16:01.899279 kubelet[2030]: I0906 00:16:01.893520 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/5fcc5872-6420-4c35-9d81-fbabf8a0c640-registration-dir\") pod \"csi-node-driver-pkfnl\" (UID: \"5fcc5872-6420-4c35-9d81-fbabf8a0c640\") " pod="calico-system/csi-node-driver-pkfnl" Sep 6 00:16:01.899279 kubelet[2030]: I0906 00:16:01.893566 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/5fcc5872-6420-4c35-9d81-fbabf8a0c640-socket-dir\") pod \"csi-node-driver-pkfnl\" (UID: \"5fcc5872-6420-4c35-9d81-fbabf8a0c640\") " pod="calico-system/csi-node-driver-pkfnl" Sep 6 00:16:01.907797 kubelet[2030]: E0906 00:16:01.907725 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:01.907797 kubelet[2030]: W0906 00:16:01.907775 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:01.907797 kubelet[2030]: E0906 00:16:01.907828 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:01.922451 kubelet[2030]: E0906 00:16:01.922404 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:01.922451 kubelet[2030]: W0906 00:16:01.922436 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:01.922699 kubelet[2030]: E0906 00:16:01.922466 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:01.994259 kubelet[2030]: E0906 00:16:01.994197 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:01.994259 kubelet[2030]: W0906 00:16:01.994240 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:01.994259 kubelet[2030]: E0906 00:16:01.994270 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:01.994602 kubelet[2030]: E0906 00:16:01.994526 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:01.994602 kubelet[2030]: W0906 00:16:01.994540 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:01.994602 kubelet[2030]: E0906 00:16:01.994553 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:01.994814 kubelet[2030]: E0906 00:16:01.994782 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:01.994814 kubelet[2030]: W0906 00:16:01.994805 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:01.994912 kubelet[2030]: E0906 00:16:01.994817 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:01.995115 kubelet[2030]: E0906 00:16:01.995085 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:01.995115 kubelet[2030]: W0906 00:16:01.995105 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:01.995115 kubelet[2030]: E0906 00:16:01.995119 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:01.995370 kubelet[2030]: E0906 00:16:01.995340 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:01.995370 kubelet[2030]: W0906 00:16:01.995360 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:01.995370 kubelet[2030]: E0906 00:16:01.995372 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:01.999080 kubelet[2030]: E0906 00:16:01.999010 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:01.999080 kubelet[2030]: W0906 00:16:01.999068 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:01.999331 kubelet[2030]: E0906 00:16:01.999118 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:01.999516 kubelet[2030]: E0906 00:16:01.999491 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:01.999516 kubelet[2030]: W0906 00:16:01.999507 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:01.999661 kubelet[2030]: E0906 00:16:01.999629 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:01.999761 kubelet[2030]: E0906 00:16:01.999741 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:01.999761 kubelet[2030]: W0906 00:16:01.999753 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:01.999853 kubelet[2030]: E0906 00:16:01.999838 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:02.000081 kubelet[2030]: E0906 00:16:02.000060 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:02.000081 kubelet[2030]: W0906 00:16:02.000074 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:02.000177 kubelet[2030]: E0906 00:16:02.000158 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:02.002502 kubelet[2030]: E0906 00:16:02.002444 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:02.002502 kubelet[2030]: W0906 00:16:02.002475 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:02.002783 kubelet[2030]: E0906 00:16:02.002563 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:02.002863 kubelet[2030]: E0906 00:16:02.002831 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:02.002863 kubelet[2030]: W0906 00:16:02.002851 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:02.003012 kubelet[2030]: E0906 00:16:02.002902 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:02.003397 kubelet[2030]: E0906 00:16:02.003366 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:02.003397 kubelet[2030]: W0906 00:16:02.003387 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:02.003549 kubelet[2030]: E0906 00:16:02.003476 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:02.003626 kubelet[2030]: E0906 00:16:02.003598 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:02.003626 kubelet[2030]: W0906 00:16:02.003615 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:02.003736 kubelet[2030]: E0906 00:16:02.003668 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:02.003915 kubelet[2030]: E0906 00:16:02.003883 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:02.003999 kubelet[2030]: W0906 00:16:02.003908 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:02.004191 kubelet[2030]: E0906 00:16:02.004137 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:02.004400 kubelet[2030]: E0906 00:16:02.004370 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:02.004400 kubelet[2030]: W0906 00:16:02.004394 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:02.004509 kubelet[2030]: E0906 00:16:02.004431 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:02.005926 kubelet[2030]: E0906 00:16:02.004746 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:02.005926 kubelet[2030]: W0906 00:16:02.004759 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:02.005926 kubelet[2030]: E0906 00:16:02.004876 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:02.006300 kubelet[2030]: E0906 00:16:02.006224 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:02.006300 kubelet[2030]: W0906 00:16:02.006239 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:02.006374 kubelet[2030]: E0906 00:16:02.006294 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:02.006504 kubelet[2030]: E0906 00:16:02.006480 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:02.006504 kubelet[2030]: W0906 00:16:02.006499 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:02.006609 kubelet[2030]: E0906 00:16:02.006533 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:02.006833 kubelet[2030]: E0906 00:16:02.006770 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:02.006833 kubelet[2030]: W0906 00:16:02.006788 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:02.007089 kubelet[2030]: E0906 00:16:02.007032 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:02.007242 kubelet[2030]: E0906 00:16:02.007123 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:02.007356 kubelet[2030]: W0906 00:16:02.007324 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:02.007518 kubelet[2030]: E0906 00:16:02.007484 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:02.007946 kubelet[2030]: E0906 00:16:02.007929 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:02.008092 kubelet[2030]: W0906 00:16:02.008071 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:02.008249 kubelet[2030]: E0906 00:16:02.008214 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:02.010785 kubelet[2030]: E0906 00:16:02.010759 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:02.010911 kubelet[2030]: W0906 00:16:02.010890 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:02.011107 kubelet[2030]: E0906 00:16:02.011073 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:02.012535 kubelet[2030]: E0906 00:16:02.012514 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:02.012660 kubelet[2030]: W0906 00:16:02.012636 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:02.012867 kubelet[2030]: E0906 00:16:02.012815 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:02.013180 kubelet[2030]: E0906 00:16:02.013163 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:02.013277 kubelet[2030]: W0906 00:16:02.013257 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:02.013446 kubelet[2030]: E0906 00:16:02.013407 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:02.014530 kubelet[2030]: E0906 00:16:02.014514 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:02.014661 kubelet[2030]: W0906 00:16:02.014611 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:02.014816 kubelet[2030]: E0906 00:16:02.014791 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:02.024147 env[1225]: time="2025-09-06T00:16:02.022152576Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-86pvn,Uid:d1607e66-dcf8-4ef6-b995-426491745616,Namespace:calico-system,Attempt:0,}" Sep 6 00:16:02.035109 kubelet[2030]: E0906 00:16:02.035035 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:02.035109 kubelet[2030]: W0906 00:16:02.035081 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:02.035109 kubelet[2030]: E0906 00:16:02.035112 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:02.106811 env[1225]: time="2025-09-06T00:16:02.102662001Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:16:02.106811 env[1225]: time="2025-09-06T00:16:02.102755573Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:16:02.106811 env[1225]: time="2025-09-06T00:16:02.102769853Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:16:02.106811 env[1225]: time="2025-09-06T00:16:02.102957519Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d999b7f31c45a9c17f33e98c8a41477aa5cd382327f7bd577425000212899ce1 pid=2511 runtime=io.containerd.runc.v2 Sep 6 00:16:02.141706 systemd[1]: Started cri-containerd-d999b7f31c45a9c17f33e98c8a41477aa5cd382327f7bd577425000212899ce1.scope. Sep 6 00:16:02.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.167000 audit: BPF prog-id=122 op=LOAD Sep 6 00:16:02.168000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.168000 audit[2518]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2511 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:02.168000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439393962376633316334356139633137663333653938633861343134 Sep 6 00:16:02.168000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.168000 audit[2518]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2511 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:02.168000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439393962376633316334356139633137663333653938633861343134 Sep 6 00:16:02.168000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.168000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.168000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.168000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.168000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.168000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.168000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.168000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.168000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.168000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.168000 audit: BPF prog-id=123 op=LOAD Sep 6 00:16:02.168000 audit[2518]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000354000 items=0 ppid=2511 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:02.168000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439393962376633316334356139633137663333653938633861343134 Sep 6 00:16:02.168000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.168000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.168000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.168000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.168000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.168000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.168000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.168000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.168000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.168000 audit: BPF prog-id=124 op=LOAD Sep 6 00:16:02.168000 audit[2518]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000354048 items=0 ppid=2511 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:02.168000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439393962376633316334356139633137663333653938633861343134 Sep 6 00:16:02.169000 audit: BPF prog-id=124 op=UNLOAD Sep 6 00:16:02.169000 audit: BPF prog-id=123 op=UNLOAD Sep 6 00:16:02.169000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.169000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.169000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.169000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.169000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.169000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.169000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.169000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.169000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.169000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:02.169000 audit: BPF prog-id=125 op=LOAD Sep 6 00:16:02.169000 audit[2518]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000354458 items=0 ppid=2511 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:02.169000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439393962376633316334356139633137663333653938633861343134 Sep 6 00:16:02.186640 systemd[1]: run-containerd-runc-k8s.io-248e3cb7a4c1e60f781e4614a5674bbb479a0997ffb0b0daac5b0ac79d17089f-runc.l2urDO.mount: Deactivated successfully. Sep 6 00:16:02.220812 env[1225]: time="2025-09-06T00:16:02.220748233Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-86pvn,Uid:d1607e66-dcf8-4ef6-b995-426491745616,Namespace:calico-system,Attempt:0,} returns sandbox id \"d999b7f31c45a9c17f33e98c8a41477aa5cd382327f7bd577425000212899ce1\"" Sep 6 00:16:03.705374 kubelet[2030]: E0906 00:16:03.704755 2030 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-pkfnl" podUID="5fcc5872-6420-4c35-9d81-fbabf8a0c640" Sep 6 00:16:04.274086 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3320408554.mount: Deactivated successfully. Sep 6 00:16:05.704253 kubelet[2030]: E0906 00:16:05.704119 2030 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-pkfnl" podUID="5fcc5872-6420-4c35-9d81-fbabf8a0c640" Sep 6 00:16:05.731230 env[1225]: time="2025-09-06T00:16:05.731128963Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:05.738682 env[1225]: time="2025-09-06T00:16:05.738551032Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1d7bb7b0cce2924d35c7c26f6b6600409ea7c9535074c3d2e517ffbb3a0e0b36,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:05.746030 env[1225]: time="2025-09-06T00:16:05.745734914Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:05.754722 env[1225]: time="2025-09-06T00:16:05.749301969Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:f4a3d61ffda9c98a53adeb412c5af404ca3727a3cc2d0b4ef28d197bdd47ecaa,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:05.754722 env[1225]: time="2025-09-06T00:16:05.750309246Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\" returns image reference \"sha256:1d7bb7b0cce2924d35c7c26f6b6600409ea7c9535074c3d2e517ffbb3a0e0b36\"" Sep 6 00:16:05.761368 env[1225]: time="2025-09-06T00:16:05.761285744Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\"" Sep 6 00:16:05.773080 env[1225]: time="2025-09-06T00:16:05.773006992Z" level=info msg="CreateContainer within sandbox \"248e3cb7a4c1e60f781e4614a5674bbb479a0997ffb0b0daac5b0ac79d17089f\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Sep 6 00:16:05.848045 env[1225]: time="2025-09-06T00:16:05.847934830Z" level=info msg="CreateContainer within sandbox \"248e3cb7a4c1e60f781e4614a5674bbb479a0997ffb0b0daac5b0ac79d17089f\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"7c291bce2bc78b24d19727172ba84f99b510fa3cafb32583376dbc941a04ac64\"" Sep 6 00:16:05.849054 env[1225]: time="2025-09-06T00:16:05.848952418Z" level=info msg="StartContainer for \"7c291bce2bc78b24d19727172ba84f99b510fa3cafb32583376dbc941a04ac64\"" Sep 6 00:16:05.922512 systemd[1]: Started cri-containerd-7c291bce2bc78b24d19727172ba84f99b510fa3cafb32583376dbc941a04ac64.scope. Sep 6 00:16:05.944000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.944000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.944000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.944000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.944000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.944000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.944000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.944000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.944000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.947000 audit: BPF prog-id=126 op=LOAD Sep 6 00:16:05.948000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.948000 audit[2554]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2439 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:05.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763323931626365326263373862323464313937323731373262613834 Sep 6 00:16:05.948000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.948000 audit[2554]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=2439 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:05.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763323931626365326263373862323464313937323731373262613834 Sep 6 00:16:05.948000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.948000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.948000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.948000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.948000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.948000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.948000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.948000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.948000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.948000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.948000 audit: BPF prog-id=127 op=LOAD Sep 6 00:16:05.948000 audit[2554]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0003d1040 items=0 ppid=2439 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:05.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763323931626365326263373862323464313937323731373262613834 Sep 6 00:16:05.948000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.948000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.948000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.948000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.948000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.948000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.948000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.948000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.948000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.948000 audit: BPF prog-id=128 op=LOAD Sep 6 00:16:05.948000 audit[2554]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0003d1088 items=0 ppid=2439 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:05.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763323931626365326263373862323464313937323731373262613834 Sep 6 00:16:05.948000 audit: BPF prog-id=128 op=UNLOAD Sep 6 00:16:05.948000 audit: BPF prog-id=127 op=UNLOAD Sep 6 00:16:05.948000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.948000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.948000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.948000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.948000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.948000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.948000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.948000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.948000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.948000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:05.948000 audit: BPF prog-id=129 op=LOAD Sep 6 00:16:05.948000 audit[2554]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003d1498 items=0 ppid=2439 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:05.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763323931626365326263373862323464313937323731373262613834 Sep 6 00:16:06.060953 env[1225]: time="2025-09-06T00:16:06.060802978Z" level=info msg="StartContainer for \"7c291bce2bc78b24d19727172ba84f99b510fa3cafb32583376dbc941a04ac64\" returns successfully" Sep 6 00:16:06.913607 kubelet[2030]: E0906 00:16:06.913532 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:16:06.958087 kubelet[2030]: I0906 00:16:06.957940 2030 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-7975869f8c-6pb7h" podStartSLOduration=2.998844555 podStartE2EDuration="6.956710535s" podCreationTimestamp="2025-09-06 00:16:00 +0000 UTC" firstStartedPulling="2025-09-06 00:16:01.802796822 +0000 UTC m=+21.397021107" lastFinishedPulling="2025-09-06 00:16:05.760662802 +0000 UTC m=+25.354887087" observedRunningTime="2025-09-06 00:16:06.95230601 +0000 UTC m=+26.546530315" watchObservedRunningTime="2025-09-06 00:16:06.956710535 +0000 UTC m=+26.550934831" Sep 6 00:16:06.969222 kubelet[2030]: E0906 00:16:06.969144 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:06.969222 kubelet[2030]: W0906 00:16:06.969197 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:06.969222 kubelet[2030]: E0906 00:16:06.969234 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:06.969598 kubelet[2030]: E0906 00:16:06.969428 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:06.969598 kubelet[2030]: W0906 00:16:06.969441 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:06.969598 kubelet[2030]: E0906 00:16:06.969453 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:06.969732 kubelet[2030]: E0906 00:16:06.969627 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:06.969732 kubelet[2030]: W0906 00:16:06.969640 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:06.969732 kubelet[2030]: E0906 00:16:06.969652 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:06.971950 kubelet[2030]: E0906 00:16:06.971909 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:06.971950 kubelet[2030]: W0906 00:16:06.971940 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:06.972121 kubelet[2030]: E0906 00:16:06.971962 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:06.972292 kubelet[2030]: E0906 00:16:06.972271 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:06.972292 kubelet[2030]: W0906 00:16:06.972289 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:06.972421 kubelet[2030]: E0906 00:16:06.972302 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:06.973141 kubelet[2030]: E0906 00:16:06.972800 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:06.973141 kubelet[2030]: W0906 00:16:06.972848 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:06.973141 kubelet[2030]: E0906 00:16:06.972890 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:06.976377 kubelet[2030]: E0906 00:16:06.976338 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:06.976674 kubelet[2030]: W0906 00:16:06.976643 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:06.976894 kubelet[2030]: E0906 00:16:06.976789 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:06.976894 kubelet[2030]: E0906 00:16:06.977217 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:06.977519 kubelet[2030]: W0906 00:16:06.977231 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:06.977519 kubelet[2030]: E0906 00:16:06.977245 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:06.981186 kubelet[2030]: E0906 00:16:06.981117 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:06.981186 kubelet[2030]: W0906 00:16:06.981160 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:06.981186 kubelet[2030]: E0906 00:16:06.981193 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:06.981668 kubelet[2030]: E0906 00:16:06.981598 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:06.981668 kubelet[2030]: W0906 00:16:06.981626 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:06.981668 kubelet[2030]: E0906 00:16:06.981639 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:06.982124 kubelet[2030]: E0906 00:16:06.982036 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:06.982124 kubelet[2030]: W0906 00:16:06.982049 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:06.982124 kubelet[2030]: E0906 00:16:06.982061 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:06.982352 kubelet[2030]: E0906 00:16:06.982316 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:06.982352 kubelet[2030]: W0906 00:16:06.982336 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:06.982352 kubelet[2030]: E0906 00:16:06.982350 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:06.982862 kubelet[2030]: E0906 00:16:06.982819 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:06.982862 kubelet[2030]: W0906 00:16:06.982840 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:06.982862 kubelet[2030]: E0906 00:16:06.982853 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:06.983337 kubelet[2030]: E0906 00:16:06.983126 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:06.983337 kubelet[2030]: W0906 00:16:06.983148 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:06.983337 kubelet[2030]: E0906 00:16:06.983161 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:06.983706 kubelet[2030]: E0906 00:16:06.983682 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:06.983706 kubelet[2030]: W0906 00:16:06.983702 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:06.983851 kubelet[2030]: E0906 00:16:06.983716 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:06.987681 kubelet[2030]: E0906 00:16:06.987628 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:06.987681 kubelet[2030]: W0906 00:16:06.987672 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:06.987921 kubelet[2030]: E0906 00:16:06.987709 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:06.988209 kubelet[2030]: E0906 00:16:06.988185 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:06.988209 kubelet[2030]: W0906 00:16:06.988207 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:06.988356 kubelet[2030]: E0906 00:16:06.988241 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:06.988571 kubelet[2030]: E0906 00:16:06.988537 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:06.988571 kubelet[2030]: W0906 00:16:06.988565 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:06.988571 kubelet[2030]: E0906 00:16:06.988581 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:06.990744 kubelet[2030]: E0906 00:16:06.989286 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:06.990744 kubelet[2030]: W0906 00:16:06.989309 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:06.990744 kubelet[2030]: E0906 00:16:06.989324 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:06.996688 kubelet[2030]: E0906 00:16:06.995434 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:06.996688 kubelet[2030]: W0906 00:16:06.995515 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:06.996688 kubelet[2030]: E0906 00:16:06.995691 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:06.999945 kubelet[2030]: E0906 00:16:06.999099 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:06.999945 kubelet[2030]: W0906 00:16:06.999178 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:06.999945 kubelet[2030]: E0906 00:16:06.999378 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:06.999945 kubelet[2030]: E0906 00:16:06.999943 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:06.999945 kubelet[2030]: W0906 00:16:06.999958 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:07.000357 kubelet[2030]: E0906 00:16:07.000027 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:07.003102 kubelet[2030]: E0906 00:16:07.003049 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:07.003102 kubelet[2030]: W0906 00:16:07.003089 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:07.003451 kubelet[2030]: E0906 00:16:07.003205 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:07.003509 kubelet[2030]: E0906 00:16:07.003474 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:07.003509 kubelet[2030]: W0906 00:16:07.003489 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:07.003589 kubelet[2030]: E0906 00:16:07.003554 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:07.005949 kubelet[2030]: E0906 00:16:07.003794 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:07.006118 kubelet[2030]: W0906 00:16:07.005955 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:07.006118 kubelet[2030]: E0906 00:16:07.006019 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:07.008794 kubelet[2030]: E0906 00:16:07.008486 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:07.008794 kubelet[2030]: W0906 00:16:07.008526 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:07.008794 kubelet[2030]: E0906 00:16:07.008691 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:07.015458 kubelet[2030]: E0906 00:16:07.015390 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:07.015458 kubelet[2030]: W0906 00:16:07.015450 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:07.015775 kubelet[2030]: E0906 00:16:07.015555 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:07.016179 kubelet[2030]: E0906 00:16:07.016136 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:07.016244 kubelet[2030]: W0906 00:16:07.016154 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:07.016301 kubelet[2030]: E0906 00:16:07.016275 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:07.016636 kubelet[2030]: E0906 00:16:07.016612 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:07.016636 kubelet[2030]: W0906 00:16:07.016632 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:07.016751 kubelet[2030]: E0906 00:16:07.016654 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:07.019879 kubelet[2030]: E0906 00:16:07.019104 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:07.019879 kubelet[2030]: W0906 00:16:07.019145 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:07.019879 kubelet[2030]: E0906 00:16:07.019178 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:07.023031 kubelet[2030]: E0906 00:16:07.021663 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:07.023031 kubelet[2030]: W0906 00:16:07.021689 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:07.023031 kubelet[2030]: E0906 00:16:07.022845 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:07.031880 kubelet[2030]: E0906 00:16:07.031044 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:07.031880 kubelet[2030]: W0906 00:16:07.031088 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:07.031880 kubelet[2030]: E0906 00:16:07.031128 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:07.032654 kubelet[2030]: E0906 00:16:07.032524 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:07.032654 kubelet[2030]: W0906 00:16:07.032549 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:07.032654 kubelet[2030]: E0906 00:16:07.032567 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:07.052147 kernel: kauditd_printk_skb: 161 callbacks suppressed Sep 6 00:16:07.052365 kernel: audit: type=1325 audit(1757117767.049:1007): table=filter:99 family=2 entries=21 op=nft_register_rule pid=2624 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:07.049000 audit[2624]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=2624 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:07.049000 audit[2624]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffd8009b810 a2=0 a3=7ffd8009b7fc items=0 ppid=2180 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:07.070345 kernel: audit: type=1300 audit(1757117767.049:1007): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffd8009b810 a2=0 a3=7ffd8009b7fc items=0 ppid=2180 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:07.070451 kernel: audit: type=1327 audit(1757117767.049:1007): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:07.049000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:07.070000 audit[2624]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=2624 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:07.081108 kernel: audit: type=1325 audit(1757117767.070:1008): table=nat:100 family=2 entries=19 op=nft_register_chain pid=2624 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:07.081242 kernel: audit: type=1300 audit(1757117767.070:1008): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffd8009b810 a2=0 a3=7ffd8009b7fc items=0 ppid=2180 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:07.070000 audit[2624]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffd8009b810 a2=0 a3=7ffd8009b7fc items=0 ppid=2180 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:07.091722 kernel: audit: type=1327 audit(1757117767.070:1008): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:07.070000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:07.703522 kubelet[2030]: E0906 00:16:07.703417 2030 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-pkfnl" podUID="5fcc5872-6420-4c35-9d81-fbabf8a0c640" Sep 6 00:16:07.721659 env[1225]: time="2025-09-06T00:16:07.721598226Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:07.731397 env[1225]: time="2025-09-06T00:16:07.729840444Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4f2b088ed6fdfc6a97ac0650a4ba8171107d6656ce265c592e4c8423fd10e5c4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:07.738258 env[1225]: time="2025-09-06T00:16:07.738194328Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:07.755678 env[1225]: time="2025-09-06T00:16:07.755620657Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:81bdfcd9dbd36624dc35354e8c181c75631ba40e6c7df5820f5f56cea36f0ef9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:07.756274 env[1225]: time="2025-09-06T00:16:07.756236039Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\" returns image reference \"sha256:4f2b088ed6fdfc6a97ac0650a4ba8171107d6656ce265c592e4c8423fd10e5c4\"" Sep 6 00:16:07.763071 env[1225]: time="2025-09-06T00:16:07.761501955Z" level=info msg="CreateContainer within sandbox \"d999b7f31c45a9c17f33e98c8a41477aa5cd382327f7bd577425000212899ce1\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Sep 6 00:16:07.818605 env[1225]: time="2025-09-06T00:16:07.818521921Z" level=info msg="CreateContainer within sandbox \"d999b7f31c45a9c17f33e98c8a41477aa5cd382327f7bd577425000212899ce1\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"497dbe10dbcde60f26f613ab8ae24851f0ed1a9886cd132135e03568fa3b746b\"" Sep 6 00:16:07.827678 env[1225]: time="2025-09-06T00:16:07.819689726Z" level=info msg="StartContainer for \"497dbe10dbcde60f26f613ab8ae24851f0ed1a9886cd132135e03568fa3b746b\"" Sep 6 00:16:07.903809 systemd[1]: Started cri-containerd-497dbe10dbcde60f26f613ab8ae24851f0ed1a9886cd132135e03568fa3b746b.scope. Sep 6 00:16:07.936000 audit[2632]: AVC avc: denied { perfmon } for pid=2632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.936000 audit[2632]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f7fa8b743b8 items=0 ppid=2511 pid=2632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:07.950078 kubelet[2030]: E0906 00:16:07.950017 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:16:07.957831 kernel: audit: type=1400 audit(1757117767.936:1009): avc: denied { perfmon } for pid=2632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.958123 kernel: audit: type=1300 audit(1757117767.936:1009): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f7fa8b743b8 items=0 ppid=2511 pid=2632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:07.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439376462653130646263646536306632366636313361623861653234 Sep 6 00:16:07.971137 kernel: audit: type=1327 audit(1757117767.936:1009): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439376462653130646263646536306632366636313361623861653234 Sep 6 00:16:07.971336 kernel: audit: type=1400 audit(1757117767.936:1010): avc: denied { bpf } for pid=2632 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.936000 audit[2632]: AVC avc: denied { bpf } for pid=2632 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.936000 audit[2632]: AVC avc: denied { bpf } for pid=2632 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.936000 audit[2632]: AVC avc: denied { bpf } for pid=2632 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.936000 audit[2632]: AVC avc: denied { perfmon } for pid=2632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.936000 audit[2632]: AVC avc: denied { perfmon } for pid=2632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.936000 audit[2632]: AVC avc: denied { perfmon } for pid=2632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.936000 audit[2632]: AVC avc: denied { perfmon } for pid=2632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.936000 audit[2632]: AVC avc: denied { perfmon } for pid=2632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.936000 audit[2632]: AVC avc: denied { bpf } for pid=2632 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.936000 audit[2632]: AVC avc: denied { bpf } for pid=2632 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.936000 audit: BPF prog-id=130 op=LOAD Sep 6 00:16:07.936000 audit[2632]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00023f298 items=0 ppid=2511 pid=2632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:07.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439376462653130646263646536306632366636313361623861653234 Sep 6 00:16:07.945000 audit[2632]: AVC avc: denied { bpf } for pid=2632 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.945000 audit[2632]: AVC avc: denied { bpf } for pid=2632 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.945000 audit[2632]: AVC avc: denied { perfmon } for pid=2632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.945000 audit[2632]: AVC avc: denied { perfmon } for pid=2632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.945000 audit[2632]: AVC avc: denied { perfmon } for pid=2632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.945000 audit[2632]: AVC avc: denied { perfmon } for pid=2632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.945000 audit[2632]: AVC avc: denied { perfmon } for pid=2632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.945000 audit[2632]: AVC avc: denied { bpf } for pid=2632 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.945000 audit[2632]: AVC avc: denied { bpf } for pid=2632 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.945000 audit: BPF prog-id=131 op=LOAD Sep 6 00:16:07.945000 audit[2632]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00023f2e8 items=0 ppid=2511 pid=2632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:07.945000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439376462653130646263646536306632366636313361623861653234 Sep 6 00:16:07.957000 audit: BPF prog-id=131 op=UNLOAD Sep 6 00:16:07.957000 audit: BPF prog-id=130 op=UNLOAD Sep 6 00:16:07.957000 audit[2632]: AVC avc: denied { bpf } for pid=2632 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.957000 audit[2632]: AVC avc: denied { bpf } for pid=2632 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.957000 audit[2632]: AVC avc: denied { bpf } for pid=2632 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.957000 audit[2632]: AVC avc: denied { perfmon } for pid=2632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.957000 audit[2632]: AVC avc: denied { perfmon } for pid=2632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.957000 audit[2632]: AVC avc: denied { perfmon } for pid=2632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.957000 audit[2632]: AVC avc: denied { perfmon } for pid=2632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.957000 audit[2632]: AVC avc: denied { perfmon } for pid=2632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.957000 audit[2632]: AVC avc: denied { bpf } for pid=2632 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.957000 audit[2632]: AVC avc: denied { bpf } for pid=2632 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:07.957000 audit: BPF prog-id=132 op=LOAD Sep 6 00:16:07.957000 audit[2632]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00023f378 items=0 ppid=2511 pid=2632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:07.957000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439376462653130646263646536306632366636313361623861653234 Sep 6 00:16:08.000416 kubelet[2030]: E0906 00:16:08.000200 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:08.000416 kubelet[2030]: W0906 00:16:08.000245 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:08.000416 kubelet[2030]: E0906 00:16:08.000276 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:08.000778 kubelet[2030]: E0906 00:16:08.000726 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:08.000820 kubelet[2030]: W0906 00:16:08.000771 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:08.000849 kubelet[2030]: E0906 00:16:08.000811 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:08.001270 kubelet[2030]: E0906 00:16:08.001233 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:08.001270 kubelet[2030]: W0906 00:16:08.001253 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:08.001270 kubelet[2030]: E0906 00:16:08.001268 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:08.001895 kubelet[2030]: E0906 00:16:08.001647 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:08.001895 kubelet[2030]: W0906 00:16:08.001668 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:08.001895 kubelet[2030]: E0906 00:16:08.001683 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:08.002584 kubelet[2030]: E0906 00:16:08.002414 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:08.002584 kubelet[2030]: W0906 00:16:08.002452 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:08.002584 kubelet[2030]: E0906 00:16:08.002468 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:08.002952 kubelet[2030]: E0906 00:16:08.002850 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:08.002952 kubelet[2030]: W0906 00:16:08.002903 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:08.003222 kubelet[2030]: E0906 00:16:08.003095 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:08.004396 kubelet[2030]: E0906 00:16:08.004246 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:08.004396 kubelet[2030]: W0906 00:16:08.004265 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:08.004396 kubelet[2030]: E0906 00:16:08.004280 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:08.007218 kubelet[2030]: E0906 00:16:08.006066 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:08.007218 kubelet[2030]: W0906 00:16:08.006141 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:08.007218 kubelet[2030]: E0906 00:16:08.006163 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:08.008659 kubelet[2030]: E0906 00:16:08.008637 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:08.008789 kubelet[2030]: W0906 00:16:08.008765 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:08.009072 kubelet[2030]: E0906 00:16:08.008884 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:08.014613 kubelet[2030]: E0906 00:16:08.014569 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:08.014828 kubelet[2030]: W0906 00:16:08.014806 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:08.018662 env[1225]: time="2025-09-06T00:16:08.018552576Z" level=info msg="StartContainer for \"497dbe10dbcde60f26f613ab8ae24851f0ed1a9886cd132135e03568fa3b746b\" returns successfully" Sep 6 00:16:08.021783 kubelet[2030]: E0906 00:16:08.021732 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:08.028157 kubelet[2030]: E0906 00:16:08.022270 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:08.028157 kubelet[2030]: W0906 00:16:08.022309 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:08.028157 kubelet[2030]: E0906 00:16:08.022345 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:08.028157 kubelet[2030]: E0906 00:16:08.027097 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:08.028157 kubelet[2030]: W0906 00:16:08.027131 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:08.028157 kubelet[2030]: E0906 00:16:08.027169 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:08.028157 kubelet[2030]: E0906 00:16:08.028089 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:08.028157 kubelet[2030]: W0906 00:16:08.028104 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:08.028157 kubelet[2030]: E0906 00:16:08.028118 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:08.029506 kubelet[2030]: E0906 00:16:08.029486 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:08.029610 kubelet[2030]: W0906 00:16:08.029587 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:08.029721 kubelet[2030]: E0906 00:16:08.029700 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:08.030486 kubelet[2030]: E0906 00:16:08.030466 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:08.030594 kubelet[2030]: W0906 00:16:08.030575 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:08.030683 kubelet[2030]: E0906 00:16:08.030666 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:08.031151 kubelet[2030]: E0906 00:16:08.031135 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:08.031249 kubelet[2030]: W0906 00:16:08.031228 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:08.031368 kubelet[2030]: E0906 00:16:08.031347 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:08.031821 kubelet[2030]: E0906 00:16:08.031805 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:08.031945 kubelet[2030]: W0906 00:16:08.031909 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:08.032085 kubelet[2030]: E0906 00:16:08.032065 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:08.032472 kubelet[2030]: E0906 00:16:08.032457 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:08.032575 kubelet[2030]: W0906 00:16:08.032554 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:08.032688 kubelet[2030]: E0906 00:16:08.032668 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:08.033244 kubelet[2030]: E0906 00:16:08.033072 2030 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:16:08.033244 kubelet[2030]: W0906 00:16:08.033116 2030 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:16:08.034144 kubelet[2030]: E0906 00:16:08.033456 2030 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:16:08.036536 systemd[1]: cri-containerd-497dbe10dbcde60f26f613ab8ae24851f0ed1a9886cd132135e03568fa3b746b.scope: Deactivated successfully. Sep 6 00:16:08.041000 audit: BPF prog-id=132 op=UNLOAD Sep 6 00:16:08.119692 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-497dbe10dbcde60f26f613ab8ae24851f0ed1a9886cd132135e03568fa3b746b-rootfs.mount: Deactivated successfully. Sep 6 00:16:08.173121 env[1225]: time="2025-09-06T00:16:08.173050454Z" level=info msg="shim disconnected" id=497dbe10dbcde60f26f613ab8ae24851f0ed1a9886cd132135e03568fa3b746b Sep 6 00:16:08.173506 env[1225]: time="2025-09-06T00:16:08.173450757Z" level=warning msg="cleaning up after shim disconnected" id=497dbe10dbcde60f26f613ab8ae24851f0ed1a9886cd132135e03568fa3b746b namespace=k8s.io Sep 6 00:16:08.173506 env[1225]: time="2025-09-06T00:16:08.173477811Z" level=info msg="cleaning up dead shim" Sep 6 00:16:08.187208 env[1225]: time="2025-09-06T00:16:08.187107943Z" level=warning msg="cleanup warnings time=\"2025-09-06T00:16:08Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2702 runtime=io.containerd.runc.v2\n" Sep 6 00:16:08.974586 kubelet[2030]: E0906 00:16:08.974488 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:16:08.981555 env[1225]: time="2025-09-06T00:16:08.980152757Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\"" Sep 6 00:16:09.703508 kubelet[2030]: E0906 00:16:09.703415 2030 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-pkfnl" podUID="5fcc5872-6420-4c35-9d81-fbabf8a0c640" Sep 6 00:16:11.707182 kubelet[2030]: E0906 00:16:11.707089 2030 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-pkfnl" podUID="5fcc5872-6420-4c35-9d81-fbabf8a0c640" Sep 6 00:16:13.712045 kubelet[2030]: E0906 00:16:13.711962 2030 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-pkfnl" podUID="5fcc5872-6420-4c35-9d81-fbabf8a0c640" Sep 6 00:16:14.449029 env[1225]: time="2025-09-06T00:16:14.447872905Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:14.455284 env[1225]: time="2025-09-06T00:16:14.450399792Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:034822460c2f667e1f4a7679c843cc35ce1bf2c25dec86f04e07fb403df7e458,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:14.455284 env[1225]: time="2025-09-06T00:16:14.454359511Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:14.461838 env[1225]: time="2025-09-06T00:16:14.461439767Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:73d1e391050490d54e5bee8ff2b1a50a8be1746c98dc530361b00e8c0ab63f87,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:14.465032 env[1225]: time="2025-09-06T00:16:14.464165993Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\" returns image reference \"sha256:034822460c2f667e1f4a7679c843cc35ce1bf2c25dec86f04e07fb403df7e458\"" Sep 6 00:16:14.471752 env[1225]: time="2025-09-06T00:16:14.471406440Z" level=info msg="CreateContainer within sandbox \"d999b7f31c45a9c17f33e98c8a41477aa5cd382327f7bd577425000212899ce1\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Sep 6 00:16:14.527725 env[1225]: time="2025-09-06T00:16:14.526455945Z" level=info msg="CreateContainer within sandbox \"d999b7f31c45a9c17f33e98c8a41477aa5cd382327f7bd577425000212899ce1\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"2d3bdc45095d7f637bfc24fd2f1afd9e8a257d96e2986eeb960f560996b7e93f\"" Sep 6 00:16:14.531525 env[1225]: time="2025-09-06T00:16:14.531446952Z" level=info msg="StartContainer for \"2d3bdc45095d7f637bfc24fd2f1afd9e8a257d96e2986eeb960f560996b7e93f\"" Sep 6 00:16:14.557386 systemd[1]: run-containerd-runc-k8s.io-2d3bdc45095d7f637bfc24fd2f1afd9e8a257d96e2986eeb960f560996b7e93f-runc.w0A1LT.mount: Deactivated successfully. Sep 6 00:16:14.561887 systemd[1]: Started cri-containerd-2d3bdc45095d7f637bfc24fd2f1afd9e8a257d96e2986eeb960f560996b7e93f.scope. Sep 6 00:16:14.612000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.614441 kernel: kauditd_printk_skb: 40 callbacks suppressed Sep 6 00:16:14.614519 kernel: audit: type=1400 audit(1757117774.612:1016): avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.612000 audit[2722]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f3ef41c44d8 items=0 ppid=2511 pid=2722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:14.628743 kernel: audit: type=1300 audit(1757117774.612:1016): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f3ef41c44d8 items=0 ppid=2511 pid=2722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:14.628949 kernel: audit: type=1327 audit(1757117774.612:1016): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264336264633435303935643766363337626663323466643266316166 Sep 6 00:16:14.612000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264336264633435303935643766363337626663323466643266316166 Sep 6 00:16:14.612000 audit[2722]: AVC avc: denied { bpf } for pid=2722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.637392 kernel: audit: type=1400 audit(1757117774.612:1017): avc: denied { bpf } for pid=2722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.641381 kernel: audit: type=1400 audit(1757117774.612:1017): avc: denied { bpf } for pid=2722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.612000 audit[2722]: AVC avc: denied { bpf } for pid=2722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.612000 audit[2722]: AVC avc: denied { bpf } for pid=2722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.647744 kernel: audit: type=1400 audit(1757117774.612:1017): avc: denied { bpf } for pid=2722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.647882 kernel: audit: type=1400 audit(1757117774.612:1017): avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.612000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.612000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.659868 kernel: audit: type=1400 audit(1757117774.612:1017): avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.660049 kernel: audit: type=1400 audit(1757117774.612:1017): avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.612000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.670707 kernel: audit: type=1400 audit(1757117774.612:1017): avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.612000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.612000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.612000 audit[2722]: AVC avc: denied { bpf } for pid=2722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.612000 audit[2722]: AVC avc: denied { bpf } for pid=2722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.612000 audit: BPF prog-id=133 op=LOAD Sep 6 00:16:14.612000 audit[2722]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c0002995a8 items=0 ppid=2511 pid=2722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:14.612000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264336264633435303935643766363337626663323466643266316166 Sep 6 00:16:14.628000 audit[2722]: AVC avc: denied { bpf } for pid=2722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.628000 audit[2722]: AVC avc: denied { bpf } for pid=2722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.628000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.628000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.628000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.628000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.628000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.628000 audit[2722]: AVC avc: denied { bpf } for pid=2722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.628000 audit[2722]: AVC avc: denied { bpf } for pid=2722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.628000 audit: BPF prog-id=134 op=LOAD Sep 6 00:16:14.628000 audit[2722]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c0002995f8 items=0 ppid=2511 pid=2722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:14.628000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264336264633435303935643766363337626663323466643266316166 Sep 6 00:16:14.636000 audit: BPF prog-id=134 op=UNLOAD Sep 6 00:16:14.636000 audit: BPF prog-id=133 op=UNLOAD Sep 6 00:16:14.636000 audit[2722]: AVC avc: denied { bpf } for pid=2722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.636000 audit[2722]: AVC avc: denied { bpf } for pid=2722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.636000 audit[2722]: AVC avc: denied { bpf } for pid=2722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.636000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.636000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.636000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.636000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.636000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.636000 audit[2722]: AVC avc: denied { bpf } for pid=2722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.636000 audit[2722]: AVC avc: denied { bpf } for pid=2722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:14.636000 audit: BPF prog-id=135 op=LOAD Sep 6 00:16:14.636000 audit[2722]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c000299688 items=0 ppid=2511 pid=2722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:14.636000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264336264633435303935643766363337626663323466643266316166 Sep 6 00:16:14.846555 env[1225]: time="2025-09-06T00:16:14.846493406Z" level=info msg="StartContainer for \"2d3bdc45095d7f637bfc24fd2f1afd9e8a257d96e2986eeb960f560996b7e93f\" returns successfully" Sep 6 00:16:15.704337 kubelet[2030]: E0906 00:16:15.704219 2030 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-pkfnl" podUID="5fcc5872-6420-4c35-9d81-fbabf8a0c640" Sep 6 00:16:16.762243 env[1225]: time="2025-09-06T00:16:16.762137381Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 6 00:16:16.767475 systemd[1]: cri-containerd-2d3bdc45095d7f637bfc24fd2f1afd9e8a257d96e2986eeb960f560996b7e93f.scope: Deactivated successfully. Sep 6 00:16:16.772000 audit: BPF prog-id=135 op=UNLOAD Sep 6 00:16:16.820150 kubelet[2030]: I0906 00:16:16.812469 2030 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Sep 6 00:16:16.872805 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-2d3bdc45095d7f637bfc24fd2f1afd9e8a257d96e2986eeb960f560996b7e93f-rootfs.mount: Deactivated successfully. Sep 6 00:16:16.915002 env[1225]: time="2025-09-06T00:16:16.914809602Z" level=info msg="shim disconnected" id=2d3bdc45095d7f637bfc24fd2f1afd9e8a257d96e2986eeb960f560996b7e93f Sep 6 00:16:16.915002 env[1225]: time="2025-09-06T00:16:16.914877718Z" level=warning msg="cleaning up after shim disconnected" id=2d3bdc45095d7f637bfc24fd2f1afd9e8a257d96e2986eeb960f560996b7e93f namespace=k8s.io Sep 6 00:16:16.915002 env[1225]: time="2025-09-06T00:16:16.914892507Z" level=info msg="cleaning up dead shim" Sep 6 00:16:16.958009 kubelet[2030]: W0906 00:16:16.956359 2030 reflector.go:569] object-"calico-apiserver"/"calico-apiserver-certs": failed to list *v1.Secret: secrets "calico-apiserver-certs" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "calico-apiserver": no relationship found between node 'localhost' and this object Sep 6 00:16:16.958009 kubelet[2030]: E0906 00:16:16.956472 2030 reflector.go:166] "Unhandled Error" err="object-\"calico-apiserver\"/\"calico-apiserver-certs\": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets \"calico-apiserver-certs\" is forbidden: User \"system:node:localhost\" cannot list resource \"secrets\" in API group \"\" in the namespace \"calico-apiserver\": no relationship found between node 'localhost' and this object" logger="UnhandledError" Sep 6 00:16:16.976090 systemd[1]: Created slice kubepods-besteffort-pod0282c0d0_6aac_469c_a14e_04b67dddca1b.slice. Sep 6 00:16:16.988398 systemd[1]: Created slice kubepods-besteffort-pod32c9d655_95c5_436b_adcd_e3fe02fbc713.slice. Sep 6 00:16:17.000074 env[1225]: time="2025-09-06T00:16:16.996204945Z" level=warning msg="cleanup warnings time=\"2025-09-06T00:16:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2762 runtime=io.containerd.runc.v2\n" Sep 6 00:16:17.002558 kubelet[2030]: I0906 00:16:17.002517 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xxm7j\" (UniqueName: \"kubernetes.io/projected/0282c0d0-6aac-469c-a14e-04b67dddca1b-kube-api-access-xxm7j\") pod \"whisker-5697c6c69-p4xxr\" (UID: \"0282c0d0-6aac-469c-a14e-04b67dddca1b\") " pod="calico-system/whisker-5697c6c69-p4xxr" Sep 6 00:16:17.005481 kubelet[2030]: I0906 00:16:17.004463 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jvp4t\" (UniqueName: \"kubernetes.io/projected/e830bd3a-f4af-462b-bf17-815d051633f7-kube-api-access-jvp4t\") pod \"coredns-668d6bf9bc-jqlbh\" (UID: \"e830bd3a-f4af-462b-bf17-815d051633f7\") " pod="kube-system/coredns-668d6bf9bc-jqlbh" Sep 6 00:16:17.005481 kubelet[2030]: I0906 00:16:17.004519 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-msxtl\" (UniqueName: \"kubernetes.io/projected/bd47af89-ef90-4d72-a1f0-b0a4126e6c60-kube-api-access-msxtl\") pod \"calico-apiserver-77f65f4854-prqvv\" (UID: \"bd47af89-ef90-4d72-a1f0-b0a4126e6c60\") " pod="calico-apiserver/calico-apiserver-77f65f4854-prqvv" Sep 6 00:16:17.005481 kubelet[2030]: I0906 00:16:17.004545 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pwwjm\" (UniqueName: \"kubernetes.io/projected/2e5ae4bb-0a1d-4be0-874a-5cd125295775-kube-api-access-pwwjm\") pod \"coredns-668d6bf9bc-88vqh\" (UID: \"2e5ae4bb-0a1d-4be0-874a-5cd125295775\") " pod="kube-system/coredns-668d6bf9bc-88vqh" Sep 6 00:16:17.005481 kubelet[2030]: I0906 00:16:17.004572 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wzsct\" (UniqueName: \"kubernetes.io/projected/3e73d97e-f57b-4ce7-9a19-70a0052142ea-kube-api-access-wzsct\") pod \"goldmane-54d579b49d-tdxp6\" (UID: \"3e73d97e-f57b-4ce7-9a19-70a0052142ea\") " pod="calico-system/goldmane-54d579b49d-tdxp6" Sep 6 00:16:17.005481 kubelet[2030]: I0906 00:16:17.004607 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/32c9d655-95c5-436b-adcd-e3fe02fbc713-calico-apiserver-certs\") pod \"calico-apiserver-77f65f4854-jkr5j\" (UID: \"32c9d655-95c5-436b-adcd-e3fe02fbc713\") " pod="calico-apiserver/calico-apiserver-77f65f4854-jkr5j" Sep 6 00:16:17.005839 kubelet[2030]: I0906 00:16:17.004630 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-sf7ps\" (UniqueName: \"kubernetes.io/projected/331a0376-d8b2-4772-9a83-07896fab7cf8-kube-api-access-sf7ps\") pod \"calico-kube-controllers-667977df75-tg4gg\" (UID: \"331a0376-d8b2-4772-9a83-07896fab7cf8\") " pod="calico-system/calico-kube-controllers-667977df75-tg4gg" Sep 6 00:16:17.005839 kubelet[2030]: I0906 00:16:17.004656 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/2e5ae4bb-0a1d-4be0-874a-5cd125295775-config-volume\") pod \"coredns-668d6bf9bc-88vqh\" (UID: \"2e5ae4bb-0a1d-4be0-874a-5cd125295775\") " pod="kube-system/coredns-668d6bf9bc-88vqh" Sep 6 00:16:17.005839 kubelet[2030]: I0906 00:16:17.004676 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/bd47af89-ef90-4d72-a1f0-b0a4126e6c60-calico-apiserver-certs\") pod \"calico-apiserver-77f65f4854-prqvv\" (UID: \"bd47af89-ef90-4d72-a1f0-b0a4126e6c60\") " pod="calico-apiserver/calico-apiserver-77f65f4854-prqvv" Sep 6 00:16:17.005839 kubelet[2030]: I0906 00:16:17.004698 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/331a0376-d8b2-4772-9a83-07896fab7cf8-tigera-ca-bundle\") pod \"calico-kube-controllers-667977df75-tg4gg\" (UID: \"331a0376-d8b2-4772-9a83-07896fab7cf8\") " pod="calico-system/calico-kube-controllers-667977df75-tg4gg" Sep 6 00:16:17.005839 kubelet[2030]: I0906 00:16:17.004742 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/3e73d97e-f57b-4ce7-9a19-70a0052142ea-goldmane-ca-bundle\") pod \"goldmane-54d579b49d-tdxp6\" (UID: \"3e73d97e-f57b-4ce7-9a19-70a0052142ea\") " pod="calico-system/goldmane-54d579b49d-tdxp6" Sep 6 00:16:17.008058 kubelet[2030]: I0906 00:16:17.004818 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/0282c0d0-6aac-469c-a14e-04b67dddca1b-whisker-backend-key-pair\") pod \"whisker-5697c6c69-p4xxr\" (UID: \"0282c0d0-6aac-469c-a14e-04b67dddca1b\") " pod="calico-system/whisker-5697c6c69-p4xxr" Sep 6 00:16:17.008058 kubelet[2030]: I0906 00:16:17.004987 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-l4vcm\" (UniqueName: \"kubernetes.io/projected/32c9d655-95c5-436b-adcd-e3fe02fbc713-kube-api-access-l4vcm\") pod \"calico-apiserver-77f65f4854-jkr5j\" (UID: \"32c9d655-95c5-436b-adcd-e3fe02fbc713\") " pod="calico-apiserver/calico-apiserver-77f65f4854-jkr5j" Sep 6 00:16:17.008058 kubelet[2030]: I0906 00:16:17.005021 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/3e73d97e-f57b-4ce7-9a19-70a0052142ea-config\") pod \"goldmane-54d579b49d-tdxp6\" (UID: \"3e73d97e-f57b-4ce7-9a19-70a0052142ea\") " pod="calico-system/goldmane-54d579b49d-tdxp6" Sep 6 00:16:17.008058 kubelet[2030]: I0906 00:16:17.005045 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/3e73d97e-f57b-4ce7-9a19-70a0052142ea-goldmane-key-pair\") pod \"goldmane-54d579b49d-tdxp6\" (UID: \"3e73d97e-f57b-4ce7-9a19-70a0052142ea\") " pod="calico-system/goldmane-54d579b49d-tdxp6" Sep 6 00:16:17.008058 kubelet[2030]: I0906 00:16:17.005068 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/e830bd3a-f4af-462b-bf17-815d051633f7-config-volume\") pod \"coredns-668d6bf9bc-jqlbh\" (UID: \"e830bd3a-f4af-462b-bf17-815d051633f7\") " pod="kube-system/coredns-668d6bf9bc-jqlbh" Sep 6 00:16:17.008233 kubelet[2030]: I0906 00:16:17.005143 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/0282c0d0-6aac-469c-a14e-04b67dddca1b-whisker-ca-bundle\") pod \"whisker-5697c6c69-p4xxr\" (UID: \"0282c0d0-6aac-469c-a14e-04b67dddca1b\") " pod="calico-system/whisker-5697c6c69-p4xxr" Sep 6 00:16:17.010297 systemd[1]: Created slice kubepods-burstable-pode830bd3a_f4af_462b_bf17_815d051633f7.slice. Sep 6 00:16:17.034420 systemd[1]: Created slice kubepods-besteffort-podbd47af89_ef90_4d72_a1f0_b0a4126e6c60.slice. Sep 6 00:16:17.051697 systemd[1]: Created slice kubepods-burstable-pod2e5ae4bb_0a1d_4be0_874a_5cd125295775.slice. Sep 6 00:16:17.066257 systemd[1]: Created slice kubepods-besteffort-pod331a0376_d8b2_4772_9a83_07896fab7cf8.slice. Sep 6 00:16:17.088718 systemd[1]: Created slice kubepods-besteffort-pod3e73d97e_f57b_4ce7_9a19_70a0052142ea.slice. Sep 6 00:16:17.110579 env[1225]: time="2025-09-06T00:16:17.110434432Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\"" Sep 6 00:16:17.283912 env[1225]: time="2025-09-06T00:16:17.283829555Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5697c6c69-p4xxr,Uid:0282c0d0-6aac-469c-a14e-04b67dddca1b,Namespace:calico-system,Attempt:0,}" Sep 6 00:16:17.327467 kubelet[2030]: E0906 00:16:17.326894 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:16:17.329411 env[1225]: time="2025-09-06T00:16:17.327889894Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-jqlbh,Uid:e830bd3a-f4af-462b-bf17-815d051633f7,Namespace:kube-system,Attempt:0,}" Sep 6 00:16:17.364305 kubelet[2030]: E0906 00:16:17.363593 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:16:17.364855 env[1225]: time="2025-09-06T00:16:17.364806584Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-88vqh,Uid:2e5ae4bb-0a1d-4be0-874a-5cd125295775,Namespace:kube-system,Attempt:0,}" Sep 6 00:16:17.385594 env[1225]: time="2025-09-06T00:16:17.383781665Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-667977df75-tg4gg,Uid:331a0376-d8b2-4772-9a83-07896fab7cf8,Namespace:calico-system,Attempt:0,}" Sep 6 00:16:17.393194 env[1225]: time="2025-09-06T00:16:17.393129271Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-tdxp6,Uid:3e73d97e-f57b-4ce7-9a19-70a0052142ea,Namespace:calico-system,Attempt:0,}" Sep 6 00:16:17.545466 env[1225]: time="2025-09-06T00:16:17.545341078Z" level=error msg="Failed to destroy network for sandbox \"84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:17.546711 env[1225]: time="2025-09-06T00:16:17.546647304Z" level=error msg="encountered an error cleaning up failed sandbox \"84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:17.546853 env[1225]: time="2025-09-06T00:16:17.546742694Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-jqlbh,Uid:e830bd3a-f4af-462b-bf17-815d051633f7,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:17.547222 kubelet[2030]: E0906 00:16:17.547150 2030 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:17.547327 kubelet[2030]: E0906 00:16:17.547285 2030 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-jqlbh" Sep 6 00:16:17.547383 kubelet[2030]: E0906 00:16:17.547331 2030 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-jqlbh" Sep 6 00:16:17.547468 kubelet[2030]: E0906 00:16:17.547413 2030 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-jqlbh_kube-system(e830bd3a-f4af-462b-bf17-815d051633f7)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-jqlbh_kube-system(e830bd3a-f4af-462b-bf17-815d051633f7)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-jqlbh" podUID="e830bd3a-f4af-462b-bf17-815d051633f7" Sep 6 00:16:17.606701 env[1225]: time="2025-09-06T00:16:17.605764338Z" level=error msg="Failed to destroy network for sandbox \"8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:17.607952 env[1225]: time="2025-09-06T00:16:17.607897112Z" level=error msg="encountered an error cleaning up failed sandbox \"8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:17.612689 env[1225]: time="2025-09-06T00:16:17.609209300Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-88vqh,Uid:2e5ae4bb-0a1d-4be0-874a-5cd125295775,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:17.612689 env[1225]: time="2025-09-06T00:16:17.610906044Z" level=error msg="Failed to destroy network for sandbox \"54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:17.612689 env[1225]: time="2025-09-06T00:16:17.611519098Z" level=error msg="encountered an error cleaning up failed sandbox \"54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:17.612689 env[1225]: time="2025-09-06T00:16:17.611591101Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5697c6c69-p4xxr,Uid:0282c0d0-6aac-469c-a14e-04b67dddca1b,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:17.613130 kubelet[2030]: E0906 00:16:17.609682 2030 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:17.613130 kubelet[2030]: E0906 00:16:17.609846 2030 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-88vqh" Sep 6 00:16:17.613130 kubelet[2030]: E0906 00:16:17.609893 2030 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-88vqh" Sep 6 00:16:17.613277 kubelet[2030]: E0906 00:16:17.610057 2030 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-88vqh_kube-system(2e5ae4bb-0a1d-4be0-874a-5cd125295775)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-88vqh_kube-system(2e5ae4bb-0a1d-4be0-874a-5cd125295775)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-88vqh" podUID="2e5ae4bb-0a1d-4be0-874a-5cd125295775" Sep 6 00:16:17.613277 kubelet[2030]: E0906 00:16:17.611886 2030 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:17.613277 kubelet[2030]: E0906 00:16:17.611969 2030 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-5697c6c69-p4xxr" Sep 6 00:16:17.613467 kubelet[2030]: E0906 00:16:17.612030 2030 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-5697c6c69-p4xxr" Sep 6 00:16:17.613467 kubelet[2030]: E0906 00:16:17.612092 2030 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-5697c6c69-p4xxr_calico-system(0282c0d0-6aac-469c-a14e-04b67dddca1b)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-5697c6c69-p4xxr_calico-system(0282c0d0-6aac-469c-a14e-04b67dddca1b)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-5697c6c69-p4xxr" podUID="0282c0d0-6aac-469c-a14e-04b67dddca1b" Sep 6 00:16:17.622757 env[1225]: time="2025-09-06T00:16:17.621013206Z" level=error msg="Failed to destroy network for sandbox \"f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:17.622757 env[1225]: time="2025-09-06T00:16:17.621615768Z" level=error msg="encountered an error cleaning up failed sandbox \"f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:17.622757 env[1225]: time="2025-09-06T00:16:17.621685698Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-667977df75-tg4gg,Uid:331a0376-d8b2-4772-9a83-07896fab7cf8,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:17.623146 kubelet[2030]: E0906 00:16:17.621955 2030 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:17.623146 kubelet[2030]: E0906 00:16:17.622054 2030 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-667977df75-tg4gg" Sep 6 00:16:17.623146 kubelet[2030]: E0906 00:16:17.622093 2030 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-667977df75-tg4gg" Sep 6 00:16:17.623267 kubelet[2030]: E0906 00:16:17.622153 2030 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-667977df75-tg4gg_calico-system(331a0376-d8b2-4772-9a83-07896fab7cf8)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-667977df75-tg4gg_calico-system(331a0376-d8b2-4772-9a83-07896fab7cf8)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-667977df75-tg4gg" podUID="331a0376-d8b2-4772-9a83-07896fab7cf8" Sep 6 00:16:17.671185 env[1225]: time="2025-09-06T00:16:17.670651072Z" level=error msg="Failed to destroy network for sandbox \"6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:17.674047 env[1225]: time="2025-09-06T00:16:17.671723592Z" level=error msg="encountered an error cleaning up failed sandbox \"6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:17.674047 env[1225]: time="2025-09-06T00:16:17.671941526Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-tdxp6,Uid:3e73d97e-f57b-4ce7-9a19-70a0052142ea,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:17.676344 kubelet[2030]: E0906 00:16:17.676253 2030 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:17.676529 kubelet[2030]: E0906 00:16:17.676373 2030 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-54d579b49d-tdxp6" Sep 6 00:16:17.676529 kubelet[2030]: E0906 00:16:17.676400 2030 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-54d579b49d-tdxp6" Sep 6 00:16:17.676529 kubelet[2030]: E0906 00:16:17.676466 2030 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-54d579b49d-tdxp6_calico-system(3e73d97e-f57b-4ce7-9a19-70a0052142ea)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-54d579b49d-tdxp6_calico-system(3e73d97e-f57b-4ce7-9a19-70a0052142ea)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-54d579b49d-tdxp6" podUID="3e73d97e-f57b-4ce7-9a19-70a0052142ea" Sep 6 00:16:17.714523 systemd[1]: Created slice kubepods-besteffort-pod5fcc5872_6420_4c35_9d81_fbabf8a0c640.slice. Sep 6 00:16:17.717754 env[1225]: time="2025-09-06T00:16:17.717667729Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-pkfnl,Uid:5fcc5872-6420-4c35-9d81-fbabf8a0c640,Namespace:calico-system,Attempt:0,}" Sep 6 00:16:17.891552 env[1225]: time="2025-09-06T00:16:17.888077617Z" level=error msg="Failed to destroy network for sandbox \"59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:17.891552 env[1225]: time="2025-09-06T00:16:17.888558085Z" level=error msg="encountered an error cleaning up failed sandbox \"59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:17.891552 env[1225]: time="2025-09-06T00:16:17.888623685Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-pkfnl,Uid:5fcc5872-6420-4c35-9d81-fbabf8a0c640,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:17.892570 kubelet[2030]: E0906 00:16:17.888897 2030 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:17.892570 kubelet[2030]: E0906 00:16:17.889045 2030 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-pkfnl" Sep 6 00:16:17.892570 kubelet[2030]: E0906 00:16:17.889081 2030 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-pkfnl" Sep 6 00:16:17.893319 kubelet[2030]: E0906 00:16:17.889131 2030 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-pkfnl_calico-system(5fcc5872-6420-4c35-9d81-fbabf8a0c640)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-pkfnl_calico-system(5fcc5872-6420-4c35-9d81-fbabf8a0c640)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-pkfnl" podUID="5fcc5872-6420-4c35-9d81-fbabf8a0c640" Sep 6 00:16:17.898275 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12-shm.mount: Deactivated successfully. Sep 6 00:16:18.113588 kubelet[2030]: E0906 00:16:18.111509 2030 secret.go:189] Couldn't get secret calico-apiserver/calico-apiserver-certs: failed to sync secret cache: timed out waiting for the condition Sep 6 00:16:18.113588 kubelet[2030]: E0906 00:16:18.112561 2030 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/32c9d655-95c5-436b-adcd-e3fe02fbc713-calico-apiserver-certs podName:32c9d655-95c5-436b-adcd-e3fe02fbc713 nodeName:}" failed. No retries permitted until 2025-09-06 00:16:18.612523374 +0000 UTC m=+38.206747659 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "calico-apiserver-certs" (UniqueName: "kubernetes.io/secret/32c9d655-95c5-436b-adcd-e3fe02fbc713-calico-apiserver-certs") pod "calico-apiserver-77f65f4854-jkr5j" (UID: "32c9d655-95c5-436b-adcd-e3fe02fbc713") : failed to sync secret cache: timed out waiting for the condition Sep 6 00:16:18.117638 kubelet[2030]: I0906 00:16:18.115620 2030 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" Sep 6 00:16:18.117820 env[1225]: time="2025-09-06T00:16:18.116582217Z" level=info msg="StopPodSandbox for \"84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9\"" Sep 6 00:16:18.120248 kubelet[2030]: I0906 00:16:18.119471 2030 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" Sep 6 00:16:18.124027 env[1225]: time="2025-09-06T00:16:18.121234713Z" level=info msg="StopPodSandbox for \"59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12\"" Sep 6 00:16:18.124027 env[1225]: time="2025-09-06T00:16:18.122587166Z" level=info msg="StopPodSandbox for \"f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec\"" Sep 6 00:16:18.124286 kubelet[2030]: I0906 00:16:18.122102 2030 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" Sep 6 00:16:18.125813 kubelet[2030]: E0906 00:16:18.125745 2030 secret.go:189] Couldn't get secret calico-apiserver/calico-apiserver-certs: failed to sync secret cache: timed out waiting for the condition Sep 6 00:16:18.125896 kubelet[2030]: E0906 00:16:18.125865 2030 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/bd47af89-ef90-4d72-a1f0-b0a4126e6c60-calico-apiserver-certs podName:bd47af89-ef90-4d72-a1f0-b0a4126e6c60 nodeName:}" failed. No retries permitted until 2025-09-06 00:16:18.625834344 +0000 UTC m=+38.220058629 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "calico-apiserver-certs" (UniqueName: "kubernetes.io/secret/bd47af89-ef90-4d72-a1f0-b0a4126e6c60-calico-apiserver-certs") pod "calico-apiserver-77f65f4854-prqvv" (UID: "bd47af89-ef90-4d72-a1f0-b0a4126e6c60") : failed to sync secret cache: timed out waiting for the condition Sep 6 00:16:18.138875 kubelet[2030]: I0906 00:16:18.138816 2030 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" Sep 6 00:16:18.145159 env[1225]: time="2025-09-06T00:16:18.143316109Z" level=info msg="StopPodSandbox for \"6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59\"" Sep 6 00:16:18.150422 kubelet[2030]: I0906 00:16:18.149706 2030 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" Sep 6 00:16:18.152511 env[1225]: time="2025-09-06T00:16:18.150608924Z" level=info msg="StopPodSandbox for \"54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862\"" Sep 6 00:16:18.152744 kubelet[2030]: I0906 00:16:18.152718 2030 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" Sep 6 00:16:18.153421 env[1225]: time="2025-09-06T00:16:18.153378860Z" level=info msg="StopPodSandbox for \"8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8\"" Sep 6 00:16:18.212272 env[1225]: time="2025-09-06T00:16:18.212178473Z" level=error msg="StopPodSandbox for \"f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec\" failed" error="failed to destroy network for sandbox \"f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:18.213198 kubelet[2030]: E0906 00:16:18.212853 2030 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" Sep 6 00:16:18.213198 kubelet[2030]: E0906 00:16:18.212971 2030 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec"} Sep 6 00:16:18.213198 kubelet[2030]: E0906 00:16:18.213104 2030 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"331a0376-d8b2-4772-9a83-07896fab7cf8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:16:18.213198 kubelet[2030]: E0906 00:16:18.213141 2030 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"331a0376-d8b2-4772-9a83-07896fab7cf8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-667977df75-tg4gg" podUID="331a0376-d8b2-4772-9a83-07896fab7cf8" Sep 6 00:16:18.254432 env[1225]: time="2025-09-06T00:16:18.254343476Z" level=error msg="StopPodSandbox for \"59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12\" failed" error="failed to destroy network for sandbox \"59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:18.255654 kubelet[2030]: E0906 00:16:18.255345 2030 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" Sep 6 00:16:18.255654 kubelet[2030]: E0906 00:16:18.255437 2030 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12"} Sep 6 00:16:18.255654 kubelet[2030]: E0906 00:16:18.255487 2030 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"5fcc5872-6420-4c35-9d81-fbabf8a0c640\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:16:18.255654 kubelet[2030]: E0906 00:16:18.255520 2030 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"5fcc5872-6420-4c35-9d81-fbabf8a0c640\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-pkfnl" podUID="5fcc5872-6420-4c35-9d81-fbabf8a0c640" Sep 6 00:16:18.256706 env[1225]: time="2025-09-06T00:16:18.256089864Z" level=error msg="StopPodSandbox for \"54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862\" failed" error="failed to destroy network for sandbox \"54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:18.256961 kubelet[2030]: E0906 00:16:18.256867 2030 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" Sep 6 00:16:18.256961 kubelet[2030]: E0906 00:16:18.256911 2030 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862"} Sep 6 00:16:18.257116 kubelet[2030]: E0906 00:16:18.256959 2030 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"0282c0d0-6aac-469c-a14e-04b67dddca1b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:16:18.257116 kubelet[2030]: E0906 00:16:18.257009 2030 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"0282c0d0-6aac-469c-a14e-04b67dddca1b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-5697c6c69-p4xxr" podUID="0282c0d0-6aac-469c-a14e-04b67dddca1b" Sep 6 00:16:18.258104 env[1225]: time="2025-09-06T00:16:18.258055169Z" level=error msg="StopPodSandbox for \"84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9\" failed" error="failed to destroy network for sandbox \"84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:18.258306 kubelet[2030]: E0906 00:16:18.258238 2030 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" Sep 6 00:16:18.258306 kubelet[2030]: E0906 00:16:18.258289 2030 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9"} Sep 6 00:16:18.258541 kubelet[2030]: E0906 00:16:18.258325 2030 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"e830bd3a-f4af-462b-bf17-815d051633f7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:16:18.258541 kubelet[2030]: E0906 00:16:18.258353 2030 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"e830bd3a-f4af-462b-bf17-815d051633f7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-jqlbh" podUID="e830bd3a-f4af-462b-bf17-815d051633f7" Sep 6 00:16:18.262383 env[1225]: time="2025-09-06T00:16:18.262242959Z" level=error msg="StopPodSandbox for \"8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8\" failed" error="failed to destroy network for sandbox \"8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:18.262732 kubelet[2030]: E0906 00:16:18.262670 2030 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" Sep 6 00:16:18.262835 kubelet[2030]: E0906 00:16:18.262769 2030 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8"} Sep 6 00:16:18.262835 kubelet[2030]: E0906 00:16:18.262824 2030 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"2e5ae4bb-0a1d-4be0-874a-5cd125295775\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:16:18.263120 kubelet[2030]: E0906 00:16:18.262860 2030 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"2e5ae4bb-0a1d-4be0-874a-5cd125295775\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-88vqh" podUID="2e5ae4bb-0a1d-4be0-874a-5cd125295775" Sep 6 00:16:18.285902 env[1225]: time="2025-09-06T00:16:18.284855664Z" level=error msg="StopPodSandbox for \"6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59\" failed" error="failed to destroy network for sandbox \"6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:18.286427 kubelet[2030]: E0906 00:16:18.285272 2030 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" Sep 6 00:16:18.286427 kubelet[2030]: E0906 00:16:18.285349 2030 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59"} Sep 6 00:16:18.286427 kubelet[2030]: E0906 00:16:18.285412 2030 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"3e73d97e-f57b-4ce7-9a19-70a0052142ea\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:16:18.286427 kubelet[2030]: E0906 00:16:18.285449 2030 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"3e73d97e-f57b-4ce7-9a19-70a0052142ea\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-54d579b49d-tdxp6" podUID="3e73d97e-f57b-4ce7-9a19-70a0052142ea" Sep 6 00:16:18.794881 env[1225]: time="2025-09-06T00:16:18.794363518Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-77f65f4854-jkr5j,Uid:32c9d655-95c5-436b-adcd-e3fe02fbc713,Namespace:calico-apiserver,Attempt:0,}" Sep 6 00:16:18.848643 env[1225]: time="2025-09-06T00:16:18.848581827Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-77f65f4854-prqvv,Uid:bd47af89-ef90-4d72-a1f0-b0a4126e6c60,Namespace:calico-apiserver,Attempt:0,}" Sep 6 00:16:18.985441 env[1225]: time="2025-09-06T00:16:18.985335610Z" level=error msg="Failed to destroy network for sandbox \"1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:18.989406 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e-shm.mount: Deactivated successfully. Sep 6 00:16:18.995593 env[1225]: time="2025-09-06T00:16:18.995503219Z" level=error msg="encountered an error cleaning up failed sandbox \"1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:18.995905 env[1225]: time="2025-09-06T00:16:18.995862755Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-77f65f4854-jkr5j,Uid:32c9d655-95c5-436b-adcd-e3fe02fbc713,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:19.000447 kubelet[2030]: E0906 00:16:19.000375 2030 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:19.000910 kubelet[2030]: E0906 00:16:19.000482 2030 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-77f65f4854-jkr5j" Sep 6 00:16:19.000910 kubelet[2030]: E0906 00:16:19.000548 2030 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-77f65f4854-jkr5j" Sep 6 00:16:19.000910 kubelet[2030]: E0906 00:16:19.000610 2030 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-77f65f4854-jkr5j_calico-apiserver(32c9d655-95c5-436b-adcd-e3fe02fbc713)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-77f65f4854-jkr5j_calico-apiserver(32c9d655-95c5-436b-adcd-e3fe02fbc713)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-77f65f4854-jkr5j" podUID="32c9d655-95c5-436b-adcd-e3fe02fbc713" Sep 6 00:16:19.070078 env[1225]: time="2025-09-06T00:16:19.065398379Z" level=error msg="Failed to destroy network for sandbox \"c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:19.074526 env[1225]: time="2025-09-06T00:16:19.070897004Z" level=error msg="encountered an error cleaning up failed sandbox \"c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:19.074526 env[1225]: time="2025-09-06T00:16:19.071068945Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-77f65f4854-prqvv,Uid:bd47af89-ef90-4d72-a1f0-b0a4126e6c60,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:19.071857 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0-shm.mount: Deactivated successfully. Sep 6 00:16:19.074996 kubelet[2030]: E0906 00:16:19.071498 2030 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:19.074996 kubelet[2030]: E0906 00:16:19.071624 2030 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-77f65f4854-prqvv" Sep 6 00:16:19.074996 kubelet[2030]: E0906 00:16:19.071659 2030 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-77f65f4854-prqvv" Sep 6 00:16:19.075172 kubelet[2030]: E0906 00:16:19.071737 2030 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-77f65f4854-prqvv_calico-apiserver(bd47af89-ef90-4d72-a1f0-b0a4126e6c60)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-77f65f4854-prqvv_calico-apiserver(bd47af89-ef90-4d72-a1f0-b0a4126e6c60)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-77f65f4854-prqvv" podUID="bd47af89-ef90-4d72-a1f0-b0a4126e6c60" Sep 6 00:16:19.170482 kubelet[2030]: I0906 00:16:19.170432 2030 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" Sep 6 00:16:19.171637 env[1225]: time="2025-09-06T00:16:19.171580858Z" level=info msg="StopPodSandbox for \"c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0\"" Sep 6 00:16:19.174820 kubelet[2030]: I0906 00:16:19.174378 2030 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" Sep 6 00:16:19.175227 env[1225]: time="2025-09-06T00:16:19.175182960Z" level=info msg="StopPodSandbox for \"1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e\"" Sep 6 00:16:19.263784 env[1225]: time="2025-09-06T00:16:19.260916648Z" level=error msg="StopPodSandbox for \"c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0\" failed" error="failed to destroy network for sandbox \"c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:19.264054 kubelet[2030]: E0906 00:16:19.261897 2030 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" Sep 6 00:16:19.264054 kubelet[2030]: E0906 00:16:19.261973 2030 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0"} Sep 6 00:16:19.264054 kubelet[2030]: E0906 00:16:19.262043 2030 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"bd47af89-ef90-4d72-a1f0-b0a4126e6c60\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:16:19.264054 kubelet[2030]: E0906 00:16:19.262078 2030 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"bd47af89-ef90-4d72-a1f0-b0a4126e6c60\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-77f65f4854-prqvv" podUID="bd47af89-ef90-4d72-a1f0-b0a4126e6c60" Sep 6 00:16:19.264337 env[1225]: time="2025-09-06T00:16:19.263742597Z" level=error msg="StopPodSandbox for \"1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e\" failed" error="failed to destroy network for sandbox \"1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:16:19.264386 kubelet[2030]: E0906 00:16:19.264166 2030 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" Sep 6 00:16:19.264386 kubelet[2030]: E0906 00:16:19.264242 2030 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e"} Sep 6 00:16:19.264386 kubelet[2030]: E0906 00:16:19.264309 2030 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"32c9d655-95c5-436b-adcd-e3fe02fbc713\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:16:19.264386 kubelet[2030]: E0906 00:16:19.264347 2030 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"32c9d655-95c5-436b-adcd-e3fe02fbc713\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-77f65f4854-jkr5j" podUID="32c9d655-95c5-436b-adcd-e3fe02fbc713" Sep 6 00:16:27.352919 kernel: hrtimer: interrupt took 8784487 ns Sep 6 00:16:27.503441 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount57514910.mount: Deactivated successfully. Sep 6 00:16:27.566415 env[1225]: time="2025-09-06T00:16:27.564556070Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:27.575257 env[1225]: time="2025-09-06T00:16:27.574908121Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ce9c4ac0f175f22c56e80844e65379d9ebe1d8a4e2bbb38dc1db0f53a8826f0f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:27.581895 env[1225]: time="2025-09-06T00:16:27.581149728Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:27.584895 env[1225]: time="2025-09-06T00:16:27.584394239Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:bcb8146fcaeced1e1c88fad3eaa697f1680746bd23c3e7e8d4535bc484c6f2a1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:27.585765 env[1225]: time="2025-09-06T00:16:27.585511677Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\" returns image reference \"sha256:ce9c4ac0f175f22c56e80844e65379d9ebe1d8a4e2bbb38dc1db0f53a8826f0f\"" Sep 6 00:16:27.614361 env[1225]: time="2025-09-06T00:16:27.611731617Z" level=info msg="CreateContainer within sandbox \"d999b7f31c45a9c17f33e98c8a41477aa5cd382327f7bd577425000212899ce1\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Sep 6 00:16:27.649389 env[1225]: time="2025-09-06T00:16:27.649156366Z" level=info msg="CreateContainer within sandbox \"d999b7f31c45a9c17f33e98c8a41477aa5cd382327f7bd577425000212899ce1\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"6622470f48ae5d022e4553e766cb892ffbc6f3ff3329415a6d690180b12b34cf\"" Sep 6 00:16:27.651894 env[1225]: time="2025-09-06T00:16:27.650465522Z" level=info msg="StartContainer for \"6622470f48ae5d022e4553e766cb892ffbc6f3ff3329415a6d690180b12b34cf\"" Sep 6 00:16:27.695045 systemd[1]: Started cri-containerd-6622470f48ae5d022e4553e766cb892ffbc6f3ff3329415a6d690180b12b34cf.scope. Sep 6 00:16:27.759045 kernel: kauditd_printk_skb: 34 callbacks suppressed Sep 6 00:16:27.763268 kernel: audit: type=1400 audit(1757117787.750:1023): avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.763366 kernel: audit: type=1300 audit(1757117787.750:1023): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7fc6851a8c68 items=0 ppid=2511 pid=3205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:27.750000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.750000 audit[3205]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7fc6851a8c68 items=0 ppid=2511 pid=3205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:27.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636323234373066343861653564303232653435353365373636636238 Sep 6 00:16:27.779073 kernel: audit: type=1327 audit(1757117787.750:1023): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636323234373066343861653564303232653435353365373636636238 Sep 6 00:16:27.782146 kernel: audit: type=1400 audit(1757117787.750:1024): avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.750000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.787052 kernel: audit: type=1400 audit(1757117787.750:1024): avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.750000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.750000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.795269 kernel: audit: type=1400 audit(1757117787.750:1024): avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.750000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.801761 kernel: audit: type=1400 audit(1757117787.750:1024): avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.750000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.813393 kernel: audit: type=1400 audit(1757117787.750:1024): avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.831109 kernel: audit: type=1400 audit(1757117787.750:1024): avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.831228 kernel: audit: type=1400 audit(1757117787.750:1024): avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.750000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.750000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.750000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.750000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.750000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.750000 audit: BPF prog-id=136 op=LOAD Sep 6 00:16:27.750000 audit[3205]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c000098a38 items=0 ppid=2511 pid=3205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:27.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636323234373066343861653564303232653435353365373636636238 Sep 6 00:16:27.758000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.758000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.758000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.758000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.758000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.758000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.758000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.758000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.758000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.758000 audit: BPF prog-id=137 op=LOAD Sep 6 00:16:27.758000 audit[3205]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c000098a88 items=0 ppid=2511 pid=3205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:27.758000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636323234373066343861653564303232653435353365373636636238 Sep 6 00:16:27.782000 audit: BPF prog-id=137 op=UNLOAD Sep 6 00:16:27.782000 audit: BPF prog-id=136 op=UNLOAD Sep 6 00:16:27.782000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.782000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.782000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.782000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.782000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.782000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.782000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.782000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.782000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.782000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:27.782000 audit: BPF prog-id=138 op=LOAD Sep 6 00:16:27.782000 audit[3205]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c000098b18 items=0 ppid=2511 pid=3205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:27.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636323234373066343861653564303232653435353365373636636238 Sep 6 00:16:28.011578 env[1225]: time="2025-09-06T00:16:28.011428982Z" level=info msg="StartContainer for \"6622470f48ae5d022e4553e766cb892ffbc6f3ff3329415a6d690180b12b34cf\" returns successfully" Sep 6 00:16:28.399093 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Sep 6 00:16:28.399320 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Sep 6 00:16:28.723086 env[1225]: time="2025-09-06T00:16:28.722229597Z" level=info msg="StopPodSandbox for \"8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8\"" Sep 6 00:16:28.723852 env[1225]: time="2025-09-06T00:16:28.723786706Z" level=info msg="StopPodSandbox for \"54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862\"" Sep 6 00:16:28.976407 kubelet[2030]: I0906 00:16:28.976191 2030 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-86pvn" podStartSLOduration=2.6113678179999997 podStartE2EDuration="27.97615534s" podCreationTimestamp="2025-09-06 00:16:01 +0000 UTC" firstStartedPulling="2025-09-06 00:16:02.22261298 +0000 UTC m=+21.816837265" lastFinishedPulling="2025-09-06 00:16:27.587400512 +0000 UTC m=+47.181624787" observedRunningTime="2025-09-06 00:16:28.380566281 +0000 UTC m=+47.974790586" watchObservedRunningTime="2025-09-06 00:16:28.97615534 +0000 UTC m=+48.570379625" Sep 6 00:16:29.239266 env[1225]: 2025-09-06 00:16:28.976 [INFO][3290] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" Sep 6 00:16:29.239266 env[1225]: 2025-09-06 00:16:28.980 [INFO][3290] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" iface="eth0" netns="/var/run/netns/cni-e7c56320-3745-97d9-ebf5-e7e65ecae031" Sep 6 00:16:29.239266 env[1225]: 2025-09-06 00:16:28.980 [INFO][3290] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" iface="eth0" netns="/var/run/netns/cni-e7c56320-3745-97d9-ebf5-e7e65ecae031" Sep 6 00:16:29.239266 env[1225]: 2025-09-06 00:16:28.980 [INFO][3290] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" iface="eth0" netns="/var/run/netns/cni-e7c56320-3745-97d9-ebf5-e7e65ecae031" Sep 6 00:16:29.239266 env[1225]: 2025-09-06 00:16:28.981 [INFO][3290] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" Sep 6 00:16:29.239266 env[1225]: 2025-09-06 00:16:28.981 [INFO][3290] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" Sep 6 00:16:29.239266 env[1225]: 2025-09-06 00:16:29.154 [INFO][3314] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" HandleID="k8s-pod-network.8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" Workload="localhost-k8s-coredns--668d6bf9bc--88vqh-eth0" Sep 6 00:16:29.239266 env[1225]: 2025-09-06 00:16:29.155 [INFO][3314] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:29.239266 env[1225]: 2025-09-06 00:16:29.155 [INFO][3314] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:29.239266 env[1225]: 2025-09-06 00:16:29.188 [WARNING][3314] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" HandleID="k8s-pod-network.8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" Workload="localhost-k8s-coredns--668d6bf9bc--88vqh-eth0" Sep 6 00:16:29.239266 env[1225]: 2025-09-06 00:16:29.188 [INFO][3314] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" HandleID="k8s-pod-network.8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" Workload="localhost-k8s-coredns--668d6bf9bc--88vqh-eth0" Sep 6 00:16:29.239266 env[1225]: 2025-09-06 00:16:29.200 [INFO][3314] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:29.239266 env[1225]: 2025-09-06 00:16:29.233 [INFO][3290] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" Sep 6 00:16:29.252054 systemd[1]: run-netns-cni\x2de7c56320\x2d3745\x2d97d9\x2debf5\x2de7e65ecae031.mount: Deactivated successfully. Sep 6 00:16:29.261362 env[1225]: time="2025-09-06T00:16:29.261268634Z" level=info msg="TearDown network for sandbox \"8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8\" successfully" Sep 6 00:16:29.261362 env[1225]: time="2025-09-06T00:16:29.261341207Z" level=info msg="StopPodSandbox for \"8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8\" returns successfully" Sep 6 00:16:29.262962 kubelet[2030]: E0906 00:16:29.261938 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:16:29.263125 env[1225]: time="2025-09-06T00:16:29.263021293Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-88vqh,Uid:2e5ae4bb-0a1d-4be0-874a-5cd125295775,Namespace:kube-system,Attempt:1,}" Sep 6 00:16:29.290000 audit[1884]: AVC avc: denied { watch } for pid=1884 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:16:29.290000 audit[1884]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0013755c0 a2=fc6 a3=0 items=0 ppid=1739 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 key=(null) Sep 6 00:16:29.290000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:16:29.294000 audit[1884]: AVC avc: denied { watch } for pid=1884 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:16:29.294000 audit[1884]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0022416a0 a2=fc6 a3=0 items=0 ppid=1739 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 key=(null) Sep 6 00:16:29.294000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:16:29.353670 systemd[1]: run-containerd-runc-k8s.io-6622470f48ae5d022e4553e766cb892ffbc6f3ff3329415a6d690180b12b34cf-runc.RQ8jgE.mount: Deactivated successfully. Sep 6 00:16:29.362009 env[1225]: 2025-09-06 00:16:28.985 [INFO][3291] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" Sep 6 00:16:29.362009 env[1225]: 2025-09-06 00:16:28.985 [INFO][3291] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" iface="eth0" netns="/var/run/netns/cni-7eb6cded-dbed-857f-3547-7ad2f595155c" Sep 6 00:16:29.362009 env[1225]: 2025-09-06 00:16:28.985 [INFO][3291] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" iface="eth0" netns="/var/run/netns/cni-7eb6cded-dbed-857f-3547-7ad2f595155c" Sep 6 00:16:29.362009 env[1225]: 2025-09-06 00:16:28.986 [INFO][3291] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" iface="eth0" netns="/var/run/netns/cni-7eb6cded-dbed-857f-3547-7ad2f595155c" Sep 6 00:16:29.362009 env[1225]: 2025-09-06 00:16:28.986 [INFO][3291] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" Sep 6 00:16:29.362009 env[1225]: 2025-09-06 00:16:28.986 [INFO][3291] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" Sep 6 00:16:29.362009 env[1225]: 2025-09-06 00:16:29.154 [INFO][3316] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" HandleID="k8s-pod-network.54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" Workload="localhost-k8s-whisker--5697c6c69--p4xxr-eth0" Sep 6 00:16:29.362009 env[1225]: 2025-09-06 00:16:29.155 [INFO][3316] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:29.362009 env[1225]: 2025-09-06 00:16:29.201 [INFO][3316] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:29.362009 env[1225]: 2025-09-06 00:16:29.244 [WARNING][3316] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" HandleID="k8s-pod-network.54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" Workload="localhost-k8s-whisker--5697c6c69--p4xxr-eth0" Sep 6 00:16:29.362009 env[1225]: 2025-09-06 00:16:29.244 [INFO][3316] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" HandleID="k8s-pod-network.54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" Workload="localhost-k8s-whisker--5697c6c69--p4xxr-eth0" Sep 6 00:16:29.362009 env[1225]: 2025-09-06 00:16:29.282 [INFO][3316] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:29.362009 env[1225]: 2025-09-06 00:16:29.314 [INFO][3291] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" Sep 6 00:16:29.360857 systemd[1]: run-netns-cni\x2d7eb6cded\x2ddbed\x2d857f\x2d3547\x2d7ad2f595155c.mount: Deactivated successfully. Sep 6 00:16:29.372759 env[1225]: time="2025-09-06T00:16:29.372688088Z" level=info msg="TearDown network for sandbox \"54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862\" successfully" Sep 6 00:16:29.375126 env[1225]: time="2025-09-06T00:16:29.373192798Z" level=info msg="StopPodSandbox for \"54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862\" returns successfully" Sep 6 00:16:29.376316 env[1225]: time="2025-09-06T00:16:29.376269426Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5697c6c69-p4xxr,Uid:0282c0d0-6aac-469c-a14e-04b67dddca1b,Namespace:calico-system,Attempt:1,}" Sep 6 00:16:29.704735 env[1225]: time="2025-09-06T00:16:29.704672870Z" level=info msg="StopPodSandbox for \"84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9\"" Sep 6 00:16:29.707040 env[1225]: time="2025-09-06T00:16:29.706347185Z" level=info msg="StopPodSandbox for \"f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec\"" Sep 6 00:16:29.857629 systemd-networkd[1055]: calieab4fc827c7: Link UP Sep 6 00:16:29.864681 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 6 00:16:29.864852 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calieab4fc827c7: link becomes ready Sep 6 00:16:29.864898 systemd-networkd[1055]: calieab4fc827c7: Gained carrier Sep 6 00:16:29.903212 env[1225]: 2025-09-06 00:16:29.550 [INFO][3360] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Sep 6 00:16:29.903212 env[1225]: 2025-09-06 00:16:29.585 [INFO][3360] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--5697c6c69--p4xxr-eth0 whisker-5697c6c69- calico-system 0282c0d0-6aac-469c-a14e-04b67dddca1b 963 0 2025-09-06 00:16:06 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:5697c6c69 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-5697c6c69-p4xxr eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] calieab4fc827c7 [] [] }} ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Namespace="calico-system" Pod="whisker-5697c6c69-p4xxr" WorkloadEndpoint="localhost-k8s-whisker--5697c6c69--p4xxr-" Sep 6 00:16:29.903212 env[1225]: 2025-09-06 00:16:29.585 [INFO][3360] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Namespace="calico-system" Pod="whisker-5697c6c69-p4xxr" WorkloadEndpoint="localhost-k8s-whisker--5697c6c69--p4xxr-eth0" Sep 6 00:16:29.903212 env[1225]: 2025-09-06 00:16:29.670 [INFO][3388] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" HandleID="k8s-pod-network.9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Workload="localhost-k8s-whisker--5697c6c69--p4xxr-eth0" Sep 6 00:16:29.903212 env[1225]: 2025-09-06 00:16:29.670 [INFO][3388] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" HandleID="k8s-pod-network.9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Workload="localhost-k8s-whisker--5697c6c69--p4xxr-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002df5f0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-5697c6c69-p4xxr", "timestamp":"2025-09-06 00:16:29.670080381 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:16:29.903212 env[1225]: 2025-09-06 00:16:29.670 [INFO][3388] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:29.903212 env[1225]: 2025-09-06 00:16:29.670 [INFO][3388] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:29.903212 env[1225]: 2025-09-06 00:16:29.671 [INFO][3388] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 6 00:16:29.903212 env[1225]: 2025-09-06 00:16:29.680 [INFO][3388] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" host="localhost" Sep 6 00:16:29.903212 env[1225]: 2025-09-06 00:16:29.692 [INFO][3388] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 6 00:16:29.903212 env[1225]: 2025-09-06 00:16:29.723 [INFO][3388] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 6 00:16:29.903212 env[1225]: 2025-09-06 00:16:29.739 [INFO][3388] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 6 00:16:29.903212 env[1225]: 2025-09-06 00:16:29.747 [INFO][3388] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 6 00:16:29.903212 env[1225]: 2025-09-06 00:16:29.747 [INFO][3388] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" host="localhost" Sep 6 00:16:29.903212 env[1225]: 2025-09-06 00:16:29.751 [INFO][3388] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1 Sep 6 00:16:29.903212 env[1225]: 2025-09-06 00:16:29.760 [INFO][3388] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" host="localhost" Sep 6 00:16:29.903212 env[1225]: 2025-09-06 00:16:29.783 [INFO][3388] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" host="localhost" Sep 6 00:16:29.903212 env[1225]: 2025-09-06 00:16:29.783 [INFO][3388] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" host="localhost" Sep 6 00:16:29.903212 env[1225]: 2025-09-06 00:16:29.783 [INFO][3388] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:29.903212 env[1225]: 2025-09-06 00:16:29.783 [INFO][3388] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" HandleID="k8s-pod-network.9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Workload="localhost-k8s-whisker--5697c6c69--p4xxr-eth0" Sep 6 00:16:29.904429 env[1225]: 2025-09-06 00:16:29.791 [INFO][3360] cni-plugin/k8s.go 418: Populated endpoint ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Namespace="calico-system" Pod="whisker-5697c6c69-p4xxr" WorkloadEndpoint="localhost-k8s-whisker--5697c6c69--p4xxr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--5697c6c69--p4xxr-eth0", GenerateName:"whisker-5697c6c69-", Namespace:"calico-system", SelfLink:"", UID:"0282c0d0-6aac-469c-a14e-04b67dddca1b", ResourceVersion:"963", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 16, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"5697c6c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-5697c6c69-p4xxr", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calieab4fc827c7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:29.904429 env[1225]: 2025-09-06 00:16:29.791 [INFO][3360] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Namespace="calico-system" Pod="whisker-5697c6c69-p4xxr" WorkloadEndpoint="localhost-k8s-whisker--5697c6c69--p4xxr-eth0" Sep 6 00:16:29.904429 env[1225]: 2025-09-06 00:16:29.791 [INFO][3360] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calieab4fc827c7 ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Namespace="calico-system" Pod="whisker-5697c6c69-p4xxr" WorkloadEndpoint="localhost-k8s-whisker--5697c6c69--p4xxr-eth0" Sep 6 00:16:29.904429 env[1225]: 2025-09-06 00:16:29.868 [INFO][3360] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Namespace="calico-system" Pod="whisker-5697c6c69-p4xxr" WorkloadEndpoint="localhost-k8s-whisker--5697c6c69--p4xxr-eth0" Sep 6 00:16:29.904429 env[1225]: 2025-09-06 00:16:29.868 [INFO][3360] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Namespace="calico-system" Pod="whisker-5697c6c69-p4xxr" WorkloadEndpoint="localhost-k8s-whisker--5697c6c69--p4xxr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--5697c6c69--p4xxr-eth0", GenerateName:"whisker-5697c6c69-", Namespace:"calico-system", SelfLink:"", UID:"0282c0d0-6aac-469c-a14e-04b67dddca1b", ResourceVersion:"963", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 16, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"5697c6c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1", Pod:"whisker-5697c6c69-p4xxr", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calieab4fc827c7", MAC:"ca:e8:f8:14:93:e2", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:29.904429 env[1225]: 2025-09-06 00:16:29.894 [INFO][3360] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Namespace="calico-system" Pod="whisker-5697c6c69-p4xxr" WorkloadEndpoint="localhost-k8s-whisker--5697c6c69--p4xxr-eth0" Sep 6 00:16:29.928303 systemd-networkd[1055]: cali9a6c91b5580: Link UP Sep 6 00:16:29.930625 systemd-networkd[1055]: cali9a6c91b5580: Gained carrier Sep 6 00:16:29.933071 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali9a6c91b5580: link becomes ready Sep 6 00:16:29.961743 env[1225]: time="2025-09-06T00:16:29.961476707Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:16:29.962082 env[1225]: time="2025-09-06T00:16:29.962036656Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:16:29.962245 env[1225]: time="2025-09-06T00:16:29.962194887Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:16:29.966261 env[1225]: time="2025-09-06T00:16:29.966027347Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1 pid=3476 runtime=io.containerd.runc.v2 Sep 6 00:16:29.994152 env[1225]: 2025-09-06 00:16:29.499 [INFO][3346] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Sep 6 00:16:29.994152 env[1225]: 2025-09-06 00:16:29.549 [INFO][3346] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--88vqh-eth0 coredns-668d6bf9bc- kube-system 2e5ae4bb-0a1d-4be0-874a-5cd125295775 958 0 2025-09-06 00:15:46 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-88vqh eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali9a6c91b5580 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="d7d97396a2b88b9e54206a993ad683fc41a6af42accb1bc6c672219aa07f88e9" Namespace="kube-system" Pod="coredns-668d6bf9bc-88vqh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--88vqh-" Sep 6 00:16:29.994152 env[1225]: 2025-09-06 00:16:29.549 [INFO][3346] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="d7d97396a2b88b9e54206a993ad683fc41a6af42accb1bc6c672219aa07f88e9" Namespace="kube-system" Pod="coredns-668d6bf9bc-88vqh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--88vqh-eth0" Sep 6 00:16:29.994152 env[1225]: 2025-09-06 00:16:29.666 [INFO][3381] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d7d97396a2b88b9e54206a993ad683fc41a6af42accb1bc6c672219aa07f88e9" HandleID="k8s-pod-network.d7d97396a2b88b9e54206a993ad683fc41a6af42accb1bc6c672219aa07f88e9" Workload="localhost-k8s-coredns--668d6bf9bc--88vqh-eth0" Sep 6 00:16:29.994152 env[1225]: 2025-09-06 00:16:29.672 [INFO][3381] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="d7d97396a2b88b9e54206a993ad683fc41a6af42accb1bc6c672219aa07f88e9" HandleID="k8s-pod-network.d7d97396a2b88b9e54206a993ad683fc41a6af42accb1bc6c672219aa07f88e9" Workload="localhost-k8s-coredns--668d6bf9bc--88vqh-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00025b1c0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-88vqh", "timestamp":"2025-09-06 00:16:29.666253972 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:16:29.994152 env[1225]: 2025-09-06 00:16:29.672 [INFO][3381] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:29.994152 env[1225]: 2025-09-06 00:16:29.784 [INFO][3381] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:29.994152 env[1225]: 2025-09-06 00:16:29.784 [INFO][3381] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 6 00:16:29.994152 env[1225]: 2025-09-06 00:16:29.798 [INFO][3381] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.d7d97396a2b88b9e54206a993ad683fc41a6af42accb1bc6c672219aa07f88e9" host="localhost" Sep 6 00:16:29.994152 env[1225]: 2025-09-06 00:16:29.817 [INFO][3381] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 6 00:16:29.994152 env[1225]: 2025-09-06 00:16:29.840 [INFO][3381] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 6 00:16:29.994152 env[1225]: 2025-09-06 00:16:29.848 [INFO][3381] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 6 00:16:29.994152 env[1225]: 2025-09-06 00:16:29.856 [INFO][3381] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 6 00:16:29.994152 env[1225]: 2025-09-06 00:16:29.856 [INFO][3381] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.d7d97396a2b88b9e54206a993ad683fc41a6af42accb1bc6c672219aa07f88e9" host="localhost" Sep 6 00:16:29.994152 env[1225]: 2025-09-06 00:16:29.860 [INFO][3381] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.d7d97396a2b88b9e54206a993ad683fc41a6af42accb1bc6c672219aa07f88e9 Sep 6 00:16:29.994152 env[1225]: 2025-09-06 00:16:29.882 [INFO][3381] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.d7d97396a2b88b9e54206a993ad683fc41a6af42accb1bc6c672219aa07f88e9" host="localhost" Sep 6 00:16:29.994152 env[1225]: 2025-09-06 00:16:29.904 [INFO][3381] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.d7d97396a2b88b9e54206a993ad683fc41a6af42accb1bc6c672219aa07f88e9" host="localhost" Sep 6 00:16:29.994152 env[1225]: 2025-09-06 00:16:29.904 [INFO][3381] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.d7d97396a2b88b9e54206a993ad683fc41a6af42accb1bc6c672219aa07f88e9" host="localhost" Sep 6 00:16:29.994152 env[1225]: 2025-09-06 00:16:29.904 [INFO][3381] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:29.994152 env[1225]: 2025-09-06 00:16:29.904 [INFO][3381] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="d7d97396a2b88b9e54206a993ad683fc41a6af42accb1bc6c672219aa07f88e9" HandleID="k8s-pod-network.d7d97396a2b88b9e54206a993ad683fc41a6af42accb1bc6c672219aa07f88e9" Workload="localhost-k8s-coredns--668d6bf9bc--88vqh-eth0" Sep 6 00:16:29.996528 env[1225]: 2025-09-06 00:16:29.913 [INFO][3346] cni-plugin/k8s.go 418: Populated endpoint ContainerID="d7d97396a2b88b9e54206a993ad683fc41a6af42accb1bc6c672219aa07f88e9" Namespace="kube-system" Pod="coredns-668d6bf9bc-88vqh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--88vqh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--88vqh-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"2e5ae4bb-0a1d-4be0-874a-5cd125295775", ResourceVersion:"958", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 15, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-88vqh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali9a6c91b5580", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:29.996528 env[1225]: 2025-09-06 00:16:29.913 [INFO][3346] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="d7d97396a2b88b9e54206a993ad683fc41a6af42accb1bc6c672219aa07f88e9" Namespace="kube-system" Pod="coredns-668d6bf9bc-88vqh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--88vqh-eth0" Sep 6 00:16:29.996528 env[1225]: 2025-09-06 00:16:29.913 [INFO][3346] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali9a6c91b5580 ContainerID="d7d97396a2b88b9e54206a993ad683fc41a6af42accb1bc6c672219aa07f88e9" Namespace="kube-system" Pod="coredns-668d6bf9bc-88vqh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--88vqh-eth0" Sep 6 00:16:29.996528 env[1225]: 2025-09-06 00:16:29.932 [INFO][3346] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="d7d97396a2b88b9e54206a993ad683fc41a6af42accb1bc6c672219aa07f88e9" Namespace="kube-system" Pod="coredns-668d6bf9bc-88vqh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--88vqh-eth0" Sep 6 00:16:29.996528 env[1225]: 2025-09-06 00:16:29.940 [INFO][3346] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="d7d97396a2b88b9e54206a993ad683fc41a6af42accb1bc6c672219aa07f88e9" Namespace="kube-system" Pod="coredns-668d6bf9bc-88vqh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--88vqh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--88vqh-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"2e5ae4bb-0a1d-4be0-874a-5cd125295775", ResourceVersion:"958", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 15, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d7d97396a2b88b9e54206a993ad683fc41a6af42accb1bc6c672219aa07f88e9", Pod:"coredns-668d6bf9bc-88vqh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali9a6c91b5580", MAC:"c2:d3:f2:56:4d:2c", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:29.996528 env[1225]: 2025-09-06 00:16:29.984 [INFO][3346] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="d7d97396a2b88b9e54206a993ad683fc41a6af42accb1bc6c672219aa07f88e9" Namespace="kube-system" Pod="coredns-668d6bf9bc-88vqh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--88vqh-eth0" Sep 6 00:16:29.998719 env[1225]: 2025-09-06 00:16:29.819 [INFO][3434] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" Sep 6 00:16:29.998719 env[1225]: 2025-09-06 00:16:29.819 [INFO][3434] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" iface="eth0" netns="/var/run/netns/cni-4bf2d8c9-632a-1bf5-070f-c31a5196d639" Sep 6 00:16:29.998719 env[1225]: 2025-09-06 00:16:29.819 [INFO][3434] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" iface="eth0" netns="/var/run/netns/cni-4bf2d8c9-632a-1bf5-070f-c31a5196d639" Sep 6 00:16:29.998719 env[1225]: 2025-09-06 00:16:29.819 [INFO][3434] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" iface="eth0" netns="/var/run/netns/cni-4bf2d8c9-632a-1bf5-070f-c31a5196d639" Sep 6 00:16:29.998719 env[1225]: 2025-09-06 00:16:29.819 [INFO][3434] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" Sep 6 00:16:29.998719 env[1225]: 2025-09-06 00:16:29.822 [INFO][3434] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" Sep 6 00:16:29.998719 env[1225]: 2025-09-06 00:16:29.941 [INFO][3446] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" HandleID="k8s-pod-network.84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" Workload="localhost-k8s-coredns--668d6bf9bc--jqlbh-eth0" Sep 6 00:16:29.998719 env[1225]: 2025-09-06 00:16:29.942 [INFO][3446] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:29.998719 env[1225]: 2025-09-06 00:16:29.942 [INFO][3446] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:29.998719 env[1225]: 2025-09-06 00:16:29.974 [WARNING][3446] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" HandleID="k8s-pod-network.84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" Workload="localhost-k8s-coredns--668d6bf9bc--jqlbh-eth0" Sep 6 00:16:29.998719 env[1225]: 2025-09-06 00:16:29.974 [INFO][3446] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" HandleID="k8s-pod-network.84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" Workload="localhost-k8s-coredns--668d6bf9bc--jqlbh-eth0" Sep 6 00:16:29.998719 env[1225]: 2025-09-06 00:16:29.986 [INFO][3446] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:29.998719 env[1225]: 2025-09-06 00:16:29.993 [INFO][3434] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" Sep 6 00:16:30.008790 systemd[1]: run-netns-cni\x2d4bf2d8c9\x2d632a\x2d1bf5\x2d070f\x2dc31a5196d639.mount: Deactivated successfully. Sep 6 00:16:30.023998 env[1225]: time="2025-09-06T00:16:30.019862526Z" level=info msg="TearDown network for sandbox \"84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9\" successfully" Sep 6 00:16:30.023998 env[1225]: time="2025-09-06T00:16:30.019947482Z" level=info msg="StopPodSandbox for \"84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9\" returns successfully" Sep 6 00:16:30.023998 env[1225]: time="2025-09-06T00:16:30.021031377Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-jqlbh,Uid:e830bd3a-f4af-462b-bf17-815d051633f7,Namespace:kube-system,Attempt:1,}" Sep 6 00:16:30.024285 kubelet[2030]: E0906 00:16:30.020397 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:16:30.049038 env[1225]: 2025-09-06 00:16:29.841 [INFO][3429] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" Sep 6 00:16:30.049038 env[1225]: 2025-09-06 00:16:29.841 [INFO][3429] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" iface="eth0" netns="/var/run/netns/cni-5b80ecb0-87e7-f8dc-cef6-f8caaa232c35" Sep 6 00:16:30.049038 env[1225]: 2025-09-06 00:16:29.842 [INFO][3429] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" iface="eth0" netns="/var/run/netns/cni-5b80ecb0-87e7-f8dc-cef6-f8caaa232c35" Sep 6 00:16:30.049038 env[1225]: 2025-09-06 00:16:29.842 [INFO][3429] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" iface="eth0" netns="/var/run/netns/cni-5b80ecb0-87e7-f8dc-cef6-f8caaa232c35" Sep 6 00:16:30.049038 env[1225]: 2025-09-06 00:16:29.842 [INFO][3429] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" Sep 6 00:16:30.049038 env[1225]: 2025-09-06 00:16:29.842 [INFO][3429] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" Sep 6 00:16:30.049038 env[1225]: 2025-09-06 00:16:29.948 [INFO][3452] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" HandleID="k8s-pod-network.f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" Workload="localhost-k8s-calico--kube--controllers--667977df75--tg4gg-eth0" Sep 6 00:16:30.049038 env[1225]: 2025-09-06 00:16:29.948 [INFO][3452] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:30.049038 env[1225]: 2025-09-06 00:16:29.986 [INFO][3452] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:30.049038 env[1225]: 2025-09-06 00:16:30.019 [WARNING][3452] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" HandleID="k8s-pod-network.f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" Workload="localhost-k8s-calico--kube--controllers--667977df75--tg4gg-eth0" Sep 6 00:16:30.049038 env[1225]: 2025-09-06 00:16:30.020 [INFO][3452] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" HandleID="k8s-pod-network.f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" Workload="localhost-k8s-calico--kube--controllers--667977df75--tg4gg-eth0" Sep 6 00:16:30.049038 env[1225]: 2025-09-06 00:16:30.033 [INFO][3452] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:30.049038 env[1225]: 2025-09-06 00:16:30.046 [INFO][3429] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" Sep 6 00:16:30.071101 systemd[1]: run-netns-cni\x2d5b80ecb0\x2d87e7\x2df8dc\x2dcef6\x2df8caaa232c35.mount: Deactivated successfully. Sep 6 00:16:30.073829 env[1225]: time="2025-09-06T00:16:30.073769388Z" level=info msg="TearDown network for sandbox \"f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec\" successfully" Sep 6 00:16:30.074068 env[1225]: time="2025-09-06T00:16:30.073936034Z" level=info msg="StopPodSandbox for \"f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec\" returns successfully" Sep 6 00:16:30.074313 env[1225]: time="2025-09-06T00:16:30.073056590Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:16:30.074313 env[1225]: time="2025-09-06T00:16:30.073115225Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:16:30.074313 env[1225]: time="2025-09-06T00:16:30.073129753Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:16:30.074313 env[1225]: time="2025-09-06T00:16:30.073278575Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d7d97396a2b88b9e54206a993ad683fc41a6af42accb1bc6c672219aa07f88e9 pid=3512 runtime=io.containerd.runc.v2 Sep 6 00:16:30.077298 env[1225]: time="2025-09-06T00:16:30.075932287Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-667977df75-tg4gg,Uid:331a0376-d8b2-4772-9a83-07896fab7cf8,Namespace:calico-system,Attempt:1,}" Sep 6 00:16:30.095196 systemd[1]: Started cri-containerd-9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1.scope. Sep 6 00:16:30.111548 systemd[1]: Started cri-containerd-d7d97396a2b88b9e54206a993ad683fc41a6af42accb1bc6c672219aa07f88e9.scope. Sep 6 00:16:30.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.135000 audit: BPF prog-id=139 op=LOAD Sep 6 00:16:30.136000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.136000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3476 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.136000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963663466373831356339646237616639633137386461376338343365 Sep 6 00:16:30.136000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.136000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=3476 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.136000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963663466373831356339646237616639633137386461376338343365 Sep 6 00:16:30.140000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.140000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.140000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.140000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.140000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.140000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.140000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.140000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.140000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.140000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.140000 audit: BPF prog-id=140 op=LOAD Sep 6 00:16:30.140000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0000259b0 items=0 ppid=3476 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.140000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963663466373831356339646237616639633137386461376338343365 Sep 6 00:16:30.141000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.141000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.141000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.141000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.141000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.141000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.141000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.141000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.141000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.141000 audit: BPF prog-id=141 op=LOAD Sep 6 00:16:30.141000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c0000259f8 items=0 ppid=3476 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.141000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963663466373831356339646237616639633137386461376338343365 Sep 6 00:16:30.141000 audit: BPF prog-id=141 op=UNLOAD Sep 6 00:16:30.141000 audit: BPF prog-id=140 op=UNLOAD Sep 6 00:16:30.141000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.141000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.141000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.141000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.141000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.141000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.141000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.141000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.141000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.141000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.141000 audit: BPF prog-id=142 op=LOAD Sep 6 00:16:30.141000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c000025e08 items=0 ppid=3476 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.141000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963663466373831356339646237616639633137386461376338343365 Sep 6 00:16:30.150109 systemd-resolved[1178]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 6 00:16:30.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.160000 audit: BPF prog-id=143 op=LOAD Sep 6 00:16:30.164000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.164000 audit[3524]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3512 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.164000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437643937333936613262383862396535343230366139393361643638 Sep 6 00:16:30.165000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.165000 audit[3524]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=3512 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.165000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437643937333936613262383862396535343230366139393361643638 Sep 6 00:16:30.165000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.165000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.165000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.165000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.165000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.165000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.165000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.165000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.165000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.165000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.165000 audit: BPF prog-id=144 op=LOAD Sep 6 00:16:30.165000 audit[3524]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000024390 items=0 ppid=3512 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.165000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437643937333936613262383862396535343230366139393361643638 Sep 6 00:16:30.165000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.165000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.165000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.165000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.165000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.165000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.165000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.165000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.165000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.165000 audit: BPF prog-id=145 op=LOAD Sep 6 00:16:30.165000 audit[3524]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0000243d8 items=0 ppid=3512 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.165000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437643937333936613262383862396535343230366139393361643638 Sep 6 00:16:30.165000 audit: BPF prog-id=145 op=UNLOAD Sep 6 00:16:30.165000 audit: BPF prog-id=144 op=UNLOAD Sep 6 00:16:30.165000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.165000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.165000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.165000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.165000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.165000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.165000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.165000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.165000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.165000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.165000 audit: BPF prog-id=146 op=LOAD Sep 6 00:16:30.165000 audit[3524]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0000247e8 items=0 ppid=3512 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.165000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437643937333936613262383862396535343230366139393361643638 Sep 6 00:16:30.168449 systemd-resolved[1178]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 6 00:16:30.242557 env[1225]: time="2025-09-06T00:16:30.242361991Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-88vqh,Uid:2e5ae4bb-0a1d-4be0-874a-5cd125295775,Namespace:kube-system,Attempt:1,} returns sandbox id \"d7d97396a2b88b9e54206a993ad683fc41a6af42accb1bc6c672219aa07f88e9\"" Sep 6 00:16:30.259109 env[1225]: time="2025-09-06T00:16:30.258550612Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5697c6c69-p4xxr,Uid:0282c0d0-6aac-469c-a14e-04b67dddca1b,Namespace:calico-system,Attempt:1,} returns sandbox id \"9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1\"" Sep 6 00:16:30.260318 kubelet[2030]: E0906 00:16:30.259838 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:16:30.262203 env[1225]: time="2025-09-06T00:16:30.262149867Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\"" Sep 6 00:16:30.272970 env[1225]: time="2025-09-06T00:16:30.272890629Z" level=info msg="CreateContainer within sandbox \"d7d97396a2b88b9e54206a993ad683fc41a6af42accb1bc6c672219aa07f88e9\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 6 00:16:30.393430 env[1225]: time="2025-09-06T00:16:30.393343887Z" level=info msg="CreateContainer within sandbox \"d7d97396a2b88b9e54206a993ad683fc41a6af42accb1bc6c672219aa07f88e9\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"eb9a863bad3b84ef56be0cd914b59bff5c81a08422cd36e614c45dc6325ed206\"" Sep 6 00:16:30.395027 env[1225]: time="2025-09-06T00:16:30.394917751Z" level=info msg="StartContainer for \"eb9a863bad3b84ef56be0cd914b59bff5c81a08422cd36e614c45dc6325ed206\"" Sep 6 00:16:30.439680 systemd[1]: Started cri-containerd-eb9a863bad3b84ef56be0cd914b59bff5c81a08422cd36e614c45dc6325ed206.scope. Sep 6 00:16:30.472580 systemd-networkd[1055]: calid5729bcb61a: Link UP Sep 6 00:16:30.483822 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calid5729bcb61a: link becomes ready Sep 6 00:16:30.482525 systemd-networkd[1055]: calid5729bcb61a: Gained carrier Sep 6 00:16:30.519675 env[1225]: 2025-09-06 00:16:30.217 [INFO][3549] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Sep 6 00:16:30.519675 env[1225]: 2025-09-06 00:16:30.249 [INFO][3549] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--jqlbh-eth0 coredns-668d6bf9bc- kube-system e830bd3a-f4af-462b-bf17-815d051633f7 983 0 2025-09-06 00:15:46 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-jqlbh eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calid5729bcb61a [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="9a5af4c1a014221daa34f58e15636dd4671db8200e0f01dd160f87abe9523b19" Namespace="kube-system" Pod="coredns-668d6bf9bc-jqlbh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--jqlbh-" Sep 6 00:16:30.519675 env[1225]: 2025-09-06 00:16:30.249 [INFO][3549] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="9a5af4c1a014221daa34f58e15636dd4671db8200e0f01dd160f87abe9523b19" Namespace="kube-system" Pod="coredns-668d6bf9bc-jqlbh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--jqlbh-eth0" Sep 6 00:16:30.519675 env[1225]: 2025-09-06 00:16:30.322 [INFO][3595] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9a5af4c1a014221daa34f58e15636dd4671db8200e0f01dd160f87abe9523b19" HandleID="k8s-pod-network.9a5af4c1a014221daa34f58e15636dd4671db8200e0f01dd160f87abe9523b19" Workload="localhost-k8s-coredns--668d6bf9bc--jqlbh-eth0" Sep 6 00:16:30.519675 env[1225]: 2025-09-06 00:16:30.322 [INFO][3595] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="9a5af4c1a014221daa34f58e15636dd4671db8200e0f01dd160f87abe9523b19" HandleID="k8s-pod-network.9a5af4c1a014221daa34f58e15636dd4671db8200e0f01dd160f87abe9523b19" Workload="localhost-k8s-coredns--668d6bf9bc--jqlbh-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00035f5f0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-jqlbh", "timestamp":"2025-09-06 00:16:30.322538583 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:16:30.519675 env[1225]: 2025-09-06 00:16:30.323 [INFO][3595] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:30.519675 env[1225]: 2025-09-06 00:16:30.323 [INFO][3595] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:30.519675 env[1225]: 2025-09-06 00:16:30.323 [INFO][3595] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 6 00:16:30.519675 env[1225]: 2025-09-06 00:16:30.346 [INFO][3595] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.9a5af4c1a014221daa34f58e15636dd4671db8200e0f01dd160f87abe9523b19" host="localhost" Sep 6 00:16:30.519675 env[1225]: 2025-09-06 00:16:30.364 [INFO][3595] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 6 00:16:30.519675 env[1225]: 2025-09-06 00:16:30.385 [INFO][3595] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 6 00:16:30.519675 env[1225]: 2025-09-06 00:16:30.397 [INFO][3595] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 6 00:16:30.519675 env[1225]: 2025-09-06 00:16:30.408 [INFO][3595] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 6 00:16:30.519675 env[1225]: 2025-09-06 00:16:30.409 [INFO][3595] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.9a5af4c1a014221daa34f58e15636dd4671db8200e0f01dd160f87abe9523b19" host="localhost" Sep 6 00:16:30.519675 env[1225]: 2025-09-06 00:16:30.412 [INFO][3595] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.9a5af4c1a014221daa34f58e15636dd4671db8200e0f01dd160f87abe9523b19 Sep 6 00:16:30.519675 env[1225]: 2025-09-06 00:16:30.426 [INFO][3595] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.9a5af4c1a014221daa34f58e15636dd4671db8200e0f01dd160f87abe9523b19" host="localhost" Sep 6 00:16:30.519675 env[1225]: 2025-09-06 00:16:30.448 [INFO][3595] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.9a5af4c1a014221daa34f58e15636dd4671db8200e0f01dd160f87abe9523b19" host="localhost" Sep 6 00:16:30.519675 env[1225]: 2025-09-06 00:16:30.448 [INFO][3595] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.9a5af4c1a014221daa34f58e15636dd4671db8200e0f01dd160f87abe9523b19" host="localhost" Sep 6 00:16:30.519675 env[1225]: 2025-09-06 00:16:30.448 [INFO][3595] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:30.519675 env[1225]: 2025-09-06 00:16:30.448 [INFO][3595] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="9a5af4c1a014221daa34f58e15636dd4671db8200e0f01dd160f87abe9523b19" HandleID="k8s-pod-network.9a5af4c1a014221daa34f58e15636dd4671db8200e0f01dd160f87abe9523b19" Workload="localhost-k8s-coredns--668d6bf9bc--jqlbh-eth0" Sep 6 00:16:30.520803 env[1225]: 2025-09-06 00:16:30.456 [INFO][3549] cni-plugin/k8s.go 418: Populated endpoint ContainerID="9a5af4c1a014221daa34f58e15636dd4671db8200e0f01dd160f87abe9523b19" Namespace="kube-system" Pod="coredns-668d6bf9bc-jqlbh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--jqlbh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--jqlbh-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"e830bd3a-f4af-462b-bf17-815d051633f7", ResourceVersion:"983", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 15, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-jqlbh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid5729bcb61a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:30.520803 env[1225]: 2025-09-06 00:16:30.456 [INFO][3549] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="9a5af4c1a014221daa34f58e15636dd4671db8200e0f01dd160f87abe9523b19" Namespace="kube-system" Pod="coredns-668d6bf9bc-jqlbh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--jqlbh-eth0" Sep 6 00:16:30.520803 env[1225]: 2025-09-06 00:16:30.456 [INFO][3549] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calid5729bcb61a ContainerID="9a5af4c1a014221daa34f58e15636dd4671db8200e0f01dd160f87abe9523b19" Namespace="kube-system" Pod="coredns-668d6bf9bc-jqlbh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--jqlbh-eth0" Sep 6 00:16:30.520803 env[1225]: 2025-09-06 00:16:30.488 [INFO][3549] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="9a5af4c1a014221daa34f58e15636dd4671db8200e0f01dd160f87abe9523b19" Namespace="kube-system" Pod="coredns-668d6bf9bc-jqlbh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--jqlbh-eth0" Sep 6 00:16:30.520803 env[1225]: 2025-09-06 00:16:30.488 [INFO][3549] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="9a5af4c1a014221daa34f58e15636dd4671db8200e0f01dd160f87abe9523b19" Namespace="kube-system" Pod="coredns-668d6bf9bc-jqlbh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--jqlbh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--jqlbh-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"e830bd3a-f4af-462b-bf17-815d051633f7", ResourceVersion:"983", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 15, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9a5af4c1a014221daa34f58e15636dd4671db8200e0f01dd160f87abe9523b19", Pod:"coredns-668d6bf9bc-jqlbh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid5729bcb61a", MAC:"3a:80:20:72:3e:ef", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:30.520803 env[1225]: 2025-09-06 00:16:30.514 [INFO][3549] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="9a5af4c1a014221daa34f58e15636dd4671db8200e0f01dd160f87abe9523b19" Namespace="kube-system" Pod="coredns-668d6bf9bc-jqlbh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--jqlbh-eth0" Sep 6 00:16:30.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.525000 audit: BPF prog-id=147 op=LOAD Sep 6 00:16:30.526000 audit[3617]: AVC avc: denied { bpf } for pid=3617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.526000 audit[3617]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3512 pid=3617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.526000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562396138363362616433623834656635366265306364393134623539 Sep 6 00:16:30.526000 audit[3617]: AVC avc: denied { perfmon } for pid=3617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.526000 audit[3617]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3512 pid=3617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.526000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562396138363362616433623834656635366265306364393134623539 Sep 6 00:16:30.527000 audit[3617]: AVC avc: denied { bpf } for pid=3617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.527000 audit[3617]: AVC avc: denied { bpf } for pid=3617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.527000 audit[3617]: AVC avc: denied { bpf } for pid=3617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.527000 audit[3617]: AVC avc: denied { perfmon } for pid=3617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.527000 audit[3617]: AVC avc: denied { perfmon } for pid=3617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.527000 audit[3617]: AVC avc: denied { perfmon } for pid=3617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.527000 audit[3617]: AVC avc: denied { perfmon } for pid=3617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.527000 audit[3617]: AVC avc: denied { perfmon } for pid=3617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.527000 audit[3617]: AVC avc: denied { bpf } for pid=3617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.527000 audit[3617]: AVC avc: denied { bpf } for pid=3617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.527000 audit: BPF prog-id=148 op=LOAD Sep 6 00:16:30.527000 audit[3617]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003965f0 items=0 ppid=3512 pid=3617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562396138363362616433623834656635366265306364393134623539 Sep 6 00:16:30.527000 audit[3617]: AVC avc: denied { bpf } for pid=3617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.527000 audit[3617]: AVC avc: denied { bpf } for pid=3617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.527000 audit[3617]: AVC avc: denied { perfmon } for pid=3617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.527000 audit[3617]: AVC avc: denied { perfmon } for pid=3617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.527000 audit[3617]: AVC avc: denied { perfmon } for pid=3617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.527000 audit[3617]: AVC avc: denied { perfmon } for pid=3617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.527000 audit[3617]: AVC avc: denied { perfmon } for pid=3617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.527000 audit[3617]: AVC avc: denied { bpf } for pid=3617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.527000 audit[3617]: AVC avc: denied { bpf } for pid=3617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.527000 audit: BPF prog-id=149 op=LOAD Sep 6 00:16:30.527000 audit[3617]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000396638 items=0 ppid=3512 pid=3617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562396138363362616433623834656635366265306364393134623539 Sep 6 00:16:30.528000 audit: BPF prog-id=149 op=UNLOAD Sep 6 00:16:30.528000 audit: BPF prog-id=148 op=UNLOAD Sep 6 00:16:30.528000 audit[3617]: AVC avc: denied { bpf } for pid=3617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.528000 audit[3617]: AVC avc: denied { bpf } for pid=3617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.528000 audit[3617]: AVC avc: denied { bpf } for pid=3617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.528000 audit[3617]: AVC avc: denied { perfmon } for pid=3617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.528000 audit[3617]: AVC avc: denied { perfmon } for pid=3617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.528000 audit[3617]: AVC avc: denied { perfmon } for pid=3617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.528000 audit[3617]: AVC avc: denied { perfmon } for pid=3617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.528000 audit[3617]: AVC avc: denied { perfmon } for pid=3617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.528000 audit[3617]: AVC avc: denied { bpf } for pid=3617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.528000 audit[3617]: AVC avc: denied { bpf } for pid=3617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.528000 audit: BPF prog-id=150 op=LOAD Sep 6 00:16:30.528000 audit[3617]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000396a48 items=0 ppid=3512 pid=3617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.528000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562396138363362616433623834656635366265306364393134623539 Sep 6 00:16:30.580589 env[1225]: time="2025-09-06T00:16:30.580447494Z" level=info msg="StartContainer for \"eb9a863bad3b84ef56be0cd914b59bff5c81a08422cd36e614c45dc6325ed206\" returns successfully" Sep 6 00:16:30.603146 env[1225]: time="2025-09-06T00:16:30.601498896Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:16:30.603146 env[1225]: time="2025-09-06T00:16:30.601557581Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:16:30.603146 env[1225]: time="2025-09-06T00:16:30.601573752Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:16:30.603146 env[1225]: time="2025-09-06T00:16:30.601745079Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9a5af4c1a014221daa34f58e15636dd4671db8200e0f01dd160f87abe9523b19 pid=3655 runtime=io.containerd.runc.v2 Sep 6 00:16:30.651285 systemd-networkd[1055]: cali91c76946a3f: Link UP Sep 6 00:16:30.658134 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali91c76946a3f: link becomes ready Sep 6 00:16:30.657650 systemd-networkd[1055]: cali91c76946a3f: Gained carrier Sep 6 00:16:30.680592 systemd[1]: Started cri-containerd-9a5af4c1a014221daa34f58e15636dd4671db8200e0f01dd160f87abe9523b19.scope. Sep 6 00:16:30.693521 env[1225]: 2025-09-06 00:16:30.254 [INFO][3560] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Sep 6 00:16:30.693521 env[1225]: 2025-09-06 00:16:30.294 [INFO][3560] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--667977df75--tg4gg-eth0 calico-kube-controllers-667977df75- calico-system 331a0376-d8b2-4772-9a83-07896fab7cf8 984 0 2025-09-06 00:16:01 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:667977df75 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-667977df75-tg4gg eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali91c76946a3f [] [] }} ContainerID="ffaa7996a97ba184064733bc2dd00242903aa5ec47c3c9a433425d263a501e7a" Namespace="calico-system" Pod="calico-kube-controllers-667977df75-tg4gg" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--667977df75--tg4gg-" Sep 6 00:16:30.693521 env[1225]: 2025-09-06 00:16:30.294 [INFO][3560] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="ffaa7996a97ba184064733bc2dd00242903aa5ec47c3c9a433425d263a501e7a" Namespace="calico-system" Pod="calico-kube-controllers-667977df75-tg4gg" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--667977df75--tg4gg-eth0" Sep 6 00:16:30.693521 env[1225]: 2025-09-06 00:16:30.372 [INFO][3601] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ffaa7996a97ba184064733bc2dd00242903aa5ec47c3c9a433425d263a501e7a" HandleID="k8s-pod-network.ffaa7996a97ba184064733bc2dd00242903aa5ec47c3c9a433425d263a501e7a" Workload="localhost-k8s-calico--kube--controllers--667977df75--tg4gg-eth0" Sep 6 00:16:30.693521 env[1225]: 2025-09-06 00:16:30.372 [INFO][3601] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="ffaa7996a97ba184064733bc2dd00242903aa5ec47c3c9a433425d263a501e7a" HandleID="k8s-pod-network.ffaa7996a97ba184064733bc2dd00242903aa5ec47c3c9a433425d263a501e7a" Workload="localhost-k8s-calico--kube--controllers--667977df75--tg4gg-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000139890), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-667977df75-tg4gg", "timestamp":"2025-09-06 00:16:30.372025591 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:16:30.693521 env[1225]: 2025-09-06 00:16:30.372 [INFO][3601] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:30.693521 env[1225]: 2025-09-06 00:16:30.448 [INFO][3601] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:30.693521 env[1225]: 2025-09-06 00:16:30.451 [INFO][3601] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 6 00:16:30.693521 env[1225]: 2025-09-06 00:16:30.477 [INFO][3601] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.ffaa7996a97ba184064733bc2dd00242903aa5ec47c3c9a433425d263a501e7a" host="localhost" Sep 6 00:16:30.693521 env[1225]: 2025-09-06 00:16:30.522 [INFO][3601] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 6 00:16:30.693521 env[1225]: 2025-09-06 00:16:30.549 [INFO][3601] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 6 00:16:30.693521 env[1225]: 2025-09-06 00:16:30.563 [INFO][3601] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 6 00:16:30.693521 env[1225]: 2025-09-06 00:16:30.575 [INFO][3601] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 6 00:16:30.693521 env[1225]: 2025-09-06 00:16:30.576 [INFO][3601] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.ffaa7996a97ba184064733bc2dd00242903aa5ec47c3c9a433425d263a501e7a" host="localhost" Sep 6 00:16:30.693521 env[1225]: 2025-09-06 00:16:30.580 [INFO][3601] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.ffaa7996a97ba184064733bc2dd00242903aa5ec47c3c9a433425d263a501e7a Sep 6 00:16:30.693521 env[1225]: 2025-09-06 00:16:30.599 [INFO][3601] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.ffaa7996a97ba184064733bc2dd00242903aa5ec47c3c9a433425d263a501e7a" host="localhost" Sep 6 00:16:30.693521 env[1225]: 2025-09-06 00:16:30.630 [INFO][3601] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.ffaa7996a97ba184064733bc2dd00242903aa5ec47c3c9a433425d263a501e7a" host="localhost" Sep 6 00:16:30.693521 env[1225]: 2025-09-06 00:16:30.630 [INFO][3601] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.ffaa7996a97ba184064733bc2dd00242903aa5ec47c3c9a433425d263a501e7a" host="localhost" Sep 6 00:16:30.693521 env[1225]: 2025-09-06 00:16:30.630 [INFO][3601] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:30.693521 env[1225]: 2025-09-06 00:16:30.631 [INFO][3601] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="ffaa7996a97ba184064733bc2dd00242903aa5ec47c3c9a433425d263a501e7a" HandleID="k8s-pod-network.ffaa7996a97ba184064733bc2dd00242903aa5ec47c3c9a433425d263a501e7a" Workload="localhost-k8s-calico--kube--controllers--667977df75--tg4gg-eth0" Sep 6 00:16:30.694588 env[1225]: 2025-09-06 00:16:30.640 [INFO][3560] cni-plugin/k8s.go 418: Populated endpoint ContainerID="ffaa7996a97ba184064733bc2dd00242903aa5ec47c3c9a433425d263a501e7a" Namespace="calico-system" Pod="calico-kube-controllers-667977df75-tg4gg" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--667977df75--tg4gg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--667977df75--tg4gg-eth0", GenerateName:"calico-kube-controllers-667977df75-", Namespace:"calico-system", SelfLink:"", UID:"331a0376-d8b2-4772-9a83-07896fab7cf8", ResourceVersion:"984", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 16, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"667977df75", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-667977df75-tg4gg", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali91c76946a3f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:30.694588 env[1225]: 2025-09-06 00:16:30.640 [INFO][3560] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="ffaa7996a97ba184064733bc2dd00242903aa5ec47c3c9a433425d263a501e7a" Namespace="calico-system" Pod="calico-kube-controllers-667977df75-tg4gg" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--667977df75--tg4gg-eth0" Sep 6 00:16:30.694588 env[1225]: 2025-09-06 00:16:30.642 [INFO][3560] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali91c76946a3f ContainerID="ffaa7996a97ba184064733bc2dd00242903aa5ec47c3c9a433425d263a501e7a" Namespace="calico-system" Pod="calico-kube-controllers-667977df75-tg4gg" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--667977df75--tg4gg-eth0" Sep 6 00:16:30.694588 env[1225]: 2025-09-06 00:16:30.661 [INFO][3560] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="ffaa7996a97ba184064733bc2dd00242903aa5ec47c3c9a433425d263a501e7a" Namespace="calico-system" Pod="calico-kube-controllers-667977df75-tg4gg" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--667977df75--tg4gg-eth0" Sep 6 00:16:30.694588 env[1225]: 2025-09-06 00:16:30.663 [INFO][3560] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="ffaa7996a97ba184064733bc2dd00242903aa5ec47c3c9a433425d263a501e7a" Namespace="calico-system" Pod="calico-kube-controllers-667977df75-tg4gg" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--667977df75--tg4gg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--667977df75--tg4gg-eth0", GenerateName:"calico-kube-controllers-667977df75-", Namespace:"calico-system", SelfLink:"", UID:"331a0376-d8b2-4772-9a83-07896fab7cf8", ResourceVersion:"984", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 16, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"667977df75", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ffaa7996a97ba184064733bc2dd00242903aa5ec47c3c9a433425d263a501e7a", Pod:"calico-kube-controllers-667977df75-tg4gg", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali91c76946a3f", MAC:"2e:d6:41:25:a2:f5", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:30.694588 env[1225]: 2025-09-06 00:16:30.688 [INFO][3560] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="ffaa7996a97ba184064733bc2dd00242903aa5ec47c3c9a433425d263a501e7a" Namespace="calico-system" Pod="calico-kube-controllers-667977df75-tg4gg" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--667977df75--tg4gg-eth0" Sep 6 00:16:30.696000 audit[3695]: AVC avc: denied { write } for pid=3695 comm="tee" name="fd" dev="proc" ino=26818 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 00:16:30.696000 audit[3695]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdf41797d2 a2=241 a3=1b6 items=1 ppid=3686 pid=3695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.696000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Sep 6 00:16:30.708691 env[1225]: time="2025-09-06T00:16:30.706782600Z" level=info msg="StopPodSandbox for \"59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12\"" Sep 6 00:16:30.696000 audit: PATH item=0 name="/dev/fd/63" inode=25569 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:16:30.696000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 00:16:30.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.715000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.715000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.715000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.715000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.715000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.715000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.715000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.716000 audit: BPF prog-id=151 op=LOAD Sep 6 00:16:30.717000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.717000 audit[3665]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=3655 pid=3665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.717000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961356166346331613031343232316461613334663538653135363336 Sep 6 00:16:30.717000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.717000 audit[3665]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001c56b0 a2=3c a3=c items=0 ppid=3655 pid=3665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.717000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961356166346331613031343232316461613334663538653135363336 Sep 6 00:16:30.717000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.717000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.717000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.717000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.717000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.717000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.717000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.717000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.717000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.717000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.717000 audit: BPF prog-id=152 op=LOAD Sep 6 00:16:30.717000 audit[3665]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c59d8 a2=78 a3=c00026bef0 items=0 ppid=3655 pid=3665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.717000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961356166346331613031343232316461613334663538653135363336 Sep 6 00:16:30.718000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.718000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.718000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.718000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.718000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.718000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.718000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.718000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.718000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.718000 audit: BPF prog-id=153 op=LOAD Sep 6 00:16:30.718000 audit[3665]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001c5770 a2=78 a3=c00026bf38 items=0 ppid=3655 pid=3665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.718000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961356166346331613031343232316461613334663538653135363336 Sep 6 00:16:30.719000 audit: BPF prog-id=153 op=UNLOAD Sep 6 00:16:30.719000 audit: BPF prog-id=152 op=UNLOAD Sep 6 00:16:30.719000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.719000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.719000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.719000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.719000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.719000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.719000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.719000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.719000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.719000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.719000 audit: BPF prog-id=154 op=LOAD Sep 6 00:16:30.719000 audit[3665]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c5c30 a2=78 a3=c0003ce348 items=0 ppid=3655 pid=3665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961356166346331613031343232316461613334663538653135363336 Sep 6 00:16:30.725798 systemd-resolved[1178]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 6 00:16:30.736000 audit[3759]: AVC avc: denied { write } for pid=3759 comm="tee" name="fd" dev="proc" ino=27696 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 00:16:30.737614 env[1225]: time="2025-09-06T00:16:30.735479538Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:16:30.737614 env[1225]: time="2025-09-06T00:16:30.735528193Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:16:30.737614 env[1225]: time="2025-09-06T00:16:30.735540878Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:16:30.737614 env[1225]: time="2025-09-06T00:16:30.736006411Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ffaa7996a97ba184064733bc2dd00242903aa5ec47c3c9a433425d263a501e7a pid=3762 runtime=io.containerd.runc.v2 Sep 6 00:16:30.736000 audit[3759]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff26cf77e3 a2=241 a3=1b6 items=1 ppid=3694 pid=3759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.736000 audit: CWD cwd="/etc/service/enabled/cni/log" Sep 6 00:16:30.736000 audit: PATH item=0 name="/dev/fd/63" inode=26823 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:16:30.736000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 00:16:30.793699 systemd[1]: Started cri-containerd-ffaa7996a97ba184064733bc2dd00242903aa5ec47c3c9a433425d263a501e7a.scope. Sep 6 00:16:30.800000 audit[3791]: AVC avc: denied { write } for pid=3791 comm="tee" name="fd" dev="proc" ino=28741 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 00:16:30.809000 audit[3738]: AVC avc: denied { write } for pid=3738 comm="tee" name="fd" dev="proc" ino=25880 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 00:16:30.809000 audit[3738]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffe65057e2 a2=241 a3=1b6 items=1 ppid=3684 pid=3738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.809000 audit: CWD cwd="/etc/service/enabled/bird/log" Sep 6 00:16:30.809000 audit: PATH item=0 name="/dev/fd/63" inode=26822 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:16:30.809000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 00:16:30.800000 audit[3791]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc6259c7e1 a2=241 a3=1b6 items=1 ppid=3700 pid=3791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.800000 audit: CWD cwd="/etc/service/enabled/felix/log" Sep 6 00:16:30.800000 audit: PATH item=0 name="/dev/fd/63" inode=28736 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:16:30.800000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 00:16:30.819386 env[1225]: time="2025-09-06T00:16:30.819333087Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-jqlbh,Uid:e830bd3a-f4af-462b-bf17-815d051633f7,Namespace:kube-system,Attempt:1,} returns sandbox id \"9a5af4c1a014221daa34f58e15636dd4671db8200e0f01dd160f87abe9523b19\"" Sep 6 00:16:30.822839 kubelet[2030]: E0906 00:16:30.821847 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:16:30.830905 env[1225]: time="2025-09-06T00:16:30.830845683Z" level=info msg="CreateContainer within sandbox \"9a5af4c1a014221daa34f58e15636dd4671db8200e0f01dd160f87abe9523b19\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 6 00:16:30.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.846000 audit: BPF prog-id=155 op=LOAD Sep 6 00:16:30.848000 audit[3778]: AVC avc: denied { bpf } for pid=3778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.848000 audit[3778]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3762 pid=3778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.848000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666616137393936613937626131383430363437333362633264643030 Sep 6 00:16:30.848000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.848000 audit[3778]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3762 pid=3778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.848000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666616137393936613937626131383430363437333362633264643030 Sep 6 00:16:30.853000 audit[3778]: AVC avc: denied { bpf } for pid=3778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.853000 audit[3778]: AVC avc: denied { bpf } for pid=3778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.853000 audit[3778]: AVC avc: denied { bpf } for pid=3778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.853000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.853000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.853000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.853000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.853000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.853000 audit[3778]: AVC avc: denied { bpf } for pid=3778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.853000 audit[3778]: AVC avc: denied { bpf } for pid=3778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.853000 audit: BPF prog-id=156 op=LOAD Sep 6 00:16:30.853000 audit[3778]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00038e850 items=0 ppid=3762 pid=3778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666616137393936613937626131383430363437333362633264643030 Sep 6 00:16:30.854000 audit[3778]: AVC avc: denied { bpf } for pid=3778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.854000 audit[3778]: AVC avc: denied { bpf } for pid=3778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.854000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.854000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.854000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.854000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.854000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.854000 audit[3778]: AVC avc: denied { bpf } for pid=3778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.854000 audit[3778]: AVC avc: denied { bpf } for pid=3778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.854000 audit: BPF prog-id=157 op=LOAD Sep 6 00:16:30.854000 audit[3778]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00038e898 items=0 ppid=3762 pid=3778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.854000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666616137393936613937626131383430363437333362633264643030 Sep 6 00:16:30.854000 audit: BPF prog-id=157 op=UNLOAD Sep 6 00:16:30.854000 audit: BPF prog-id=156 op=UNLOAD Sep 6 00:16:30.854000 audit[3778]: AVC avc: denied { bpf } for pid=3778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.854000 audit[3778]: AVC avc: denied { bpf } for pid=3778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.854000 audit[3778]: AVC avc: denied { bpf } for pid=3778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.854000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.854000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.854000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.854000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.854000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.854000 audit[3778]: AVC avc: denied { bpf } for pid=3778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.854000 audit[3778]: AVC avc: denied { bpf } for pid=3778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.854000 audit: BPF prog-id=158 op=LOAD Sep 6 00:16:30.854000 audit[3778]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00038eca8 items=0 ppid=3762 pid=3778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.854000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666616137393936613937626131383430363437333362633264643030 Sep 6 00:16:30.871000 audit[3833]: AVC avc: denied { write } for pid=3833 comm="tee" name="fd" dev="proc" ino=28761 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 00:16:30.870725 systemd-resolved[1178]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 6 00:16:30.871000 audit[3833]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdf9b457d1 a2=241 a3=1b6 items=1 ppid=3702 pid=3833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.871000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Sep 6 00:16:30.871000 audit: PATH item=0 name="/dev/fd/63" inode=26904 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:16:30.871000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 00:16:30.893964 env[1225]: time="2025-09-06T00:16:30.893899723Z" level=info msg="CreateContainer within sandbox \"9a5af4c1a014221daa34f58e15636dd4671db8200e0f01dd160f87abe9523b19\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"1b4d6a8c399fecce270be7c697055b13d2a418eedd31cdb94539fb6e461f4f12\"" Sep 6 00:16:30.895176 env[1225]: time="2025-09-06T00:16:30.895145134Z" level=info msg="StartContainer for \"1b4d6a8c399fecce270be7c697055b13d2a418eedd31cdb94539fb6e461f4f12\"" Sep 6 00:16:30.907000 audit[3822]: AVC avc: denied { write } for pid=3822 comm="tee" name="fd" dev="proc" ino=27711 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 00:16:30.907000 audit[3822]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffcd80277e1 a2=241 a3=1b6 items=1 ppid=3704 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.907000 audit: CWD cwd="/etc/service/enabled/bird6/log" Sep 6 00:16:30.907000 audit: PATH item=0 name="/dev/fd/63" inode=27706 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:16:30.907000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 00:16:30.918000 audit[3829]: AVC avc: denied { write } for pid=3829 comm="tee" name="fd" dev="proc" ino=25926 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 00:16:30.918000 audit[3829]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe901b47e1 a2=241 a3=1b6 items=1 ppid=3717 pid=3829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.918000 audit: CWD cwd="/etc/service/enabled/confd/log" Sep 6 00:16:30.918000 audit: PATH item=0 name="/dev/fd/63" inode=28755 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:16:30.918000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 00:16:30.926371 systemd[1]: Started cri-containerd-1b4d6a8c399fecce270be7c697055b13d2a418eedd31cdb94539fb6e461f4f12.scope. Sep 6 00:16:30.929027 env[1225]: time="2025-09-06T00:16:30.928955595Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-667977df75-tg4gg,Uid:331a0376-d8b2-4772-9a83-07896fab7cf8,Namespace:calico-system,Attempt:1,} returns sandbox id \"ffaa7996a97ba184064733bc2dd00242903aa5ec47c3c9a433425d263a501e7a\"" Sep 6 00:16:30.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.960000 audit: BPF prog-id=159 op=LOAD Sep 6 00:16:30.961000 audit[3847]: AVC avc: denied { bpf } for pid=3847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.961000 audit[3847]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3655 pid=3847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.961000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162346436613863333939666563636532373062653763363937303535 Sep 6 00:16:30.961000 audit[3847]: AVC avc: denied { perfmon } for pid=3847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.961000 audit[3847]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3655 pid=3847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.961000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162346436613863333939666563636532373062653763363937303535 Sep 6 00:16:30.961000 audit[3847]: AVC avc: denied { bpf } for pid=3847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.961000 audit[3847]: AVC avc: denied { bpf } for pid=3847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.961000 audit[3847]: AVC avc: denied { bpf } for pid=3847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.961000 audit[3847]: AVC avc: denied { perfmon } for pid=3847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.961000 audit[3847]: AVC avc: denied { perfmon } for pid=3847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.961000 audit[3847]: AVC avc: denied { perfmon } for pid=3847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.961000 audit[3847]: AVC avc: denied { perfmon } for pid=3847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.961000 audit[3847]: AVC avc: denied { perfmon } for pid=3847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.961000 audit[3847]: AVC avc: denied { bpf } for pid=3847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.961000 audit[3847]: AVC avc: denied { bpf } for pid=3847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.961000 audit: BPF prog-id=160 op=LOAD Sep 6 00:16:30.961000 audit[3847]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000353d40 items=0 ppid=3655 pid=3847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.961000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162346436613863333939666563636532373062653763363937303535 Sep 6 00:16:30.961000 audit[3847]: AVC avc: denied { bpf } for pid=3847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.961000 audit[3847]: AVC avc: denied { bpf } for pid=3847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.961000 audit[3847]: AVC avc: denied { perfmon } for pid=3847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.961000 audit[3847]: AVC avc: denied { perfmon } for pid=3847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.961000 audit[3847]: AVC avc: denied { perfmon } for pid=3847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.961000 audit[3847]: AVC avc: denied { perfmon } for pid=3847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.961000 audit[3847]: AVC avc: denied { perfmon } for pid=3847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.961000 audit[3847]: AVC avc: denied { bpf } for pid=3847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.961000 audit[3847]: AVC avc: denied { bpf } for pid=3847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.961000 audit: BPF prog-id=161 op=LOAD Sep 6 00:16:30.961000 audit[3847]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000353d88 items=0 ppid=3655 pid=3847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.961000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162346436613863333939666563636532373062653763363937303535 Sep 6 00:16:30.961000 audit: BPF prog-id=161 op=UNLOAD Sep 6 00:16:30.961000 audit: BPF prog-id=160 op=UNLOAD Sep 6 00:16:30.962000 audit[3847]: AVC avc: denied { bpf } for pid=3847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.962000 audit[3847]: AVC avc: denied { bpf } for pid=3847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.962000 audit[3847]: AVC avc: denied { bpf } for pid=3847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.962000 audit[3847]: AVC avc: denied { perfmon } for pid=3847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.962000 audit[3847]: AVC avc: denied { perfmon } for pid=3847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.962000 audit[3847]: AVC avc: denied { perfmon } for pid=3847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.962000 audit[3847]: AVC avc: denied { perfmon } for pid=3847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.962000 audit[3847]: AVC avc: denied { perfmon } for pid=3847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.962000 audit[3847]: AVC avc: denied { bpf } for pid=3847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.962000 audit[3847]: AVC avc: denied { bpf } for pid=3847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:30.962000 audit: BPF prog-id=162 op=LOAD Sep 6 00:16:30.962000 audit[3847]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003a2198 items=0 ppid=3655 pid=3847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:30.962000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162346436613863333939666563636532373062653763363937303535 Sep 6 00:16:31.004341 env[1225]: time="2025-09-06T00:16:31.004270612Z" level=info msg="StartContainer for \"1b4d6a8c399fecce270be7c697055b13d2a418eedd31cdb94539fb6e461f4f12\" returns successfully" Sep 6 00:16:31.107000 audit[3628]: AVC avc: denied { getattr } for pid=3628 comm="coredns" path="cgroup:[4026532749]" dev="nsfs" ino=4026532749 scontext=system_u:system_r:svirt_lxc_net_t:s0:c157,c632 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 6 00:16:31.107000 audit[3628]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005a9a8 a2=c000496ac8 a3=0 items=0 ppid=3512 pid=3628 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c157,c632 key=(null) Sep 6 00:16:31.107000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 6 00:16:31.108000 audit[3867]: AVC avc: denied { getattr } for pid=3867 comm="coredns" path="cgroup:[4026532764]" dev="nsfs" ino=4026532764 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c270 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 6 00:16:31.108000 audit[3867]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c0000fc888 a2=c00044b558 a3=0 items=0 ppid=3655 pid=3867 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c270 key=(null) Sep 6 00:16:31.108000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 6 00:16:31.106340 systemd-networkd[1055]: cali9a6c91b5580: Gained IPv6LL Sep 6 00:16:31.168138 env[1225]: 2025-09-06 00:16:30.993 [INFO][3748] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" Sep 6 00:16:31.168138 env[1225]: 2025-09-06 00:16:30.993 [INFO][3748] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" iface="eth0" netns="/var/run/netns/cni-291c8bc0-11b5-cdf8-8bab-15d9efdc006f" Sep 6 00:16:31.168138 env[1225]: 2025-09-06 00:16:30.995 [INFO][3748] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" iface="eth0" netns="/var/run/netns/cni-291c8bc0-11b5-cdf8-8bab-15d9efdc006f" Sep 6 00:16:31.168138 env[1225]: 2025-09-06 00:16:30.996 [INFO][3748] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" iface="eth0" netns="/var/run/netns/cni-291c8bc0-11b5-cdf8-8bab-15d9efdc006f" Sep 6 00:16:31.168138 env[1225]: 2025-09-06 00:16:30.996 [INFO][3748] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" Sep 6 00:16:31.168138 env[1225]: 2025-09-06 00:16:30.996 [INFO][3748] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" Sep 6 00:16:31.168138 env[1225]: 2025-09-06 00:16:31.126 [INFO][3885] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" HandleID="k8s-pod-network.59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" Workload="localhost-k8s-csi--node--driver--pkfnl-eth0" Sep 6 00:16:31.168138 env[1225]: 2025-09-06 00:16:31.130 [INFO][3885] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:31.168138 env[1225]: 2025-09-06 00:16:31.130 [INFO][3885] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:31.168138 env[1225]: 2025-09-06 00:16:31.144 [WARNING][3885] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" HandleID="k8s-pod-network.59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" Workload="localhost-k8s-csi--node--driver--pkfnl-eth0" Sep 6 00:16:31.168138 env[1225]: 2025-09-06 00:16:31.144 [INFO][3885] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" HandleID="k8s-pod-network.59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" Workload="localhost-k8s-csi--node--driver--pkfnl-eth0" Sep 6 00:16:31.168138 env[1225]: 2025-09-06 00:16:31.148 [INFO][3885] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:31.168138 env[1225]: 2025-09-06 00:16:31.156 [INFO][3748] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" Sep 6 00:16:31.169836 env[1225]: time="2025-09-06T00:16:31.169781824Z" level=info msg="TearDown network for sandbox \"59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12\" successfully" Sep 6 00:16:31.170075 env[1225]: time="2025-09-06T00:16:31.169949853Z" level=info msg="StopPodSandbox for \"59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12\" returns successfully" Sep 6 00:16:31.172601 env[1225]: time="2025-09-06T00:16:31.172527139Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-pkfnl,Uid:5fcc5872-6420-4c35-9d81-fbabf8a0c640,Namespace:calico-system,Attempt:1,}" Sep 6 00:16:31.277021 kubelet[2030]: E0906 00:16:31.275733 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:16:31.281401 kubelet[2030]: E0906 00:16:31.280286 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:16:31.329805 kubelet[2030]: I0906 00:16:31.329236 2030 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-88vqh" podStartSLOduration=45.329207682 podStartE2EDuration="45.329207682s" podCreationTimestamp="2025-09-06 00:15:46 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 00:16:31.325514571 +0000 UTC m=+50.919738856" watchObservedRunningTime="2025-09-06 00:16:31.329207682 +0000 UTC m=+50.923431967" Sep 6 00:16:31.363000 audit[3943]: NETFILTER_CFG table=filter:101 family=2 entries=20 op=nft_register_rule pid=3943 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:31.363000 audit[3943]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7fff56e1f2f0 a2=0 a3=7fff56e1f2dc items=0 ppid=2180 pid=3943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.363000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:31.375000 audit[3943]: NETFILTER_CFG table=nat:102 family=2 entries=14 op=nft_register_rule pid=3943 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:31.375000 audit[3943]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7fff56e1f2f0 a2=0 a3=0 items=0 ppid=2180 pid=3943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.375000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:31.455000 audit[3956]: NETFILTER_CFG table=filter:103 family=2 entries=20 op=nft_register_rule pid=3956 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:31.455000 audit[3956]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffedc831b30 a2=0 a3=7ffedc831b1c items=0 ppid=2180 pid=3956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.455000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:31.461000 audit[3956]: NETFILTER_CFG table=nat:104 family=2 entries=14 op=nft_register_rule pid=3956 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:31.461000 audit[3956]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffedc831b30 a2=0 a3=0 items=0 ppid=2180 pid=3956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.461000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:31.492000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.492000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.492000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.492000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.492000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.492000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.492000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.492000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.492000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.492000 audit: BPF prog-id=163 op=LOAD Sep 6 00:16:31.492000 audit[3962]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe6b079b60 a2=98 a3=1fffffffffffffff items=0 ppid=3701 pid=3962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.492000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 6 00:16:31.497000 audit: BPF prog-id=163 op=UNLOAD Sep 6 00:16:31.498000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.498000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.498000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.498000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.498000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.498000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.498000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.498000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.498000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.498000 audit: BPF prog-id=164 op=LOAD Sep 6 00:16:31.498000 audit[3962]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe6b079a40 a2=94 a3=3 items=0 ppid=3701 pid=3962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.498000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 6 00:16:31.510000 audit: BPF prog-id=164 op=UNLOAD Sep 6 00:16:31.510000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.510000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.510000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.510000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.510000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.510000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.510000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.510000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.510000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.510000 audit: BPF prog-id=165 op=LOAD Sep 6 00:16:31.510000 audit[3962]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe6b079a80 a2=94 a3=7ffe6b079c60 items=0 ppid=3701 pid=3962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.510000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 6 00:16:31.513000 audit: BPF prog-id=165 op=UNLOAD Sep 6 00:16:31.513000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.513000 audit[3962]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffe6b079b50 a2=50 a3=a000000085 items=0 ppid=3701 pid=3962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.513000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 6 00:16:31.516621 systemd[1]: run-netns-cni\x2d291c8bc0\x2d11b5\x2dcdf8\x2d8bab\x2d15d9efdc006f.mount: Deactivated successfully. Sep 6 00:16:31.519000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.519000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.519000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.519000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.519000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.519000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.519000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.519000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.519000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.519000 audit: BPF prog-id=166 op=LOAD Sep 6 00:16:31.519000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffde9ae7de0 a2=98 a3=3 items=0 ppid=3701 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.519000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:16:31.520000 audit: BPF prog-id=166 op=UNLOAD Sep 6 00:16:31.522000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.522000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.522000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.522000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.522000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.522000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.522000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.522000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.522000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.522000 audit: BPF prog-id=167 op=LOAD Sep 6 00:16:31.522000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffde9ae7bd0 a2=94 a3=54428f items=0 ppid=3701 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.522000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:16:31.528000 audit: BPF prog-id=167 op=UNLOAD Sep 6 00:16:31.528000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.528000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.528000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.528000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.528000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.528000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.528000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.528000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.528000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.528000 audit: BPF prog-id=168 op=LOAD Sep 6 00:16:31.528000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffde9ae7c00 a2=94 a3=2 items=0 ppid=3701 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.528000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:16:31.533000 audit: BPF prog-id=168 op=UNLOAD Sep 6 00:16:31.547968 systemd-networkd[1055]: cali8aa260c569e: Link UP Sep 6 00:16:31.555839 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 6 00:16:31.559279 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali8aa260c569e: link becomes ready Sep 6 00:16:31.558314 systemd-networkd[1055]: cali8aa260c569e: Gained carrier Sep 6 00:16:31.581645 kubelet[2030]: I0906 00:16:31.580866 2030 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-jqlbh" podStartSLOduration=45.580836088 podStartE2EDuration="45.580836088s" podCreationTimestamp="2025-09-06 00:15:46 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 00:16:31.363118477 +0000 UTC m=+50.957342772" watchObservedRunningTime="2025-09-06 00:16:31.580836088 +0000 UTC m=+51.175060363" Sep 6 00:16:31.586325 env[1225]: 2025-09-06 00:16:31.294 [INFO][3918] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Sep 6 00:16:31.586325 env[1225]: 2025-09-06 00:16:31.331 [INFO][3918] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--pkfnl-eth0 csi-node-driver- calico-system 5fcc5872-6420-4c35-9d81-fbabf8a0c640 1010 0 2025-09-06 00:16:01 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:6c96d95cc7 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-pkfnl eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali8aa260c569e [] [] }} ContainerID="d37113f5bb32f68e4fe0dcf7d794d701b116fbbda18c39d445f9e46064fa4f17" Namespace="calico-system" Pod="csi-node-driver-pkfnl" WorkloadEndpoint="localhost-k8s-csi--node--driver--pkfnl-" Sep 6 00:16:31.586325 env[1225]: 2025-09-06 00:16:31.331 [INFO][3918] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="d37113f5bb32f68e4fe0dcf7d794d701b116fbbda18c39d445f9e46064fa4f17" Namespace="calico-system" Pod="csi-node-driver-pkfnl" WorkloadEndpoint="localhost-k8s-csi--node--driver--pkfnl-eth0" Sep 6 00:16:31.586325 env[1225]: 2025-09-06 00:16:31.390 [INFO][3941] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d37113f5bb32f68e4fe0dcf7d794d701b116fbbda18c39d445f9e46064fa4f17" HandleID="k8s-pod-network.d37113f5bb32f68e4fe0dcf7d794d701b116fbbda18c39d445f9e46064fa4f17" Workload="localhost-k8s-csi--node--driver--pkfnl-eth0" Sep 6 00:16:31.586325 env[1225]: 2025-09-06 00:16:31.391 [INFO][3941] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="d37113f5bb32f68e4fe0dcf7d794d701b116fbbda18c39d445f9e46064fa4f17" HandleID="k8s-pod-network.d37113f5bb32f68e4fe0dcf7d794d701b116fbbda18c39d445f9e46064fa4f17" Workload="localhost-k8s-csi--node--driver--pkfnl-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000122e30), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-pkfnl", "timestamp":"2025-09-06 00:16:31.390870275 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:16:31.586325 env[1225]: 2025-09-06 00:16:31.391 [INFO][3941] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:31.586325 env[1225]: 2025-09-06 00:16:31.391 [INFO][3941] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:31.586325 env[1225]: 2025-09-06 00:16:31.391 [INFO][3941] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 6 00:16:31.586325 env[1225]: 2025-09-06 00:16:31.405 [INFO][3941] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.d37113f5bb32f68e4fe0dcf7d794d701b116fbbda18c39d445f9e46064fa4f17" host="localhost" Sep 6 00:16:31.586325 env[1225]: 2025-09-06 00:16:31.423 [INFO][3941] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 6 00:16:31.586325 env[1225]: 2025-09-06 00:16:31.444 [INFO][3941] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 6 00:16:31.586325 env[1225]: 2025-09-06 00:16:31.453 [INFO][3941] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 6 00:16:31.586325 env[1225]: 2025-09-06 00:16:31.463 [INFO][3941] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 6 00:16:31.586325 env[1225]: 2025-09-06 00:16:31.463 [INFO][3941] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.d37113f5bb32f68e4fe0dcf7d794d701b116fbbda18c39d445f9e46064fa4f17" host="localhost" Sep 6 00:16:31.586325 env[1225]: 2025-09-06 00:16:31.474 [INFO][3941] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.d37113f5bb32f68e4fe0dcf7d794d701b116fbbda18c39d445f9e46064fa4f17 Sep 6 00:16:31.586325 env[1225]: 2025-09-06 00:16:31.497 [INFO][3941] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.d37113f5bb32f68e4fe0dcf7d794d701b116fbbda18c39d445f9e46064fa4f17" host="localhost" Sep 6 00:16:31.586325 env[1225]: 2025-09-06 00:16:31.537 [INFO][3941] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.d37113f5bb32f68e4fe0dcf7d794d701b116fbbda18c39d445f9e46064fa4f17" host="localhost" Sep 6 00:16:31.586325 env[1225]: 2025-09-06 00:16:31.537 [INFO][3941] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.d37113f5bb32f68e4fe0dcf7d794d701b116fbbda18c39d445f9e46064fa4f17" host="localhost" Sep 6 00:16:31.586325 env[1225]: 2025-09-06 00:16:31.537 [INFO][3941] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:31.586325 env[1225]: 2025-09-06 00:16:31.537 [INFO][3941] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="d37113f5bb32f68e4fe0dcf7d794d701b116fbbda18c39d445f9e46064fa4f17" HandleID="k8s-pod-network.d37113f5bb32f68e4fe0dcf7d794d701b116fbbda18c39d445f9e46064fa4f17" Workload="localhost-k8s-csi--node--driver--pkfnl-eth0" Sep 6 00:16:31.591784 env[1225]: 2025-09-06 00:16:31.545 [INFO][3918] cni-plugin/k8s.go 418: Populated endpoint ContainerID="d37113f5bb32f68e4fe0dcf7d794d701b116fbbda18c39d445f9e46064fa4f17" Namespace="calico-system" Pod="csi-node-driver-pkfnl" WorkloadEndpoint="localhost-k8s-csi--node--driver--pkfnl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--pkfnl-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"5fcc5872-6420-4c35-9d81-fbabf8a0c640", ResourceVersion:"1010", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 16, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-pkfnl", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali8aa260c569e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:31.591784 env[1225]: 2025-09-06 00:16:31.545 [INFO][3918] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="d37113f5bb32f68e4fe0dcf7d794d701b116fbbda18c39d445f9e46064fa4f17" Namespace="calico-system" Pod="csi-node-driver-pkfnl" WorkloadEndpoint="localhost-k8s-csi--node--driver--pkfnl-eth0" Sep 6 00:16:31.591784 env[1225]: 2025-09-06 00:16:31.545 [INFO][3918] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali8aa260c569e ContainerID="d37113f5bb32f68e4fe0dcf7d794d701b116fbbda18c39d445f9e46064fa4f17" Namespace="calico-system" Pod="csi-node-driver-pkfnl" WorkloadEndpoint="localhost-k8s-csi--node--driver--pkfnl-eth0" Sep 6 00:16:31.591784 env[1225]: 2025-09-06 00:16:31.547 [INFO][3918] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="d37113f5bb32f68e4fe0dcf7d794d701b116fbbda18c39d445f9e46064fa4f17" Namespace="calico-system" Pod="csi-node-driver-pkfnl" WorkloadEndpoint="localhost-k8s-csi--node--driver--pkfnl-eth0" Sep 6 00:16:31.591784 env[1225]: 2025-09-06 00:16:31.550 [INFO][3918] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="d37113f5bb32f68e4fe0dcf7d794d701b116fbbda18c39d445f9e46064fa4f17" Namespace="calico-system" Pod="csi-node-driver-pkfnl" WorkloadEndpoint="localhost-k8s-csi--node--driver--pkfnl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--pkfnl-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"5fcc5872-6420-4c35-9d81-fbabf8a0c640", ResourceVersion:"1010", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 16, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d37113f5bb32f68e4fe0dcf7d794d701b116fbbda18c39d445f9e46064fa4f17", Pod:"csi-node-driver-pkfnl", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali8aa260c569e", MAC:"56:b3:cf:a5:b7:a5", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:31.591784 env[1225]: 2025-09-06 00:16:31.579 [INFO][3918] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="d37113f5bb32f68e4fe0dcf7d794d701b116fbbda18c39d445f9e46064fa4f17" Namespace="calico-system" Pod="csi-node-driver-pkfnl" WorkloadEndpoint="localhost-k8s-csi--node--driver--pkfnl-eth0" Sep 6 00:16:31.632619 env[1225]: time="2025-09-06T00:16:31.632128767Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:16:31.632619 env[1225]: time="2025-09-06T00:16:31.632268961Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:16:31.632619 env[1225]: time="2025-09-06T00:16:31.632301485Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:16:31.634059 env[1225]: time="2025-09-06T00:16:31.632578347Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d37113f5bb32f68e4fe0dcf7d794d701b116fbbda18c39d445f9e46064fa4f17 pid=3978 runtime=io.containerd.runc.v2 Sep 6 00:16:31.679517 systemd[1]: Started cri-containerd-d37113f5bb32f68e4fe0dcf7d794d701b116fbbda18c39d445f9e46064fa4f17.scope. Sep 6 00:16:31.708310 env[1225]: time="2025-09-06T00:16:31.708200683Z" level=info msg="StopPodSandbox for \"6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59\"" Sep 6 00:16:31.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.749000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.749000 audit: BPF prog-id=169 op=LOAD Sep 6 00:16:31.754000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.754000 audit[3988]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3978 pid=3988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.754000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433373131336635626233326636386534666530646366376437393464 Sep 6 00:16:31.754000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.754000 audit[3988]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3978 pid=3988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.754000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433373131336635626233326636386534666530646366376437393464 Sep 6 00:16:31.754000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.754000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.754000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.754000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.754000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.754000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.754000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.754000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.754000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.754000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.754000 audit: BPF prog-id=170 op=LOAD Sep 6 00:16:31.754000 audit[3988]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00029e6e0 items=0 ppid=3978 pid=3988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.754000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433373131336635626233326636386534666530646366376437393464 Sep 6 00:16:31.764000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.764000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.764000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.764000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.764000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.764000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.764000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.764000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.764000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.764000 audit: BPF prog-id=171 op=LOAD Sep 6 00:16:31.764000 audit[3988]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00029e728 items=0 ppid=3978 pid=3988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.764000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433373131336635626233326636386534666530646366376437393464 Sep 6 00:16:31.764000 audit: BPF prog-id=171 op=UNLOAD Sep 6 00:16:31.764000 audit: BPF prog-id=170 op=UNLOAD Sep 6 00:16:31.764000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.764000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.764000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.764000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.764000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.764000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.764000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.764000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.764000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.764000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.764000 audit: BPF prog-id=172 op=LOAD Sep 6 00:16:31.764000 audit[3988]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00029eb38 items=0 ppid=3978 pid=3988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.764000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433373131336635626233326636386534666530646366376437393464 Sep 6 00:16:31.790128 systemd-resolved[1178]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 6 00:16:31.816000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.816000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.816000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.816000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.816000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.816000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.816000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.816000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.816000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.816000 audit: BPF prog-id=173 op=LOAD Sep 6 00:16:31.816000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffde9ae7ac0 a2=94 a3=1 items=0 ppid=3701 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.816000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:16:31.830000 audit: BPF prog-id=173 op=UNLOAD Sep 6 00:16:31.830000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.830000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffde9ae7b90 a2=50 a3=7ffde9ae7c70 items=0 ppid=3701 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.830000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:16:31.854000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.854000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffde9ae7ad0 a2=28 a3=0 items=0 ppid=3701 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.854000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:16:31.854000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.854000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffde9ae7b00 a2=28 a3=0 items=0 ppid=3701 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.854000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.855000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffde9ae7a10 a2=28 a3=0 items=0 ppid=3701 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.855000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.855000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffde9ae7b20 a2=28 a3=0 items=0 ppid=3701 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.855000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.855000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffde9ae7b00 a2=28 a3=0 items=0 ppid=3701 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.855000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.855000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffde9ae7af0 a2=28 a3=0 items=0 ppid=3701 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.855000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.855000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffde9ae7b20 a2=28 a3=0 items=0 ppid=3701 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.855000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.855000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffde9ae7b00 a2=28 a3=0 items=0 ppid=3701 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.855000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.855000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffde9ae7b20 a2=28 a3=0 items=0 ppid=3701 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.855000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.855000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffde9ae7af0 a2=28 a3=0 items=0 ppid=3701 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.855000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.855000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffde9ae7b60 a2=28 a3=0 items=0 ppid=3701 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.855000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.855000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffde9ae7910 a2=50 a3=1 items=0 ppid=3701 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.855000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.855000 audit: BPF prog-id=174 op=LOAD Sep 6 00:16:31.855000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffde9ae7910 a2=94 a3=5 items=0 ppid=3701 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.855000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:16:31.855000 audit: BPF prog-id=174 op=UNLOAD Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.855000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffde9ae79c0 a2=50 a3=1 items=0 ppid=3701 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.855000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.855000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffde9ae7ae0 a2=4 a3=38 items=0 ppid=3701 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.855000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.855000 audit[3963]: AVC avc: denied { confidentiality } for pid=3963 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 00:16:31.861743 env[1225]: time="2025-09-06T00:16:31.861522659Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-pkfnl,Uid:5fcc5872-6420-4c35-9d81-fbabf8a0c640,Namespace:calico-system,Attempt:1,} returns sandbox id \"d37113f5bb32f68e4fe0dcf7d794d701b116fbbda18c39d445f9e46064fa4f17\"" Sep 6 00:16:31.855000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffde9ae7b30 a2=94 a3=6 items=0 ppid=3701 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.855000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:16:31.862000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.862000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.862000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.862000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.862000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.862000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.862000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.862000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.862000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.862000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.862000 audit[3963]: AVC avc: denied { confidentiality } for pid=3963 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 00:16:31.862000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffde9ae72e0 a2=94 a3=88 items=0 ppid=3701 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.862000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:16:31.862000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.862000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.862000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.862000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.862000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.862000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.862000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.862000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.862000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.862000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.862000 audit[3963]: AVC avc: denied { confidentiality } for pid=3963 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 00:16:31.862000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffde9ae72e0 a2=94 a3=88 items=0 ppid=3701 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.862000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:16:31.878110 systemd-networkd[1055]: calid5729bcb61a: Gained IPv6LL Sep 6 00:16:31.878440 systemd-networkd[1055]: cali91c76946a3f: Gained IPv6LL Sep 6 00:16:31.885000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.885000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.885000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.885000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.885000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.885000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.885000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.885000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.885000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.885000 audit: BPF prog-id=175 op=LOAD Sep 6 00:16:31.885000 audit[4030]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd7db7c3c0 a2=98 a3=1999999999999999 items=0 ppid=3701 pid=4030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.885000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 6 00:16:31.886000 audit: BPF prog-id=175 op=UNLOAD Sep 6 00:16:31.886000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.886000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.886000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.886000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.886000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.886000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.886000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.886000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.886000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.886000 audit: BPF prog-id=176 op=LOAD Sep 6 00:16:31.886000 audit[4030]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd7db7c2a0 a2=94 a3=ffff items=0 ppid=3701 pid=4030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.886000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 6 00:16:31.886000 audit: BPF prog-id=176 op=UNLOAD Sep 6 00:16:31.886000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.886000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.886000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.886000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.886000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.886000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.886000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.886000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.886000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:31.886000 audit: BPF prog-id=177 op=LOAD Sep 6 00:16:31.886000 audit[4030]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd7db7c2e0 a2=94 a3=7ffd7db7c4c0 items=0 ppid=3701 pid=4030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:31.886000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 6 00:16:31.886000 audit: BPF prog-id=177 op=UNLOAD Sep 6 00:16:31.947155 systemd-networkd[1055]: calieab4fc827c7: Gained IPv6LL Sep 6 00:16:32.041756 env[1225]: 2025-09-06 00:16:31.895 [INFO][4015] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" Sep 6 00:16:32.041756 env[1225]: 2025-09-06 00:16:31.896 [INFO][4015] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" iface="eth0" netns="/var/run/netns/cni-4d19a454-674f-308b-15a7-62fbfbb297c3" Sep 6 00:16:32.041756 env[1225]: 2025-09-06 00:16:31.896 [INFO][4015] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" iface="eth0" netns="/var/run/netns/cni-4d19a454-674f-308b-15a7-62fbfbb297c3" Sep 6 00:16:32.041756 env[1225]: 2025-09-06 00:16:31.909 [INFO][4015] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" iface="eth0" netns="/var/run/netns/cni-4d19a454-674f-308b-15a7-62fbfbb297c3" Sep 6 00:16:32.041756 env[1225]: 2025-09-06 00:16:31.909 [INFO][4015] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" Sep 6 00:16:32.041756 env[1225]: 2025-09-06 00:16:31.910 [INFO][4015] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" Sep 6 00:16:32.041756 env[1225]: 2025-09-06 00:16:31.996 [INFO][4038] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" HandleID="k8s-pod-network.6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" Workload="localhost-k8s-goldmane--54d579b49d--tdxp6-eth0" Sep 6 00:16:32.041756 env[1225]: 2025-09-06 00:16:32.010 [INFO][4038] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:32.041756 env[1225]: 2025-09-06 00:16:32.010 [INFO][4038] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:32.041756 env[1225]: 2025-09-06 00:16:32.022 [WARNING][4038] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" HandleID="k8s-pod-network.6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" Workload="localhost-k8s-goldmane--54d579b49d--tdxp6-eth0" Sep 6 00:16:32.041756 env[1225]: 2025-09-06 00:16:32.022 [INFO][4038] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" HandleID="k8s-pod-network.6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" Workload="localhost-k8s-goldmane--54d579b49d--tdxp6-eth0" Sep 6 00:16:32.041756 env[1225]: 2025-09-06 00:16:32.028 [INFO][4038] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:32.041756 env[1225]: 2025-09-06 00:16:32.034 [INFO][4015] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" Sep 6 00:16:32.052650 systemd[1]: run-netns-cni\x2d4d19a454\x2d674f\x2d308b\x2d15a7\x2d62fbfbb297c3.mount: Deactivated successfully. Sep 6 00:16:32.056178 env[1225]: time="2025-09-06T00:16:32.056120659Z" level=info msg="TearDown network for sandbox \"6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59\" successfully" Sep 6 00:16:32.056302 env[1225]: time="2025-09-06T00:16:32.056275632Z" level=info msg="StopPodSandbox for \"6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59\" returns successfully" Sep 6 00:16:32.058079 env[1225]: time="2025-09-06T00:16:32.057938565Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-tdxp6,Uid:3e73d97e-f57b-4ce7-9a19-70a0052142ea,Namespace:calico-system,Attempt:1,}" Sep 6 00:16:32.189820 systemd-networkd[1055]: vxlan.calico: Link UP Sep 6 00:16:32.189833 systemd-networkd[1055]: vxlan.calico: Gained carrier Sep 6 00:16:32.268000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.268000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.268000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.268000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.268000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.268000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.268000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.268000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.290197 kubelet[2030]: E0906 00:16:32.289336 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:16:32.290197 kubelet[2030]: E0906 00:16:32.289742 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:16:32.268000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.268000 audit: BPF prog-id=178 op=LOAD Sep 6 00:16:32.268000 audit[4087]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe26c93ba0 a2=98 a3=0 items=0 ppid=3701 pid=4087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.268000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:16:32.286000 audit: BPF prog-id=178 op=UNLOAD Sep 6 00:16:32.286000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.286000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.286000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.286000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.286000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.286000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.286000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.286000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.286000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.286000 audit: BPF prog-id=179 op=LOAD Sep 6 00:16:32.286000 audit[4087]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe26c939b0 a2=94 a3=54428f items=0 ppid=3701 pid=4087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.286000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:16:32.304000 audit: BPF prog-id=179 op=UNLOAD Sep 6 00:16:32.304000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.304000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.304000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.304000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.304000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.304000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.304000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.304000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.304000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.304000 audit: BPF prog-id=180 op=LOAD Sep 6 00:16:32.304000 audit[4087]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe26c939e0 a2=94 a3=2 items=0 ppid=3701 pid=4087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.304000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:16:32.331000 audit: BPF prog-id=180 op=UNLOAD Sep 6 00:16:32.331000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.331000 audit[4087]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffe26c938b0 a2=28 a3=0 items=0 ppid=3701 pid=4087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.331000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:16:32.331000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.331000 audit[4087]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe26c938e0 a2=28 a3=0 items=0 ppid=3701 pid=4087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.331000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:16:32.331000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.331000 audit[4087]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe26c937f0 a2=28 a3=0 items=0 ppid=3701 pid=4087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.331000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:16:32.331000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.331000 audit[4087]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffe26c93900 a2=28 a3=0 items=0 ppid=3701 pid=4087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.331000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:16:32.331000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.331000 audit[4087]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffe26c938e0 a2=28 a3=0 items=0 ppid=3701 pid=4087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.331000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:16:32.331000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.331000 audit[4087]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffe26c938d0 a2=28 a3=0 items=0 ppid=3701 pid=4087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.331000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:16:32.331000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.331000 audit[4087]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffe26c93900 a2=28 a3=0 items=0 ppid=3701 pid=4087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.331000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:16:32.331000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.331000 audit[4087]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe26c938e0 a2=28 a3=0 items=0 ppid=3701 pid=4087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.331000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:16:32.331000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.331000 audit[4087]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe26c93900 a2=28 a3=0 items=0 ppid=3701 pid=4087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.331000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:16:32.331000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.331000 audit[4087]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe26c938d0 a2=28 a3=0 items=0 ppid=3701 pid=4087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.331000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:16:32.331000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.331000 audit[4087]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffe26c93940 a2=28 a3=0 items=0 ppid=3701 pid=4087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.331000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:16:32.331000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.331000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.331000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.331000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.331000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.331000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.331000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.331000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.331000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.331000 audit: BPF prog-id=181 op=LOAD Sep 6 00:16:32.331000 audit[4087]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffe26c937b0 a2=94 a3=0 items=0 ppid=3701 pid=4087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.331000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:16:32.333000 audit: BPF prog-id=181 op=UNLOAD Sep 6 00:16:32.336000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.336000 audit[4087]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffe26c937a0 a2=50 a3=2800 items=0 ppid=3701 pid=4087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.336000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:16:32.336000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.336000 audit[4087]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7ffe26c937a0 a2=50 a3=2800 items=0 ppid=3701 pid=4087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.336000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:16:32.337000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.337000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.337000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.337000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.337000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.337000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.337000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.337000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.337000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.342922 env[1225]: time="2025-09-06T00:16:32.342872245Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:32.337000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.337000 audit: BPF prog-id=182 op=LOAD Sep 6 00:16:32.337000 audit[4087]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffe26c92fc0 a2=94 a3=2 items=0 ppid=3701 pid=4087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.337000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:16:32.342000 audit: BPF prog-id=182 op=UNLOAD Sep 6 00:16:32.342000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.342000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.342000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.342000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.342000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.342000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.342000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.342000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.342000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.342000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.342000 audit: BPF prog-id=183 op=LOAD Sep 6 00:16:32.342000 audit[4087]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffe26c930c0 a2=94 a3=30 items=0 ppid=3701 pid=4087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.342000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:16:32.355598 env[1225]: time="2025-09-06T00:16:32.355428364Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9a4eedeed4a531acefb7f5d0a1b7e3856b1a9a24d9e7d25deef2134d7a734c2d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:32.361722 env[1225]: time="2025-09-06T00:16:32.361665943Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:32.363000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.363000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.363000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.363000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.363000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.363000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.363000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.363000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.363000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.363000 audit: BPF prog-id=184 op=LOAD Sep 6 00:16:32.363000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc54d7c440 a2=98 a3=0 items=0 ppid=3701 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.363000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:16:32.363000 audit: BPF prog-id=184 op=UNLOAD Sep 6 00:16:32.363000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.363000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.363000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.363000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.363000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.363000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.363000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.363000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.363000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.363000 audit: BPF prog-id=185 op=LOAD Sep 6 00:16:32.363000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc54d7c230 a2=94 a3=54428f items=0 ppid=3701 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.363000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:16:32.364000 audit: BPF prog-id=185 op=UNLOAD Sep 6 00:16:32.364000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.364000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.364000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.364000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.364000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.364000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.364000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.364000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.364000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.364000 audit: BPF prog-id=186 op=LOAD Sep 6 00:16:32.364000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc54d7c260 a2=94 a3=2 items=0 ppid=3701 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.364000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:16:32.364000 audit: BPF prog-id=186 op=UNLOAD Sep 6 00:16:32.367242 env[1225]: time="2025-09-06T00:16:32.367195498Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:e7113761fc7633d515882f0d48b5c8d0b8e62f3f9d34823f2ee194bb16d2ec44,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:32.367733 env[1225]: time="2025-09-06T00:16:32.367696058Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\" returns image reference \"sha256:9a4eedeed4a531acefb7f5d0a1b7e3856b1a9a24d9e7d25deef2134d7a734c2d\"" Sep 6 00:16:32.369359 env[1225]: time="2025-09-06T00:16:32.369304834Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\"" Sep 6 00:16:32.372356 env[1225]: time="2025-09-06T00:16:32.372307347Z" level=info msg="CreateContainer within sandbox \"9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Sep 6 00:16:32.386000 audit[4103]: NETFILTER_CFG table=filter:105 family=2 entries=17 op=nft_register_rule pid=4103 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:32.386000 audit[4103]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd75442e30 a2=0 a3=7ffd75442e1c items=0 ppid=2180 pid=4103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.386000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:32.392000 audit[4103]: NETFILTER_CFG table=nat:106 family=2 entries=35 op=nft_register_chain pid=4103 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:32.392000 audit[4103]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffd75442e30 a2=0 a3=7ffd75442e1c items=0 ppid=2180 pid=4103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.392000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:32.438181 env[1225]: time="2025-09-06T00:16:32.438103958Z" level=info msg="CreateContainer within sandbox \"9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"c3d032c627b69ae595911dd1f215a03a1d8a2ee1cd0703855ff8e742550c8994\"" Sep 6 00:16:32.440013 env[1225]: time="2025-09-06T00:16:32.439959448Z" level=info msg="StartContainer for \"c3d032c627b69ae595911dd1f215a03a1d8a2ee1cd0703855ff8e742550c8994\"" Sep 6 00:16:32.479906 systemd[1]: Started cri-containerd-c3d032c627b69ae595911dd1f215a03a1d8a2ee1cd0703855ff8e742550c8994.scope. Sep 6 00:16:32.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.535000 audit: BPF prog-id=187 op=LOAD Sep 6 00:16:32.536000 audit[4110]: AVC avc: denied { bpf } for pid=4110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.536000 audit[4110]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3476 pid=4110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333643033326336323762363961653539353931316464316632313561 Sep 6 00:16:32.536000 audit[4110]: AVC avc: denied { perfmon } for pid=4110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.536000 audit[4110]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=3476 pid=4110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333643033326336323762363961653539353931316464316632313561 Sep 6 00:16:32.536000 audit[4110]: AVC avc: denied { bpf } for pid=4110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.536000 audit[4110]: AVC avc: denied { bpf } for pid=4110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.536000 audit[4110]: AVC avc: denied { bpf } for pid=4110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.536000 audit[4110]: AVC avc: denied { perfmon } for pid=4110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.536000 audit[4110]: AVC avc: denied { perfmon } for pid=4110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.536000 audit[4110]: AVC avc: denied { perfmon } for pid=4110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.536000 audit[4110]: AVC avc: denied { perfmon } for pid=4110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.536000 audit[4110]: AVC avc: denied { perfmon } for pid=4110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.536000 audit[4110]: AVC avc: denied { bpf } for pid=4110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.536000 audit[4110]: AVC avc: denied { bpf } for pid=4110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.536000 audit: BPF prog-id=188 op=LOAD Sep 6 00:16:32.536000 audit[4110]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00037ced0 items=0 ppid=3476 pid=4110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333643033326336323762363961653539353931316464316632313561 Sep 6 00:16:32.550000 audit[4110]: AVC avc: denied { bpf } for pid=4110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.550000 audit[4110]: AVC avc: denied { bpf } for pid=4110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.550000 audit[4110]: AVC avc: denied { perfmon } for pid=4110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.550000 audit[4110]: AVC avc: denied { perfmon } for pid=4110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.550000 audit[4110]: AVC avc: denied { perfmon } for pid=4110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.550000 audit[4110]: AVC avc: denied { perfmon } for pid=4110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.550000 audit[4110]: AVC avc: denied { perfmon } for pid=4110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.550000 audit[4110]: AVC avc: denied { bpf } for pid=4110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.564786 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 6 00:16:32.564936 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali191c32adfa0: link becomes ready Sep 6 00:16:32.563750 systemd-networkd[1055]: cali191c32adfa0: Link UP Sep 6 00:16:32.563970 systemd-networkd[1055]: cali191c32adfa0: Gained carrier Sep 6 00:16:32.550000 audit[4110]: AVC avc: denied { bpf } for pid=4110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.550000 audit: BPF prog-id=189 op=LOAD Sep 6 00:16:32.550000 audit[4110]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00037cf18 items=0 ppid=3476 pid=4110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.550000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333643033326336323762363961653539353931316464316632313561 Sep 6 00:16:32.571000 audit: BPF prog-id=189 op=UNLOAD Sep 6 00:16:32.576000 audit: BPF prog-id=188 op=UNLOAD Sep 6 00:16:32.576000 audit[4110]: AVC avc: denied { bpf } for pid=4110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.576000 audit[4110]: AVC avc: denied { bpf } for pid=4110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.576000 audit[4110]: AVC avc: denied { bpf } for pid=4110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.576000 audit[4110]: AVC avc: denied { perfmon } for pid=4110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.576000 audit[4110]: AVC avc: denied { perfmon } for pid=4110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.576000 audit[4110]: AVC avc: denied { perfmon } for pid=4110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.576000 audit[4110]: AVC avc: denied { perfmon } for pid=4110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.576000 audit[4110]: AVC avc: denied { perfmon } for pid=4110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.576000 audit[4110]: AVC avc: denied { bpf } for pid=4110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.576000 audit[4110]: AVC avc: denied { bpf } for pid=4110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.576000 audit: BPF prog-id=190 op=LOAD Sep 6 00:16:32.576000 audit[4110]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00037d328 items=0 ppid=3476 pid=4110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333643033326336323762363961653539353931316464316632313561 Sep 6 00:16:32.617785 env[1225]: 2025-09-06 00:16:32.244 [INFO][4055] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--54d579b49d--tdxp6-eth0 goldmane-54d579b49d- calico-system 3e73d97e-f57b-4ce7-9a19-70a0052142ea 1027 0 2025-09-06 00:16:00 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:54d579b49d projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-54d579b49d-tdxp6 eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali191c32adfa0 [] [] }} ContainerID="212472866f0ee4f17ccb2b7d850f004f1f7bd8fb9cd1dbef717125927f7a7cd5" Namespace="calico-system" Pod="goldmane-54d579b49d-tdxp6" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--tdxp6-" Sep 6 00:16:32.617785 env[1225]: 2025-09-06 00:16:32.244 [INFO][4055] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="212472866f0ee4f17ccb2b7d850f004f1f7bd8fb9cd1dbef717125927f7a7cd5" Namespace="calico-system" Pod="goldmane-54d579b49d-tdxp6" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--tdxp6-eth0" Sep 6 00:16:32.617785 env[1225]: 2025-09-06 00:16:32.379 [INFO][4081] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="212472866f0ee4f17ccb2b7d850f004f1f7bd8fb9cd1dbef717125927f7a7cd5" HandleID="k8s-pod-network.212472866f0ee4f17ccb2b7d850f004f1f7bd8fb9cd1dbef717125927f7a7cd5" Workload="localhost-k8s-goldmane--54d579b49d--tdxp6-eth0" Sep 6 00:16:32.617785 env[1225]: 2025-09-06 00:16:32.379 [INFO][4081] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="212472866f0ee4f17ccb2b7d850f004f1f7bd8fb9cd1dbef717125927f7a7cd5" HandleID="k8s-pod-network.212472866f0ee4f17ccb2b7d850f004f1f7bd8fb9cd1dbef717125927f7a7cd5" Workload="localhost-k8s-goldmane--54d579b49d--tdxp6-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002c9e10), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-54d579b49d-tdxp6", "timestamp":"2025-09-06 00:16:32.379439237 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:16:32.617785 env[1225]: 2025-09-06 00:16:32.379 [INFO][4081] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:32.617785 env[1225]: 2025-09-06 00:16:32.379 [INFO][4081] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:32.617785 env[1225]: 2025-09-06 00:16:32.379 [INFO][4081] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 6 00:16:32.617785 env[1225]: 2025-09-06 00:16:32.412 [INFO][4081] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.212472866f0ee4f17ccb2b7d850f004f1f7bd8fb9cd1dbef717125927f7a7cd5" host="localhost" Sep 6 00:16:32.617785 env[1225]: 2025-09-06 00:16:32.436 [INFO][4081] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 6 00:16:32.617785 env[1225]: 2025-09-06 00:16:32.465 [INFO][4081] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 6 00:16:32.617785 env[1225]: 2025-09-06 00:16:32.476 [INFO][4081] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 6 00:16:32.617785 env[1225]: 2025-09-06 00:16:32.499 [INFO][4081] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 6 00:16:32.617785 env[1225]: 2025-09-06 00:16:32.499 [INFO][4081] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.212472866f0ee4f17ccb2b7d850f004f1f7bd8fb9cd1dbef717125927f7a7cd5" host="localhost" Sep 6 00:16:32.617785 env[1225]: 2025-09-06 00:16:32.515 [INFO][4081] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.212472866f0ee4f17ccb2b7d850f004f1f7bd8fb9cd1dbef717125927f7a7cd5 Sep 6 00:16:32.617785 env[1225]: 2025-09-06 00:16:32.527 [INFO][4081] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.212472866f0ee4f17ccb2b7d850f004f1f7bd8fb9cd1dbef717125927f7a7cd5" host="localhost" Sep 6 00:16:32.617785 env[1225]: 2025-09-06 00:16:32.544 [INFO][4081] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.212472866f0ee4f17ccb2b7d850f004f1f7bd8fb9cd1dbef717125927f7a7cd5" host="localhost" Sep 6 00:16:32.617785 env[1225]: 2025-09-06 00:16:32.544 [INFO][4081] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.212472866f0ee4f17ccb2b7d850f004f1f7bd8fb9cd1dbef717125927f7a7cd5" host="localhost" Sep 6 00:16:32.617785 env[1225]: 2025-09-06 00:16:32.545 [INFO][4081] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:32.617785 env[1225]: 2025-09-06 00:16:32.545 [INFO][4081] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="212472866f0ee4f17ccb2b7d850f004f1f7bd8fb9cd1dbef717125927f7a7cd5" HandleID="k8s-pod-network.212472866f0ee4f17ccb2b7d850f004f1f7bd8fb9cd1dbef717125927f7a7cd5" Workload="localhost-k8s-goldmane--54d579b49d--tdxp6-eth0" Sep 6 00:16:32.618700 env[1225]: 2025-09-06 00:16:32.554 [INFO][4055] cni-plugin/k8s.go 418: Populated endpoint ContainerID="212472866f0ee4f17ccb2b7d850f004f1f7bd8fb9cd1dbef717125927f7a7cd5" Namespace="calico-system" Pod="goldmane-54d579b49d-tdxp6" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--tdxp6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--54d579b49d--tdxp6-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"3e73d97e-f57b-4ce7-9a19-70a0052142ea", ResourceVersion:"1027", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 16, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-54d579b49d-tdxp6", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali191c32adfa0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:32.618700 env[1225]: 2025-09-06 00:16:32.555 [INFO][4055] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="212472866f0ee4f17ccb2b7d850f004f1f7bd8fb9cd1dbef717125927f7a7cd5" Namespace="calico-system" Pod="goldmane-54d579b49d-tdxp6" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--tdxp6-eth0" Sep 6 00:16:32.618700 env[1225]: 2025-09-06 00:16:32.555 [INFO][4055] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali191c32adfa0 ContainerID="212472866f0ee4f17ccb2b7d850f004f1f7bd8fb9cd1dbef717125927f7a7cd5" Namespace="calico-system" Pod="goldmane-54d579b49d-tdxp6" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--tdxp6-eth0" Sep 6 00:16:32.618700 env[1225]: 2025-09-06 00:16:32.568 [INFO][4055] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="212472866f0ee4f17ccb2b7d850f004f1f7bd8fb9cd1dbef717125927f7a7cd5" Namespace="calico-system" Pod="goldmane-54d579b49d-tdxp6" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--tdxp6-eth0" Sep 6 00:16:32.618700 env[1225]: 2025-09-06 00:16:32.572 [INFO][4055] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="212472866f0ee4f17ccb2b7d850f004f1f7bd8fb9cd1dbef717125927f7a7cd5" Namespace="calico-system" Pod="goldmane-54d579b49d-tdxp6" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--tdxp6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--54d579b49d--tdxp6-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"3e73d97e-f57b-4ce7-9a19-70a0052142ea", ResourceVersion:"1027", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 16, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"212472866f0ee4f17ccb2b7d850f004f1f7bd8fb9cd1dbef717125927f7a7cd5", Pod:"goldmane-54d579b49d-tdxp6", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali191c32adfa0", MAC:"1e:cc:1a:64:ab:93", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:32.618700 env[1225]: 2025-09-06 00:16:32.610 [INFO][4055] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="212472866f0ee4f17ccb2b7d850f004f1f7bd8fb9cd1dbef717125927f7a7cd5" Namespace="calico-system" Pod="goldmane-54d579b49d-tdxp6" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--tdxp6-eth0" Sep 6 00:16:32.644000 audit[1911]: AVC avc: denied { watch } for pid=1911 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:16:32.644000 audit[1911]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c010aea510 a2=fc6 a3=0 items=0 ppid=1734 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 key=(null) Sep 6 00:16:32.644000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 6 00:16:32.644000 audit[1911]: AVC avc: denied { watch } for pid=1911 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:16:32.644000 audit[1911]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c011b7c8d0 a2=fc6 a3=0 items=0 ppid=1734 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 key=(null) Sep 6 00:16:32.644000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 6 00:16:32.647000 audit[1911]: AVC avc: denied { watch } for pid=1911 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:16:32.647000 audit[1911]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=72 a1=c01101e620 a2=fc6 a3=0 items=0 ppid=1734 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 key=(null) Sep 6 00:16:32.647000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 6 00:16:32.647000 audit[1911]: AVC avc: denied { watch } for pid=1911 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:16:32.647000 audit[1911]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c010c7cc90 a2=fc6 a3=0 items=0 ppid=1734 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 key=(null) Sep 6 00:16:32.647000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 6 00:16:32.660000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.660000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.660000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.660000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.660000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.660000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.660000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.660000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.660000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.660000 audit: BPF prog-id=191 op=LOAD Sep 6 00:16:32.665000 audit[1911]: AVC avc: denied { watch } for pid=1911 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:16:32.665000 audit[1911]: AVC avc: denied { watch } for pid=1911 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:16:32.665000 audit[1911]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c010c7ccf0 a2=fc6 a3=0 items=0 ppid=1734 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 key=(null) Sep 6 00:16:32.665000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 6 00:16:32.665000 audit[1911]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c010cfc4c0 a2=fc6 a3=0 items=0 ppid=1734 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 key=(null) Sep 6 00:16:32.665000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 6 00:16:32.660000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc54d7c120 a2=94 a3=1 items=0 ppid=3701 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.660000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:16:32.676000 audit: BPF prog-id=191 op=UNLOAD Sep 6 00:16:32.676000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.676000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffc54d7c1f0 a2=50 a3=7ffc54d7c2d0 items=0 ppid=3701 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.676000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:16:32.687018 env[1225]: time="2025-09-06T00:16:32.683850664Z" level=info msg="StartContainer for \"c3d032c627b69ae595911dd1f215a03a1d8a2ee1cd0703855ff8e742550c8994\" returns successfully" Sep 6 00:16:32.691029 env[1225]: time="2025-09-06T00:16:32.690864471Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:16:32.691029 env[1225]: time="2025-09-06T00:16:32.690965689Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:16:32.691310 env[1225]: time="2025-09-06T00:16:32.691002030Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:16:32.691310 env[1225]: time="2025-09-06T00:16:32.691221820Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/212472866f0ee4f17ccb2b7d850f004f1f7bd8fb9cd1dbef717125927f7a7cd5 pid=4146 runtime=io.containerd.runc.v2 Sep 6 00:16:32.709880 env[1225]: time="2025-09-06T00:16:32.709805528Z" level=info msg="StopPodSandbox for \"c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0\"" Sep 6 00:16:32.712788 env[1225]: time="2025-09-06T00:16:32.710355865Z" level=info msg="StopPodSandbox for \"1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e\"" Sep 6 00:16:32.715000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.715000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc54d7c130 a2=28 a3=0 items=0 ppid=3701 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.715000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:16:32.715000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.715000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc54d7c160 a2=28 a3=0 items=0 ppid=3701 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.715000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:16:32.715000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.715000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc54d7c070 a2=28 a3=0 items=0 ppid=3701 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.715000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:16:32.715000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.715000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc54d7c180 a2=28 a3=0 items=0 ppid=3701 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.715000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:16:32.715000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.715000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc54d7c160 a2=28 a3=0 items=0 ppid=3701 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.715000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:16:32.715000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.715000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc54d7c150 a2=28 a3=0 items=0 ppid=3701 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.715000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:16:32.715000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.715000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc54d7c180 a2=28 a3=0 items=0 ppid=3701 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.715000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:16:32.719000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.719000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc54d7c160 a2=28 a3=0 items=0 ppid=3701 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.719000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:16:32.719000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.719000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc54d7c180 a2=28 a3=0 items=0 ppid=3701 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.719000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:16:32.719000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.719000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc54d7c150 a2=28 a3=0 items=0 ppid=3701 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.719000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:16:32.719000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.719000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc54d7c1c0 a2=28 a3=0 items=0 ppid=3701 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.719000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:16:32.719000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.719000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc54d7bf70 a2=50 a3=1 items=0 ppid=3701 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.719000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:16:32.719000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.719000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.719000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.719000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.719000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.719000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.719000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.719000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.719000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.719000 audit: BPF prog-id=192 op=LOAD Sep 6 00:16:32.719000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc54d7bf70 a2=94 a3=5 items=0 ppid=3701 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.719000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:16:32.731000 audit: BPF prog-id=192 op=UNLOAD Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc54d7c020 a2=50 a3=1 items=0 ppid=3701 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.731000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffc54d7c140 a2=4 a3=38 items=0 ppid=3701 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.731000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { confidentiality } for pid=4098 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 00:16:32.731000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc54d7c190 a2=94 a3=6 items=0 ppid=3701 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.731000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { confidentiality } for pid=4098 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 00:16:32.731000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc54d7b940 a2=94 a3=88 items=0 ppid=3701 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.731000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { confidentiality } for pid=4098 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 00:16:32.731000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc54d7b940 a2=94 a3=88 items=0 ppid=3701 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.731000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:16:32.731000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.731000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffc54d7d370 a2=10 a3=208 items=0 ppid=3701 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.731000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:16:32.736000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.736000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffc54d7d210 a2=10 a3=3 items=0 ppid=3701 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.736000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:16:32.736000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.736000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffc54d7d1b0 a2=10 a3=3 items=0 ppid=3701 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.736000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:16:32.736000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.736000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffc54d7d1b0 a2=10 a3=7 items=0 ppid=3701 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.736000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:16:32.776345 systemd[1]: Started cri-containerd-212472866f0ee4f17ccb2b7d850f004f1f7bd8fb9cd1dbef717125927f7a7cd5.scope. Sep 6 00:16:32.791208 systemd[1]: run-containerd-runc-k8s.io-212472866f0ee4f17ccb2b7d850f004f1f7bd8fb9cd1dbef717125927f7a7cd5-runc.BbMYsf.mount: Deactivated successfully. Sep 6 00:16:32.796000 audit: BPF prog-id=183 op=UNLOAD Sep 6 00:16:32.800604 kernel: kauditd_printk_skb: 1081 callbacks suppressed Sep 6 00:16:32.800767 kernel: audit: type=1334 audit(1757117792.796:1293): prog-id=183 op=UNLOAD Sep 6 00:16:32.846665 kernel: audit: type=1400 audit(1757117792.828:1294): avc: denied { search } for pid=4120 comm="nginx" name="crypto" dev="proc" ino=29095 scontext=system_u:system_r:svirt_lxc_net_t:s0:c342,c365 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Sep 6 00:16:32.854137 kernel: audit: type=1300 audit(1757117792.828:1294): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f5590224728 a2=0 a3=0 items=0 ppid=3476 pid=4120 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c342,c365 key=(null) Sep 6 00:16:32.854267 kernel: audit: type=1327 audit(1757117792.828:1294): proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Sep 6 00:16:32.828000 audit[4120]: AVC avc: denied { search } for pid=4120 comm="nginx" name="crypto" dev="proc" ino=29095 scontext=system_u:system_r:svirt_lxc_net_t:s0:c342,c365 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Sep 6 00:16:32.828000 audit[4120]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f5590224728 a2=0 a3=0 items=0 ppid=3476 pid=4120 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c342,c365 key=(null) Sep 6 00:16:32.828000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Sep 6 00:16:32.887946 kernel: audit: type=1400 audit(1757117792.868:1295): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.888126 kernel: audit: type=1400 audit(1757117792.868:1296): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.888191 kernel: audit: type=1400 audit(1757117792.868:1297): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.894905 kernel: audit: type=1400 audit(1757117792.868:1298): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.906157 kernel: audit: type=1400 audit(1757117792.868:1299): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.906311 kernel: audit: type=1400 audit(1757117792.868:1300): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.882000 audit: BPF prog-id=193 op=LOAD Sep 6 00:16:32.884000 audit[4156]: AVC avc: denied { bpf } for pid=4156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.884000 audit[4156]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4146 pid=4156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.884000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231323437323836366630656534663137636362326237643835306630 Sep 6 00:16:32.884000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.884000 audit[4156]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4146 pid=4156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.884000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231323437323836366630656534663137636362326237643835306630 Sep 6 00:16:32.884000 audit[4156]: AVC avc: denied { bpf } for pid=4156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.884000 audit[4156]: AVC avc: denied { bpf } for pid=4156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.884000 audit[4156]: AVC avc: denied { bpf } for pid=4156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.884000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.884000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.884000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.884000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.884000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.884000 audit[4156]: AVC avc: denied { bpf } for pid=4156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.884000 audit[4156]: AVC avc: denied { bpf } for pid=4156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.884000 audit: BPF prog-id=194 op=LOAD Sep 6 00:16:32.884000 audit[4156]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000219200 items=0 ppid=4146 pid=4156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.884000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231323437323836366630656534663137636362326237643835306630 Sep 6 00:16:32.908000 audit[4156]: AVC avc: denied { bpf } for pid=4156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.908000 audit[4156]: AVC avc: denied { bpf } for pid=4156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.908000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.908000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.908000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.908000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.908000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.908000 audit[4156]: AVC avc: denied { bpf } for pid=4156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.908000 audit[4156]: AVC avc: denied { bpf } for pid=4156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.908000 audit: BPF prog-id=195 op=LOAD Sep 6 00:16:32.908000 audit[4156]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000219248 items=0 ppid=4146 pid=4156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.908000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231323437323836366630656534663137636362326237643835306630 Sep 6 00:16:32.913000 audit: BPF prog-id=195 op=UNLOAD Sep 6 00:16:32.916000 audit: BPF prog-id=194 op=UNLOAD Sep 6 00:16:32.916000 audit[4156]: AVC avc: denied { bpf } for pid=4156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.916000 audit[4156]: AVC avc: denied { bpf } for pid=4156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.916000 audit[4156]: AVC avc: denied { bpf } for pid=4156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.916000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.916000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.916000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.916000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.916000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.916000 audit[4156]: AVC avc: denied { bpf } for pid=4156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.916000 audit[4156]: AVC avc: denied { bpf } for pid=4156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:32.916000 audit: BPF prog-id=196 op=LOAD Sep 6 00:16:32.916000 audit[4156]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000219658 items=0 ppid=4146 pid=4156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:32.916000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231323437323836366630656534663137636362326237643835306630 Sep 6 00:16:32.937486 systemd-resolved[1178]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 6 00:16:33.008523 env[1225]: time="2025-09-06T00:16:33.008333614Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-tdxp6,Uid:3e73d97e-f57b-4ce7-9a19-70a0052142ea,Namespace:calico-system,Attempt:1,} returns sandbox id \"212472866f0ee4f17ccb2b7d850f004f1f7bd8fb9cd1dbef717125927f7a7cd5\"" Sep 6 00:16:33.084188 env[1225]: 2025-09-06 00:16:32.940 [INFO][4189] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" Sep 6 00:16:33.084188 env[1225]: 2025-09-06 00:16:32.940 [INFO][4189] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" iface="eth0" netns="/var/run/netns/cni-6d9e790e-9e61-9c1f-2353-8b2db996e804" Sep 6 00:16:33.084188 env[1225]: 2025-09-06 00:16:32.940 [INFO][4189] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" iface="eth0" netns="/var/run/netns/cni-6d9e790e-9e61-9c1f-2353-8b2db996e804" Sep 6 00:16:33.084188 env[1225]: 2025-09-06 00:16:32.941 [INFO][4189] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" iface="eth0" netns="/var/run/netns/cni-6d9e790e-9e61-9c1f-2353-8b2db996e804" Sep 6 00:16:33.084188 env[1225]: 2025-09-06 00:16:32.941 [INFO][4189] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" Sep 6 00:16:33.084188 env[1225]: 2025-09-06 00:16:32.941 [INFO][4189] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" Sep 6 00:16:33.084188 env[1225]: 2025-09-06 00:16:33.041 [INFO][4230] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" HandleID="k8s-pod-network.c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" Workload="localhost-k8s-calico--apiserver--77f65f4854--prqvv-eth0" Sep 6 00:16:33.084188 env[1225]: 2025-09-06 00:16:33.042 [INFO][4230] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:33.084188 env[1225]: 2025-09-06 00:16:33.042 [INFO][4230] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:33.084188 env[1225]: 2025-09-06 00:16:33.061 [WARNING][4230] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" HandleID="k8s-pod-network.c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" Workload="localhost-k8s-calico--apiserver--77f65f4854--prqvv-eth0" Sep 6 00:16:33.084188 env[1225]: 2025-09-06 00:16:33.061 [INFO][4230] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" HandleID="k8s-pod-network.c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" Workload="localhost-k8s-calico--apiserver--77f65f4854--prqvv-eth0" Sep 6 00:16:33.084188 env[1225]: 2025-09-06 00:16:33.066 [INFO][4230] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:33.084188 env[1225]: 2025-09-06 00:16:33.075 [INFO][4189] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" Sep 6 00:16:33.089288 env[1225]: time="2025-09-06T00:16:33.087100126Z" level=info msg="TearDown network for sandbox \"c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0\" successfully" Sep 6 00:16:33.089502 env[1225]: time="2025-09-06T00:16:33.089464075Z" level=info msg="StopPodSandbox for \"c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0\" returns successfully" Sep 6 00:16:33.091848 systemd[1]: run-netns-cni\x2d6d9e790e\x2d9e61\x2d9c1f\x2d2353\x2d8b2db996e804.mount: Deactivated successfully. Sep 6 00:16:33.095273 env[1225]: time="2025-09-06T00:16:33.092810674Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-77f65f4854-prqvv,Uid:bd47af89-ef90-4d72-a1f0-b0a4126e6c60,Namespace:calico-apiserver,Attempt:1,}" Sep 6 00:16:33.131636 env[1225]: 2025-09-06 00:16:32.950 [INFO][4188] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" Sep 6 00:16:33.131636 env[1225]: 2025-09-06 00:16:32.950 [INFO][4188] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" iface="eth0" netns="/var/run/netns/cni-507f1d02-1dd3-0f63-115e-b6b6037a8e1a" Sep 6 00:16:33.131636 env[1225]: 2025-09-06 00:16:32.950 [INFO][4188] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" iface="eth0" netns="/var/run/netns/cni-507f1d02-1dd3-0f63-115e-b6b6037a8e1a" Sep 6 00:16:33.131636 env[1225]: 2025-09-06 00:16:32.956 [INFO][4188] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" iface="eth0" netns="/var/run/netns/cni-507f1d02-1dd3-0f63-115e-b6b6037a8e1a" Sep 6 00:16:33.131636 env[1225]: 2025-09-06 00:16:32.956 [INFO][4188] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" Sep 6 00:16:33.131636 env[1225]: 2025-09-06 00:16:32.957 [INFO][4188] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" Sep 6 00:16:33.131636 env[1225]: 2025-09-06 00:16:33.050 [INFO][4238] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" HandleID="k8s-pod-network.1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" Workload="localhost-k8s-calico--apiserver--77f65f4854--jkr5j-eth0" Sep 6 00:16:33.131636 env[1225]: 2025-09-06 00:16:33.051 [INFO][4238] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:33.131636 env[1225]: 2025-09-06 00:16:33.066 [INFO][4238] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:33.131636 env[1225]: 2025-09-06 00:16:33.095 [WARNING][4238] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" HandleID="k8s-pod-network.1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" Workload="localhost-k8s-calico--apiserver--77f65f4854--jkr5j-eth0" Sep 6 00:16:33.131636 env[1225]: 2025-09-06 00:16:33.096 [INFO][4238] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" HandleID="k8s-pod-network.1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" Workload="localhost-k8s-calico--apiserver--77f65f4854--jkr5j-eth0" Sep 6 00:16:33.131636 env[1225]: 2025-09-06 00:16:33.106 [INFO][4238] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:33.131636 env[1225]: 2025-09-06 00:16:33.126 [INFO][4188] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" Sep 6 00:16:33.138379 env[1225]: time="2025-09-06T00:16:33.138310035Z" level=info msg="TearDown network for sandbox \"1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e\" successfully" Sep 6 00:16:33.138515 env[1225]: time="2025-09-06T00:16:33.138484797Z" level=info msg="StopPodSandbox for \"1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e\" returns successfully" Sep 6 00:16:33.145676 env[1225]: time="2025-09-06T00:16:33.145609858Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-77f65f4854-jkr5j,Uid:32c9d655-95c5-436b-adcd-e3fe02fbc713,Namespace:calico-apiserver,Attempt:1,}" Sep 6 00:16:33.160000 audit[4271]: NETFILTER_CFG table=mangle:107 family=2 entries=16 op=nft_register_chain pid=4271 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:16:33.160000 audit[4271]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffcf8eca8c0 a2=0 a3=7ffcf8eca8ac items=0 ppid=3701 pid=4271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:33.160000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:16:33.163142 systemd-networkd[1055]: cali8aa260c569e: Gained IPv6LL Sep 6 00:16:33.218000 audit[4269]: NETFILTER_CFG table=nat:108 family=2 entries=15 op=nft_register_chain pid=4269 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:16:33.218000 audit[4269]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffe6dd36420 a2=0 a3=7ffe6dd3640c items=0 ppid=3701 pid=4269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:33.218000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:16:33.231000 audit[4270]: NETFILTER_CFG table=raw:109 family=2 entries=21 op=nft_register_chain pid=4270 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:16:33.231000 audit[4270]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffcbd664a90 a2=0 a3=7ffcbd664a7c items=0 ppid=3701 pid=4270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:33.231000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:16:33.318242 kubelet[2030]: E0906 00:16:33.316697 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:16:33.322232 kubelet[2030]: E0906 00:16:33.299114 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:16:33.232000 audit[4272]: NETFILTER_CFG table=filter:110 family=2 entries=214 op=nft_register_chain pid=4272 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:16:33.232000 audit[4272]: SYSCALL arch=c000003e syscall=46 success=yes exit=124040 a0=3 a1=7ffdf29ad3c0 a2=0 a3=5638585fd000 items=0 ppid=3701 pid=4272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:33.232000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:16:33.452000 audit[4328]: NETFILTER_CFG table=filter:111 family=2 entries=14 op=nft_register_rule pid=4328 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:33.452000 audit[4328]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffec606d8a0 a2=0 a3=7ffec606d88c items=0 ppid=2180 pid=4328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:33.452000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:33.473000 audit[4327]: NETFILTER_CFG table=filter:112 family=2 entries=56 op=nft_register_chain pid=4327 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:16:33.473000 audit[4327]: SYSCALL arch=c000003e syscall=46 success=yes exit=28728 a0=3 a1=7ffd479668e0 a2=0 a3=7ffd479668cc items=0 ppid=3701 pid=4327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:33.473000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:16:33.499000 audit[4328]: NETFILTER_CFG table=nat:113 family=2 entries=56 op=nft_register_chain pid=4328 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:33.499000 audit[4328]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffec606d8a0 a2=0 a3=7ffec606d88c items=0 ppid=2180 pid=4328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:33.499000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:33.517281 systemd[1]: run-netns-cni\x2d507f1d02\x2d1dd3\x2d0f63\x2d115e\x2db6b6037a8e1a.mount: Deactivated successfully. Sep 6 00:16:33.623679 systemd-networkd[1055]: cali7b9019a0275: Link UP Sep 6 00:16:33.632584 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 6 00:16:33.632723 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali7b9019a0275: link becomes ready Sep 6 00:16:33.633006 systemd-networkd[1055]: cali7b9019a0275: Gained carrier Sep 6 00:16:33.675367 env[1225]: 2025-09-06 00:16:33.387 [INFO][4292] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--77f65f4854--jkr5j-eth0 calico-apiserver-77f65f4854- calico-apiserver 32c9d655-95c5-436b-adcd-e3fe02fbc713 1054 0 2025-09-06 00:15:57 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:77f65f4854 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-77f65f4854-jkr5j eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali7b9019a0275 [] [] }} ContainerID="b223ad4db057a55ee23f0cfdcc4865ef480e21d8897abac6c282ef659145d149" Namespace="calico-apiserver" Pod="calico-apiserver-77f65f4854-jkr5j" WorkloadEndpoint="localhost-k8s-calico--apiserver--77f65f4854--jkr5j-" Sep 6 00:16:33.675367 env[1225]: 2025-09-06 00:16:33.388 [INFO][4292] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b223ad4db057a55ee23f0cfdcc4865ef480e21d8897abac6c282ef659145d149" Namespace="calico-apiserver" Pod="calico-apiserver-77f65f4854-jkr5j" WorkloadEndpoint="localhost-k8s-calico--apiserver--77f65f4854--jkr5j-eth0" Sep 6 00:16:33.675367 env[1225]: 2025-09-06 00:16:33.484 [INFO][4314] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b223ad4db057a55ee23f0cfdcc4865ef480e21d8897abac6c282ef659145d149" HandleID="k8s-pod-network.b223ad4db057a55ee23f0cfdcc4865ef480e21d8897abac6c282ef659145d149" Workload="localhost-k8s-calico--apiserver--77f65f4854--jkr5j-eth0" Sep 6 00:16:33.675367 env[1225]: 2025-09-06 00:16:33.485 [INFO][4314] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b223ad4db057a55ee23f0cfdcc4865ef480e21d8897abac6c282ef659145d149" HandleID="k8s-pod-network.b223ad4db057a55ee23f0cfdcc4865ef480e21d8897abac6c282ef659145d149" Workload="localhost-k8s-calico--apiserver--77f65f4854--jkr5j-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0005121f0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-77f65f4854-jkr5j", "timestamp":"2025-09-06 00:16:33.484925258 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:16:33.675367 env[1225]: 2025-09-06 00:16:33.485 [INFO][4314] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:33.675367 env[1225]: 2025-09-06 00:16:33.485 [INFO][4314] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:33.675367 env[1225]: 2025-09-06 00:16:33.485 [INFO][4314] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 6 00:16:33.675367 env[1225]: 2025-09-06 00:16:33.506 [INFO][4314] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.b223ad4db057a55ee23f0cfdcc4865ef480e21d8897abac6c282ef659145d149" host="localhost" Sep 6 00:16:33.675367 env[1225]: 2025-09-06 00:16:33.520 [INFO][4314] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 6 00:16:33.675367 env[1225]: 2025-09-06 00:16:33.538 [INFO][4314] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 6 00:16:33.675367 env[1225]: 2025-09-06 00:16:33.548 [INFO][4314] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 6 00:16:33.675367 env[1225]: 2025-09-06 00:16:33.559 [INFO][4314] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 6 00:16:33.675367 env[1225]: 2025-09-06 00:16:33.559 [INFO][4314] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.b223ad4db057a55ee23f0cfdcc4865ef480e21d8897abac6c282ef659145d149" host="localhost" Sep 6 00:16:33.675367 env[1225]: 2025-09-06 00:16:33.570 [INFO][4314] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.b223ad4db057a55ee23f0cfdcc4865ef480e21d8897abac6c282ef659145d149 Sep 6 00:16:33.675367 env[1225]: 2025-09-06 00:16:33.585 [INFO][4314] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.b223ad4db057a55ee23f0cfdcc4865ef480e21d8897abac6c282ef659145d149" host="localhost" Sep 6 00:16:33.675367 env[1225]: 2025-09-06 00:16:33.603 [INFO][4314] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.b223ad4db057a55ee23f0cfdcc4865ef480e21d8897abac6c282ef659145d149" host="localhost" Sep 6 00:16:33.675367 env[1225]: 2025-09-06 00:16:33.604 [INFO][4314] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.b223ad4db057a55ee23f0cfdcc4865ef480e21d8897abac6c282ef659145d149" host="localhost" Sep 6 00:16:33.675367 env[1225]: 2025-09-06 00:16:33.610 [INFO][4314] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:33.675367 env[1225]: 2025-09-06 00:16:33.611 [INFO][4314] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="b223ad4db057a55ee23f0cfdcc4865ef480e21d8897abac6c282ef659145d149" HandleID="k8s-pod-network.b223ad4db057a55ee23f0cfdcc4865ef480e21d8897abac6c282ef659145d149" Workload="localhost-k8s-calico--apiserver--77f65f4854--jkr5j-eth0" Sep 6 00:16:33.677170 env[1225]: 2025-09-06 00:16:33.618 [INFO][4292] cni-plugin/k8s.go 418: Populated endpoint ContainerID="b223ad4db057a55ee23f0cfdcc4865ef480e21d8897abac6c282ef659145d149" Namespace="calico-apiserver" Pod="calico-apiserver-77f65f4854-jkr5j" WorkloadEndpoint="localhost-k8s-calico--apiserver--77f65f4854--jkr5j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--77f65f4854--jkr5j-eth0", GenerateName:"calico-apiserver-77f65f4854-", Namespace:"calico-apiserver", SelfLink:"", UID:"32c9d655-95c5-436b-adcd-e3fe02fbc713", ResourceVersion:"1054", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 15, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"77f65f4854", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-77f65f4854-jkr5j", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali7b9019a0275", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:33.677170 env[1225]: 2025-09-06 00:16:33.618 [INFO][4292] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="b223ad4db057a55ee23f0cfdcc4865ef480e21d8897abac6c282ef659145d149" Namespace="calico-apiserver" Pod="calico-apiserver-77f65f4854-jkr5j" WorkloadEndpoint="localhost-k8s-calico--apiserver--77f65f4854--jkr5j-eth0" Sep 6 00:16:33.677170 env[1225]: 2025-09-06 00:16:33.619 [INFO][4292] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali7b9019a0275 ContainerID="b223ad4db057a55ee23f0cfdcc4865ef480e21d8897abac6c282ef659145d149" Namespace="calico-apiserver" Pod="calico-apiserver-77f65f4854-jkr5j" WorkloadEndpoint="localhost-k8s-calico--apiserver--77f65f4854--jkr5j-eth0" Sep 6 00:16:33.677170 env[1225]: 2025-09-06 00:16:33.629 [INFO][4292] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b223ad4db057a55ee23f0cfdcc4865ef480e21d8897abac6c282ef659145d149" Namespace="calico-apiserver" Pod="calico-apiserver-77f65f4854-jkr5j" WorkloadEndpoint="localhost-k8s-calico--apiserver--77f65f4854--jkr5j-eth0" Sep 6 00:16:33.677170 env[1225]: 2025-09-06 00:16:33.637 [INFO][4292] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="b223ad4db057a55ee23f0cfdcc4865ef480e21d8897abac6c282ef659145d149" Namespace="calico-apiserver" Pod="calico-apiserver-77f65f4854-jkr5j" WorkloadEndpoint="localhost-k8s-calico--apiserver--77f65f4854--jkr5j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--77f65f4854--jkr5j-eth0", GenerateName:"calico-apiserver-77f65f4854-", Namespace:"calico-apiserver", SelfLink:"", UID:"32c9d655-95c5-436b-adcd-e3fe02fbc713", ResourceVersion:"1054", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 15, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"77f65f4854", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b223ad4db057a55ee23f0cfdcc4865ef480e21d8897abac6c282ef659145d149", Pod:"calico-apiserver-77f65f4854-jkr5j", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali7b9019a0275", MAC:"da:5d:43:df:7d:76", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:33.677170 env[1225]: 2025-09-06 00:16:33.664 [INFO][4292] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="b223ad4db057a55ee23f0cfdcc4865ef480e21d8897abac6c282ef659145d149" Namespace="calico-apiserver" Pod="calico-apiserver-77f65f4854-jkr5j" WorkloadEndpoint="localhost-k8s-calico--apiserver--77f65f4854--jkr5j-eth0" Sep 6 00:16:33.725334 env[1225]: time="2025-09-06T00:16:33.725228547Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:16:33.723000 audit[4351]: NETFILTER_CFG table=filter:114 family=2 entries=66 op=nft_register_chain pid=4351 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:16:33.723000 audit[4351]: SYSCALL arch=c000003e syscall=46 success=yes exit=32944 a0=3 a1=7ffe084c0d20 a2=0 a3=7ffe084c0d0c items=0 ppid=3701 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:33.723000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:16:33.725842 env[1225]: time="2025-09-06T00:16:33.725798571Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:16:33.725997 env[1225]: time="2025-09-06T00:16:33.725947272Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:16:33.744095 env[1225]: time="2025-09-06T00:16:33.743685561Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b223ad4db057a55ee23f0cfdcc4865ef480e21d8897abac6c282ef659145d149 pid=4350 runtime=io.containerd.runc.v2 Sep 6 00:16:33.770098 systemd-networkd[1055]: calid4295291798: Link UP Sep 6 00:16:33.771618 systemd[1]: run-containerd-runc-k8s.io-b223ad4db057a55ee23f0cfdcc4865ef480e21d8897abac6c282ef659145d149-runc.BaeT7L.mount: Deactivated successfully. Sep 6 00:16:33.787365 systemd[1]: Started cri-containerd-b223ad4db057a55ee23f0cfdcc4865ef480e21d8897abac6c282ef659145d149.scope. Sep 6 00:16:33.811030 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calid4295291798: link becomes ready Sep 6 00:16:33.811252 systemd-networkd[1055]: calid4295291798: Gained carrier Sep 6 00:16:33.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.823000 audit: BPF prog-id=197 op=LOAD Sep 6 00:16:33.824000 audit[4360]: AVC avc: denied { bpf } for pid=4360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.824000 audit[4360]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4350 pid=4360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:33.824000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232323361643464623035376135356565323366306366646363343836 Sep 6 00:16:33.824000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.824000 audit[4360]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4350 pid=4360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:33.824000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232323361643464623035376135356565323366306366646363343836 Sep 6 00:16:33.824000 audit[4360]: AVC avc: denied { bpf } for pid=4360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.824000 audit[4360]: AVC avc: denied { bpf } for pid=4360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.824000 audit[4360]: AVC avc: denied { bpf } for pid=4360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.824000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.824000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.824000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.824000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.824000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.824000 audit[4360]: AVC avc: denied { bpf } for pid=4360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.824000 audit[4360]: AVC avc: denied { bpf } for pid=4360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.824000 audit: BPF prog-id=198 op=LOAD Sep 6 00:16:33.824000 audit[4360]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00021cae0 items=0 ppid=4350 pid=4360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:33.824000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232323361643464623035376135356565323366306366646363343836 Sep 6 00:16:33.827000 audit[4360]: AVC avc: denied { bpf } for pid=4360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.827000 audit[4360]: AVC avc: denied { bpf } for pid=4360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.827000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.827000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.827000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.827000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.827000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.827000 audit[4360]: AVC avc: denied { bpf } for pid=4360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.827000 audit[4360]: AVC avc: denied { bpf } for pid=4360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.827000 audit: BPF prog-id=199 op=LOAD Sep 6 00:16:33.827000 audit[4360]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00021cb28 items=0 ppid=4350 pid=4360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:33.827000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232323361643464623035376135356565323366306366646363343836 Sep 6 00:16:33.827000 audit: BPF prog-id=199 op=UNLOAD Sep 6 00:16:33.827000 audit: BPF prog-id=198 op=UNLOAD Sep 6 00:16:33.827000 audit[4360]: AVC avc: denied { bpf } for pid=4360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.827000 audit[4360]: AVC avc: denied { bpf } for pid=4360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.827000 audit[4360]: AVC avc: denied { bpf } for pid=4360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.827000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.827000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.827000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.827000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.827000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.827000 audit[4360]: AVC avc: denied { bpf } for pid=4360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.827000 audit[4360]: AVC avc: denied { bpf } for pid=4360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.827000 audit: BPF prog-id=200 op=LOAD Sep 6 00:16:33.827000 audit[4360]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00021cf38 items=0 ppid=4350 pid=4360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:33.827000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232323361643464623035376135356565323366306366646363343836 Sep 6 00:16:33.830728 systemd-resolved[1178]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 6 00:16:33.845942 env[1225]: 2025-09-06 00:16:33.407 [INFO][4279] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--77f65f4854--prqvv-eth0 calico-apiserver-77f65f4854- calico-apiserver bd47af89-ef90-4d72-a1f0-b0a4126e6c60 1053 0 2025-09-06 00:15:57 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:77f65f4854 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-77f65f4854-prqvv eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calid4295291798 [] [] }} ContainerID="3871a77cd7a4f68fe9e65aef4a28f03f19627e55100b8444f8e798d244672856" Namespace="calico-apiserver" Pod="calico-apiserver-77f65f4854-prqvv" WorkloadEndpoint="localhost-k8s-calico--apiserver--77f65f4854--prqvv-" Sep 6 00:16:33.845942 env[1225]: 2025-09-06 00:16:33.407 [INFO][4279] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="3871a77cd7a4f68fe9e65aef4a28f03f19627e55100b8444f8e798d244672856" Namespace="calico-apiserver" Pod="calico-apiserver-77f65f4854-prqvv" WorkloadEndpoint="localhost-k8s-calico--apiserver--77f65f4854--prqvv-eth0" Sep 6 00:16:33.845942 env[1225]: 2025-09-06 00:16:33.517 [INFO][4323] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="3871a77cd7a4f68fe9e65aef4a28f03f19627e55100b8444f8e798d244672856" HandleID="k8s-pod-network.3871a77cd7a4f68fe9e65aef4a28f03f19627e55100b8444f8e798d244672856" Workload="localhost-k8s-calico--apiserver--77f65f4854--prqvv-eth0" Sep 6 00:16:33.845942 env[1225]: 2025-09-06 00:16:33.517 [INFO][4323] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="3871a77cd7a4f68fe9e65aef4a28f03f19627e55100b8444f8e798d244672856" HandleID="k8s-pod-network.3871a77cd7a4f68fe9e65aef4a28f03f19627e55100b8444f8e798d244672856" Workload="localhost-k8s-calico--apiserver--77f65f4854--prqvv-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000251010), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-77f65f4854-prqvv", "timestamp":"2025-09-06 00:16:33.517660981 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:16:33.845942 env[1225]: 2025-09-06 00:16:33.518 [INFO][4323] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:33.845942 env[1225]: 2025-09-06 00:16:33.604 [INFO][4323] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:33.845942 env[1225]: 2025-09-06 00:16:33.604 [INFO][4323] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 6 00:16:33.845942 env[1225]: 2025-09-06 00:16:33.629 [INFO][4323] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.3871a77cd7a4f68fe9e65aef4a28f03f19627e55100b8444f8e798d244672856" host="localhost" Sep 6 00:16:33.845942 env[1225]: 2025-09-06 00:16:33.650 [INFO][4323] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 6 00:16:33.845942 env[1225]: 2025-09-06 00:16:33.678 [INFO][4323] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 6 00:16:33.845942 env[1225]: 2025-09-06 00:16:33.692 [INFO][4323] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 6 00:16:33.845942 env[1225]: 2025-09-06 00:16:33.701 [INFO][4323] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 6 00:16:33.845942 env[1225]: 2025-09-06 00:16:33.701 [INFO][4323] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.3871a77cd7a4f68fe9e65aef4a28f03f19627e55100b8444f8e798d244672856" host="localhost" Sep 6 00:16:33.845942 env[1225]: 2025-09-06 00:16:33.706 [INFO][4323] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.3871a77cd7a4f68fe9e65aef4a28f03f19627e55100b8444f8e798d244672856 Sep 6 00:16:33.845942 env[1225]: 2025-09-06 00:16:33.723 [INFO][4323] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.3871a77cd7a4f68fe9e65aef4a28f03f19627e55100b8444f8e798d244672856" host="localhost" Sep 6 00:16:33.845942 env[1225]: 2025-09-06 00:16:33.743 [INFO][4323] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.3871a77cd7a4f68fe9e65aef4a28f03f19627e55100b8444f8e798d244672856" host="localhost" Sep 6 00:16:33.845942 env[1225]: 2025-09-06 00:16:33.744 [INFO][4323] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.3871a77cd7a4f68fe9e65aef4a28f03f19627e55100b8444f8e798d244672856" host="localhost" Sep 6 00:16:33.845942 env[1225]: 2025-09-06 00:16:33.744 [INFO][4323] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:33.845942 env[1225]: 2025-09-06 00:16:33.744 [INFO][4323] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="3871a77cd7a4f68fe9e65aef4a28f03f19627e55100b8444f8e798d244672856" HandleID="k8s-pod-network.3871a77cd7a4f68fe9e65aef4a28f03f19627e55100b8444f8e798d244672856" Workload="localhost-k8s-calico--apiserver--77f65f4854--prqvv-eth0" Sep 6 00:16:33.847142 env[1225]: 2025-09-06 00:16:33.748 [INFO][4279] cni-plugin/k8s.go 418: Populated endpoint ContainerID="3871a77cd7a4f68fe9e65aef4a28f03f19627e55100b8444f8e798d244672856" Namespace="calico-apiserver" Pod="calico-apiserver-77f65f4854-prqvv" WorkloadEndpoint="localhost-k8s-calico--apiserver--77f65f4854--prqvv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--77f65f4854--prqvv-eth0", GenerateName:"calico-apiserver-77f65f4854-", Namespace:"calico-apiserver", SelfLink:"", UID:"bd47af89-ef90-4d72-a1f0-b0a4126e6c60", ResourceVersion:"1053", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 15, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"77f65f4854", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-77f65f4854-prqvv", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid4295291798", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:33.847142 env[1225]: 2025-09-06 00:16:33.748 [INFO][4279] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="3871a77cd7a4f68fe9e65aef4a28f03f19627e55100b8444f8e798d244672856" Namespace="calico-apiserver" Pod="calico-apiserver-77f65f4854-prqvv" WorkloadEndpoint="localhost-k8s-calico--apiserver--77f65f4854--prqvv-eth0" Sep 6 00:16:33.847142 env[1225]: 2025-09-06 00:16:33.748 [INFO][4279] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calid4295291798 ContainerID="3871a77cd7a4f68fe9e65aef4a28f03f19627e55100b8444f8e798d244672856" Namespace="calico-apiserver" Pod="calico-apiserver-77f65f4854-prqvv" WorkloadEndpoint="localhost-k8s-calico--apiserver--77f65f4854--prqvv-eth0" Sep 6 00:16:33.847142 env[1225]: 2025-09-06 00:16:33.793 [INFO][4279] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="3871a77cd7a4f68fe9e65aef4a28f03f19627e55100b8444f8e798d244672856" Namespace="calico-apiserver" Pod="calico-apiserver-77f65f4854-prqvv" WorkloadEndpoint="localhost-k8s-calico--apiserver--77f65f4854--prqvv-eth0" Sep 6 00:16:33.847142 env[1225]: 2025-09-06 00:16:33.815 [INFO][4279] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="3871a77cd7a4f68fe9e65aef4a28f03f19627e55100b8444f8e798d244672856" Namespace="calico-apiserver" Pod="calico-apiserver-77f65f4854-prqvv" WorkloadEndpoint="localhost-k8s-calico--apiserver--77f65f4854--prqvv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--77f65f4854--prqvv-eth0", GenerateName:"calico-apiserver-77f65f4854-", Namespace:"calico-apiserver", SelfLink:"", UID:"bd47af89-ef90-4d72-a1f0-b0a4126e6c60", ResourceVersion:"1053", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 15, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"77f65f4854", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"3871a77cd7a4f68fe9e65aef4a28f03f19627e55100b8444f8e798d244672856", Pod:"calico-apiserver-77f65f4854-prqvv", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid4295291798", MAC:"9a:56:37:80:af:dc", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:33.847142 env[1225]: 2025-09-06 00:16:33.838 [INFO][4279] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="3871a77cd7a4f68fe9e65aef4a28f03f19627e55100b8444f8e798d244672856" Namespace="calico-apiserver" Pod="calico-apiserver-77f65f4854-prqvv" WorkloadEndpoint="localhost-k8s-calico--apiserver--77f65f4854--prqvv-eth0" Sep 6 00:16:33.883000 audit[4394]: NETFILTER_CFG table=filter:115 family=2 entries=63 op=nft_register_chain pid=4394 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:16:33.883000 audit[4394]: SYSCALL arch=c000003e syscall=46 success=yes exit=30664 a0=3 a1=7ffc65c2fda0 a2=0 a3=7ffc65c2fd8c items=0 ppid=3701 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:33.883000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:16:33.899554 env[1225]: time="2025-09-06T00:16:33.899485870Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-77f65f4854-jkr5j,Uid:32c9d655-95c5-436b-adcd-e3fe02fbc713,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"b223ad4db057a55ee23f0cfdcc4865ef480e21d8897abac6c282ef659145d149\"" Sep 6 00:16:33.899953 env[1225]: time="2025-09-06T00:16:33.899618929Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:16:33.900084 env[1225]: time="2025-09-06T00:16:33.899718113Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:16:33.900084 env[1225]: time="2025-09-06T00:16:33.899741509Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:16:33.900216 env[1225]: time="2025-09-06T00:16:33.900149005Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3871a77cd7a4f68fe9e65aef4a28f03f19627e55100b8444f8e798d244672856 pid=4404 runtime=io.containerd.runc.v2 Sep 6 00:16:33.948828 systemd[1]: Started cri-containerd-3871a77cd7a4f68fe9e65aef4a28f03f19627e55100b8444f8e798d244672856.scope. Sep 6 00:16:33.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.982000 audit: BPF prog-id=201 op=LOAD Sep 6 00:16:33.984000 audit[4414]: AVC avc: denied { bpf } for pid=4414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.984000 audit[4414]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4404 pid=4414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:33.984000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338373161373763643761346636386665396536356165663461323866 Sep 6 00:16:33.984000 audit[4414]: AVC avc: denied { perfmon } for pid=4414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.984000 audit[4414]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=4404 pid=4414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:33.984000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338373161373763643761346636386665396536356165663461323866 Sep 6 00:16:33.984000 audit[4414]: AVC avc: denied { bpf } for pid=4414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.984000 audit[4414]: AVC avc: denied { bpf } for pid=4414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.984000 audit[4414]: AVC avc: denied { bpf } for pid=4414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.984000 audit[4414]: AVC avc: denied { perfmon } for pid=4414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.984000 audit[4414]: AVC avc: denied { perfmon } for pid=4414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.984000 audit[4414]: AVC avc: denied { perfmon } for pid=4414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.984000 audit[4414]: AVC avc: denied { perfmon } for pid=4414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.984000 audit[4414]: AVC avc: denied { perfmon } for pid=4414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.984000 audit[4414]: AVC avc: denied { bpf } for pid=4414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.984000 audit[4414]: AVC avc: denied { bpf } for pid=4414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.984000 audit: BPF prog-id=202 op=LOAD Sep 6 00:16:33.984000 audit[4414]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003feda0 items=0 ppid=4404 pid=4414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:33.984000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338373161373763643761346636386665396536356165663461323866 Sep 6 00:16:33.986000 audit[4414]: AVC avc: denied { bpf } for pid=4414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.986000 audit[4414]: AVC avc: denied { bpf } for pid=4414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.986000 audit[4414]: AVC avc: denied { perfmon } for pid=4414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.986000 audit[4414]: AVC avc: denied { perfmon } for pid=4414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.986000 audit[4414]: AVC avc: denied { perfmon } for pid=4414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.986000 audit[4414]: AVC avc: denied { perfmon } for pid=4414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.986000 audit[4414]: AVC avc: denied { perfmon } for pid=4414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.986000 audit[4414]: AVC avc: denied { bpf } for pid=4414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.986000 audit[4414]: AVC avc: denied { bpf } for pid=4414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.986000 audit: BPF prog-id=203 op=LOAD Sep 6 00:16:33.986000 audit[4414]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003fede8 items=0 ppid=4404 pid=4414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:33.986000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338373161373763643761346636386665396536356165663461323866 Sep 6 00:16:33.987000 audit: BPF prog-id=203 op=UNLOAD Sep 6 00:16:33.987000 audit: BPF prog-id=202 op=UNLOAD Sep 6 00:16:33.987000 audit[4414]: AVC avc: denied { bpf } for pid=4414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.987000 audit[4414]: AVC avc: denied { bpf } for pid=4414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.987000 audit[4414]: AVC avc: denied { bpf } for pid=4414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.987000 audit[4414]: AVC avc: denied { perfmon } for pid=4414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.987000 audit[4414]: AVC avc: denied { perfmon } for pid=4414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.987000 audit[4414]: AVC avc: denied { perfmon } for pid=4414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.987000 audit[4414]: AVC avc: denied { perfmon } for pid=4414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.987000 audit[4414]: AVC avc: denied { perfmon } for pid=4414 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.987000 audit[4414]: AVC avc: denied { bpf } for pid=4414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.987000 audit[4414]: AVC avc: denied { bpf } for pid=4414 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:33.987000 audit: BPF prog-id=204 op=LOAD Sep 6 00:16:33.987000 audit[4414]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003ff1f8 items=0 ppid=4404 pid=4414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:33.987000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338373161373763643761346636386665396536356165663461323866 Sep 6 00:16:34.002565 systemd-resolved[1178]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 6 00:16:34.091433 env[1225]: time="2025-09-06T00:16:34.091356253Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-77f65f4854-prqvv,Uid:bd47af89-ef90-4d72-a1f0-b0a4126e6c60,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"3871a77cd7a4f68fe9e65aef4a28f03f19627e55100b8444f8e798d244672856\"" Sep 6 00:16:34.181933 systemd-networkd[1055]: vxlan.calico: Gained IPv6LL Sep 6 00:16:34.315015 kubelet[2030]: E0906 00:16:34.314937 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:16:34.316108 kubelet[2030]: E0906 00:16:34.316086 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:16:34.371321 systemd-networkd[1055]: cali191c32adfa0: Gained IPv6LL Sep 6 00:16:34.884279 systemd-networkd[1055]: cali7b9019a0275: Gained IPv6LL Sep 6 00:16:35.659497 systemd-networkd[1055]: calid4295291798: Gained IPv6LL Sep 6 00:16:36.913249 env[1225]: time="2025-09-06T00:16:36.913084362Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:36.930642 env[1225]: time="2025-09-06T00:16:36.930565541Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:df191a54fb79de3c693f8b1b864a1bd3bd14f63b3fff9d5fa4869c471ce3cd37,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:36.947343 env[1225]: time="2025-09-06T00:16:36.947272470Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:36.950730 env[1225]: time="2025-09-06T00:16:36.950671212Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:27c4187717f08f0a5727019d8beb7597665eb47e69eaa1d7d091a7e28913e577,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:36.951344 env[1225]: time="2025-09-06T00:16:36.951253757Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\" returns image reference \"sha256:df191a54fb79de3c693f8b1b864a1bd3bd14f63b3fff9d5fa4869c471ce3cd37\"" Sep 6 00:16:36.955791 env[1225]: time="2025-09-06T00:16:36.955735559Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\"" Sep 6 00:16:37.009659 env[1225]: time="2025-09-06T00:16:36.997727120Z" level=info msg="CreateContainer within sandbox \"ffaa7996a97ba184064733bc2dd00242903aa5ec47c3c9a433425d263a501e7a\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Sep 6 00:16:37.059613 env[1225]: time="2025-09-06T00:16:37.059513657Z" level=info msg="CreateContainer within sandbox \"ffaa7996a97ba184064733bc2dd00242903aa5ec47c3c9a433425d263a501e7a\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"954a341ac06695ba147e773491e7cf897d51750ea488cdfbe4c34a542eec2b1e\"" Sep 6 00:16:37.064775 env[1225]: time="2025-09-06T00:16:37.064687939Z" level=info msg="StartContainer for \"954a341ac06695ba147e773491e7cf897d51750ea488cdfbe4c34a542eec2b1e\"" Sep 6 00:16:37.110521 systemd[1]: Started cri-containerd-954a341ac06695ba147e773491e7cf897d51750ea488cdfbe4c34a542eec2b1e.scope. Sep 6 00:16:37.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.159000 audit: BPF prog-id=205 op=LOAD Sep 6 00:16:37.164000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.164000 audit[4445]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3762 pid=4445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:37.164000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935346133343161633036363935626131343765373733343931653763 Sep 6 00:16:37.164000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.164000 audit[4445]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3762 pid=4445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:37.164000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935346133343161633036363935626131343765373733343931653763 Sep 6 00:16:37.164000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.164000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.164000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.164000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.164000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.164000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.164000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.164000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.164000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.164000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.164000 audit: BPF prog-id=206 op=LOAD Sep 6 00:16:37.164000 audit[4445]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003aa1e0 items=0 ppid=3762 pid=4445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:37.164000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935346133343161633036363935626131343765373733343931653763 Sep 6 00:16:37.172000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.172000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.172000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.172000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.172000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.172000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.172000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.172000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.172000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.172000 audit: BPF prog-id=207 op=LOAD Sep 6 00:16:37.172000 audit[4445]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003aa228 items=0 ppid=3762 pid=4445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:37.172000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935346133343161633036363935626131343765373733343931653763 Sep 6 00:16:37.183000 audit: BPF prog-id=207 op=UNLOAD Sep 6 00:16:37.183000 audit: BPF prog-id=206 op=UNLOAD Sep 6 00:16:37.183000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.183000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.183000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.183000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.183000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.183000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.183000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.183000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.183000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.183000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:37.183000 audit: BPF prog-id=208 op=LOAD Sep 6 00:16:37.183000 audit[4445]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003aa638 items=0 ppid=3762 pid=4445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:37.183000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935346133343161633036363935626131343765373733343931653763 Sep 6 00:16:37.287804 env[1225]: time="2025-09-06T00:16:37.287667689Z" level=info msg="StartContainer for \"954a341ac06695ba147e773491e7cf897d51750ea488cdfbe4c34a542eec2b1e\" returns successfully" Sep 6 00:16:37.412015 kubelet[2030]: I0906 00:16:37.403297 2030 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-667977df75-tg4gg" podStartSLOduration=30.378925949 podStartE2EDuration="36.403272569s" podCreationTimestamp="2025-09-06 00:16:01 +0000 UTC" firstStartedPulling="2025-09-06 00:16:30.930906819 +0000 UTC m=+50.525131104" lastFinishedPulling="2025-09-06 00:16:36.955253409 +0000 UTC m=+56.549477724" observedRunningTime="2025-09-06 00:16:37.402299053 +0000 UTC m=+56.996523348" watchObservedRunningTime="2025-09-06 00:16:37.403272569 +0000 UTC m=+56.997496854" Sep 6 00:16:38.385822 systemd[1]: run-containerd-runc-k8s.io-954a341ac06695ba147e773491e7cf897d51750ea488cdfbe4c34a542eec2b1e-runc.BYsZdq.mount: Deactivated successfully. Sep 6 00:16:38.982430 env[1225]: time="2025-09-06T00:16:38.982333049Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:38.989053 env[1225]: time="2025-09-06T00:16:38.988938666Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:666f4e02e75c30547109a06ed75b415a990a970811173aa741379cfaac4d9dd7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:38.992728 env[1225]: time="2025-09-06T00:16:38.992636909Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:38.995626 env[1225]: time="2025-09-06T00:16:38.995547279Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:f22c88018d8b58c4ef0052f594b216a13bd6852166ac131a538c5ab2fba23bb2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:38.996302 env[1225]: time="2025-09-06T00:16:38.996226630Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\" returns image reference \"sha256:666f4e02e75c30547109a06ed75b415a990a970811173aa741379cfaac4d9dd7\"" Sep 6 00:16:39.001578 env[1225]: time="2025-09-06T00:16:38.999480689Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\"" Sep 6 00:16:39.005520 env[1225]: time="2025-09-06T00:16:39.005423761Z" level=info msg="CreateContainer within sandbox \"d37113f5bb32f68e4fe0dcf7d794d701b116fbbda18c39d445f9e46064fa4f17\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Sep 6 00:16:39.055715 env[1225]: time="2025-09-06T00:16:39.055601886Z" level=info msg="CreateContainer within sandbox \"d37113f5bb32f68e4fe0dcf7d794d701b116fbbda18c39d445f9e46064fa4f17\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"5991e91f6ddae3bdda3fbd96e13b36ca2fa62859f1b19ce5b4d96d01e7c35e43\"" Sep 6 00:16:39.057450 env[1225]: time="2025-09-06T00:16:39.056890771Z" level=info msg="StartContainer for \"5991e91f6ddae3bdda3fbd96e13b36ca2fa62859f1b19ce5b4d96d01e7c35e43\"" Sep 6 00:16:39.131249 systemd[1]: run-containerd-runc-k8s.io-5991e91f6ddae3bdda3fbd96e13b36ca2fa62859f1b19ce5b4d96d01e7c35e43-runc.HGZHxt.mount: Deactivated successfully. Sep 6 00:16:39.143175 systemd[1]: Started cri-containerd-5991e91f6ddae3bdda3fbd96e13b36ca2fa62859f1b19ce5b4d96d01e7c35e43.scope. Sep 6 00:16:39.185036 kernel: kauditd_printk_skb: 249 callbacks suppressed Sep 6 00:16:39.185260 kernel: audit: type=1400 audit(1757117799.175:1376): avc: denied { perfmon } for pid=4540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.185319 kernel: audit: type=1300 audit(1757117799.175:1376): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f16292f2588 items=0 ppid=3978 pid=4540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:39.175000 audit[4540]: AVC avc: denied { perfmon } for pid=4540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.175000 audit[4540]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f16292f2588 items=0 ppid=3978 pid=4540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:39.175000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539393165393166366464616533626464613366626439366531336233 Sep 6 00:16:39.198701 kernel: audit: type=1327 audit(1757117799.175:1376): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539393165393166366464616533626464613366626439366531336233 Sep 6 00:16:39.198896 kernel: audit: type=1400 audit(1757117799.176:1377): avc: denied { bpf } for pid=4540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.176000 audit[4540]: AVC avc: denied { bpf } for pid=4540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.206751 kernel: audit: type=1400 audit(1757117799.176:1377): avc: denied { bpf } for pid=4540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.176000 audit[4540]: AVC avc: denied { bpf } for pid=4540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.212761 kernel: audit: type=1400 audit(1757117799.176:1377): avc: denied { bpf } for pid=4540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.176000 audit[4540]: AVC avc: denied { bpf } for pid=4540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.176000 audit[4540]: AVC avc: denied { perfmon } for pid=4540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.176000 audit[4540]: AVC avc: denied { perfmon } for pid=4540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.234563 kernel: audit: type=1400 audit(1757117799.176:1377): avc: denied { perfmon } for pid=4540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.234757 kernel: audit: type=1400 audit(1757117799.176:1377): avc: denied { perfmon } for pid=4540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.235773 kernel: audit: type=1400 audit(1757117799.176:1377): avc: denied { perfmon } for pid=4540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.176000 audit[4540]: AVC avc: denied { perfmon } for pid=4540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.176000 audit[4540]: AVC avc: denied { perfmon } for pid=4540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.176000 audit[4540]: AVC avc: denied { perfmon } for pid=4540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.176000 audit[4540]: AVC avc: denied { bpf } for pid=4540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.176000 audit[4540]: AVC avc: denied { bpf } for pid=4540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.176000 audit: BPF prog-id=209 op=LOAD Sep 6 00:16:39.176000 audit[4540]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0002b9fd8 items=0 ppid=3978 pid=4540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:39.176000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539393165393166366464616533626464613366626439366531336233 Sep 6 00:16:39.184000 audit[4540]: AVC avc: denied { bpf } for pid=4540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.184000 audit[4540]: AVC avc: denied { bpf } for pid=4540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.184000 audit[4540]: AVC avc: denied { perfmon } for pid=4540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.184000 audit[4540]: AVC avc: denied { perfmon } for pid=4540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.184000 audit[4540]: AVC avc: denied { perfmon } for pid=4540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.184000 audit[4540]: AVC avc: denied { perfmon } for pid=4540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.184000 audit[4540]: AVC avc: denied { perfmon } for pid=4540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.184000 audit[4540]: AVC avc: denied { bpf } for pid=4540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.184000 audit[4540]: AVC avc: denied { bpf } for pid=4540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.184000 audit: BPF prog-id=210 op=LOAD Sep 6 00:16:39.184000 audit[4540]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000426028 items=0 ppid=3978 pid=4540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:39.184000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539393165393166366464616533626464613366626439366531336233 Sep 6 00:16:39.256061 kernel: audit: type=1400 audit(1757117799.176:1377): avc: denied { perfmon } for pid=4540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.198000 audit: BPF prog-id=210 op=UNLOAD Sep 6 00:16:39.198000 audit: BPF prog-id=209 op=UNLOAD Sep 6 00:16:39.198000 audit[4540]: AVC avc: denied { bpf } for pid=4540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.198000 audit[4540]: AVC avc: denied { bpf } for pid=4540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.198000 audit[4540]: AVC avc: denied { bpf } for pid=4540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.198000 audit[4540]: AVC avc: denied { perfmon } for pid=4540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.198000 audit[4540]: AVC avc: denied { perfmon } for pid=4540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.198000 audit[4540]: AVC avc: denied { perfmon } for pid=4540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.198000 audit[4540]: AVC avc: denied { perfmon } for pid=4540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.198000 audit[4540]: AVC avc: denied { perfmon } for pid=4540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.198000 audit[4540]: AVC avc: denied { bpf } for pid=4540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.198000 audit[4540]: AVC avc: denied { bpf } for pid=4540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:39.198000 audit: BPF prog-id=211 op=LOAD Sep 6 00:16:39.198000 audit[4540]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0004260b8 items=0 ppid=3978 pid=4540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:39.198000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539393165393166366464616533626464613366626439366531336233 Sep 6 00:16:39.259697 env[1225]: time="2025-09-06T00:16:39.259621587Z" level=info msg="StartContainer for \"5991e91f6ddae3bdda3fbd96e13b36ca2fa62859f1b19ce5b4d96d01e7c35e43\" returns successfully" Sep 6 00:16:40.692757 env[1225]: time="2025-09-06T00:16:40.692533117Z" level=info msg="StopPodSandbox for \"8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8\"" Sep 6 00:16:40.931444 env[1225]: 2025-09-06 00:16:40.776 [WARNING][4578] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--88vqh-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"2e5ae4bb-0a1d-4be0-874a-5cd125295775", ResourceVersion:"1037", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 15, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d7d97396a2b88b9e54206a993ad683fc41a6af42accb1bc6c672219aa07f88e9", Pod:"coredns-668d6bf9bc-88vqh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali9a6c91b5580", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:40.931444 env[1225]: 2025-09-06 00:16:40.779 [INFO][4578] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" Sep 6 00:16:40.931444 env[1225]: 2025-09-06 00:16:40.780 [INFO][4578] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" iface="eth0" netns="" Sep 6 00:16:40.931444 env[1225]: 2025-09-06 00:16:40.781 [INFO][4578] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" Sep 6 00:16:40.931444 env[1225]: 2025-09-06 00:16:40.783 [INFO][4578] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" Sep 6 00:16:40.931444 env[1225]: 2025-09-06 00:16:40.883 [INFO][4588] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" HandleID="k8s-pod-network.8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" Workload="localhost-k8s-coredns--668d6bf9bc--88vqh-eth0" Sep 6 00:16:40.931444 env[1225]: 2025-09-06 00:16:40.883 [INFO][4588] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:40.931444 env[1225]: 2025-09-06 00:16:40.883 [INFO][4588] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:40.931444 env[1225]: 2025-09-06 00:16:40.898 [WARNING][4588] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" HandleID="k8s-pod-network.8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" Workload="localhost-k8s-coredns--668d6bf9bc--88vqh-eth0" Sep 6 00:16:40.931444 env[1225]: 2025-09-06 00:16:40.898 [INFO][4588] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" HandleID="k8s-pod-network.8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" Workload="localhost-k8s-coredns--668d6bf9bc--88vqh-eth0" Sep 6 00:16:40.931444 env[1225]: 2025-09-06 00:16:40.913 [INFO][4588] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:40.931444 env[1225]: 2025-09-06 00:16:40.919 [INFO][4578] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" Sep 6 00:16:40.934018 env[1225]: time="2025-09-06T00:16:40.932467693Z" level=info msg="TearDown network for sandbox \"8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8\" successfully" Sep 6 00:16:40.934018 env[1225]: time="2025-09-06T00:16:40.932536397Z" level=info msg="StopPodSandbox for \"8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8\" returns successfully" Sep 6 00:16:40.934018 env[1225]: time="2025-09-06T00:16:40.933327323Z" level=info msg="RemovePodSandbox for \"8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8\"" Sep 6 00:16:40.934018 env[1225]: time="2025-09-06T00:16:40.933374084Z" level=info msg="Forcibly stopping sandbox \"8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8\"" Sep 6 00:16:41.144504 env[1225]: 2025-09-06 00:16:41.026 [WARNING][4605] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--88vqh-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"2e5ae4bb-0a1d-4be0-874a-5cd125295775", ResourceVersion:"1037", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 15, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d7d97396a2b88b9e54206a993ad683fc41a6af42accb1bc6c672219aa07f88e9", Pod:"coredns-668d6bf9bc-88vqh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali9a6c91b5580", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:41.144504 env[1225]: 2025-09-06 00:16:41.027 [INFO][4605] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" Sep 6 00:16:41.144504 env[1225]: 2025-09-06 00:16:41.027 [INFO][4605] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" iface="eth0" netns="" Sep 6 00:16:41.144504 env[1225]: 2025-09-06 00:16:41.027 [INFO][4605] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" Sep 6 00:16:41.144504 env[1225]: 2025-09-06 00:16:41.027 [INFO][4605] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" Sep 6 00:16:41.144504 env[1225]: 2025-09-06 00:16:41.090 [INFO][4613] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" HandleID="k8s-pod-network.8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" Workload="localhost-k8s-coredns--668d6bf9bc--88vqh-eth0" Sep 6 00:16:41.144504 env[1225]: 2025-09-06 00:16:41.090 [INFO][4613] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:41.144504 env[1225]: 2025-09-06 00:16:41.091 [INFO][4613] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:41.144504 env[1225]: 2025-09-06 00:16:41.115 [WARNING][4613] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" HandleID="k8s-pod-network.8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" Workload="localhost-k8s-coredns--668d6bf9bc--88vqh-eth0" Sep 6 00:16:41.144504 env[1225]: 2025-09-06 00:16:41.116 [INFO][4613] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" HandleID="k8s-pod-network.8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" Workload="localhost-k8s-coredns--668d6bf9bc--88vqh-eth0" Sep 6 00:16:41.144504 env[1225]: 2025-09-06 00:16:41.128 [INFO][4613] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:41.144504 env[1225]: 2025-09-06 00:16:41.140 [INFO][4605] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8" Sep 6 00:16:41.144504 env[1225]: time="2025-09-06T00:16:41.144388532Z" level=info msg="TearDown network for sandbox \"8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8\" successfully" Sep 6 00:16:41.350149 env[1225]: time="2025-09-06T00:16:41.350079764Z" level=info msg="RemovePodSandbox \"8cba53209cc4187adba6548fec82ce139c0747159ba248993be635626cb1c0e8\" returns successfully" Sep 6 00:16:41.355748 env[1225]: time="2025-09-06T00:16:41.351255565Z" level=info msg="StopPodSandbox for \"f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec\"" Sep 6 00:16:41.578447 env[1225]: 2025-09-06 00:16:41.487 [WARNING][4631] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--667977df75--tg4gg-eth0", GenerateName:"calico-kube-controllers-667977df75-", Namespace:"calico-system", SelfLink:"", UID:"331a0376-d8b2-4772-9a83-07896fab7cf8", ResourceVersion:"1084", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 16, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"667977df75", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ffaa7996a97ba184064733bc2dd00242903aa5ec47c3c9a433425d263a501e7a", Pod:"calico-kube-controllers-667977df75-tg4gg", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali91c76946a3f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:41.578447 env[1225]: 2025-09-06 00:16:41.488 [INFO][4631] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" Sep 6 00:16:41.578447 env[1225]: 2025-09-06 00:16:41.488 [INFO][4631] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" iface="eth0" netns="" Sep 6 00:16:41.578447 env[1225]: 2025-09-06 00:16:41.488 [INFO][4631] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" Sep 6 00:16:41.578447 env[1225]: 2025-09-06 00:16:41.488 [INFO][4631] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" Sep 6 00:16:41.578447 env[1225]: 2025-09-06 00:16:41.541 [INFO][4639] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" HandleID="k8s-pod-network.f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" Workload="localhost-k8s-calico--kube--controllers--667977df75--tg4gg-eth0" Sep 6 00:16:41.578447 env[1225]: 2025-09-06 00:16:41.542 [INFO][4639] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:41.578447 env[1225]: 2025-09-06 00:16:41.542 [INFO][4639] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:41.578447 env[1225]: 2025-09-06 00:16:41.565 [WARNING][4639] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" HandleID="k8s-pod-network.f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" Workload="localhost-k8s-calico--kube--controllers--667977df75--tg4gg-eth0" Sep 6 00:16:41.578447 env[1225]: 2025-09-06 00:16:41.566 [INFO][4639] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" HandleID="k8s-pod-network.f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" Workload="localhost-k8s-calico--kube--controllers--667977df75--tg4gg-eth0" Sep 6 00:16:41.578447 env[1225]: 2025-09-06 00:16:41.568 [INFO][4639] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:41.578447 env[1225]: 2025-09-06 00:16:41.573 [INFO][4631] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" Sep 6 00:16:41.578447 env[1225]: time="2025-09-06T00:16:41.577733375Z" level=info msg="TearDown network for sandbox \"f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec\" successfully" Sep 6 00:16:41.578447 env[1225]: time="2025-09-06T00:16:41.577783412Z" level=info msg="StopPodSandbox for \"f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec\" returns successfully" Sep 6 00:16:41.611315 env[1225]: time="2025-09-06T00:16:41.579631147Z" level=info msg="RemovePodSandbox for \"f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec\"" Sep 6 00:16:41.611315 env[1225]: time="2025-09-06T00:16:41.579674993Z" level=info msg="Forcibly stopping sandbox \"f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec\"" Sep 6 00:16:41.772783 env[1225]: 2025-09-06 00:16:41.686 [WARNING][4657] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--667977df75--tg4gg-eth0", GenerateName:"calico-kube-controllers-667977df75-", Namespace:"calico-system", SelfLink:"", UID:"331a0376-d8b2-4772-9a83-07896fab7cf8", ResourceVersion:"1084", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 16, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"667977df75", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ffaa7996a97ba184064733bc2dd00242903aa5ec47c3c9a433425d263a501e7a", Pod:"calico-kube-controllers-667977df75-tg4gg", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali91c76946a3f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:41.772783 env[1225]: 2025-09-06 00:16:41.686 [INFO][4657] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" Sep 6 00:16:41.772783 env[1225]: 2025-09-06 00:16:41.686 [INFO][4657] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" iface="eth0" netns="" Sep 6 00:16:41.772783 env[1225]: 2025-09-06 00:16:41.688 [INFO][4657] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" Sep 6 00:16:41.772783 env[1225]: 2025-09-06 00:16:41.688 [INFO][4657] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" Sep 6 00:16:41.772783 env[1225]: 2025-09-06 00:16:41.738 [INFO][4665] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" HandleID="k8s-pod-network.f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" Workload="localhost-k8s-calico--kube--controllers--667977df75--tg4gg-eth0" Sep 6 00:16:41.772783 env[1225]: 2025-09-06 00:16:41.738 [INFO][4665] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:41.772783 env[1225]: 2025-09-06 00:16:41.738 [INFO][4665] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:41.772783 env[1225]: 2025-09-06 00:16:41.757 [WARNING][4665] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" HandleID="k8s-pod-network.f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" Workload="localhost-k8s-calico--kube--controllers--667977df75--tg4gg-eth0" Sep 6 00:16:41.772783 env[1225]: 2025-09-06 00:16:41.757 [INFO][4665] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" HandleID="k8s-pod-network.f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" Workload="localhost-k8s-calico--kube--controllers--667977df75--tg4gg-eth0" Sep 6 00:16:41.772783 env[1225]: 2025-09-06 00:16:41.764 [INFO][4665] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:41.772783 env[1225]: 2025-09-06 00:16:41.769 [INFO][4657] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec" Sep 6 00:16:41.774840 env[1225]: time="2025-09-06T00:16:41.772814555Z" level=info msg="TearDown network for sandbox \"f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec\" successfully" Sep 6 00:16:41.780344 env[1225]: time="2025-09-06T00:16:41.779914508Z" level=info msg="RemovePodSandbox \"f7d9d449209dab15f50d75b7461f27c8a6dae1ea13dc36e18a9cef9748fd1bec\" returns successfully" Sep 6 00:16:41.781911 env[1225]: time="2025-09-06T00:16:41.781829123Z" level=info msg="StopPodSandbox for \"6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59\"" Sep 6 00:16:42.004116 env[1225]: 2025-09-06 00:16:41.898 [WARNING][4682] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--54d579b49d--tdxp6-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"3e73d97e-f57b-4ce7-9a19-70a0052142ea", ResourceVersion:"1046", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 16, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"212472866f0ee4f17ccb2b7d850f004f1f7bd8fb9cd1dbef717125927f7a7cd5", Pod:"goldmane-54d579b49d-tdxp6", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali191c32adfa0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:42.004116 env[1225]: 2025-09-06 00:16:41.898 [INFO][4682] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" Sep 6 00:16:42.004116 env[1225]: 2025-09-06 00:16:41.899 [INFO][4682] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" iface="eth0" netns="" Sep 6 00:16:42.004116 env[1225]: 2025-09-06 00:16:41.899 [INFO][4682] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" Sep 6 00:16:42.004116 env[1225]: 2025-09-06 00:16:41.899 [INFO][4682] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" Sep 6 00:16:42.004116 env[1225]: 2025-09-06 00:16:41.963 [INFO][4690] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" HandleID="k8s-pod-network.6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" Workload="localhost-k8s-goldmane--54d579b49d--tdxp6-eth0" Sep 6 00:16:42.004116 env[1225]: 2025-09-06 00:16:41.964 [INFO][4690] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:42.004116 env[1225]: 2025-09-06 00:16:41.966 [INFO][4690] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:42.004116 env[1225]: 2025-09-06 00:16:41.983 [WARNING][4690] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" HandleID="k8s-pod-network.6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" Workload="localhost-k8s-goldmane--54d579b49d--tdxp6-eth0" Sep 6 00:16:42.004116 env[1225]: 2025-09-06 00:16:41.983 [INFO][4690] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" HandleID="k8s-pod-network.6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" Workload="localhost-k8s-goldmane--54d579b49d--tdxp6-eth0" Sep 6 00:16:42.004116 env[1225]: 2025-09-06 00:16:41.992 [INFO][4690] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:42.004116 env[1225]: 2025-09-06 00:16:42.001 [INFO][4682] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" Sep 6 00:16:42.004116 env[1225]: time="2025-09-06T00:16:42.004013860Z" level=info msg="TearDown network for sandbox \"6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59\" successfully" Sep 6 00:16:42.004116 env[1225]: time="2025-09-06T00:16:42.004061122Z" level=info msg="StopPodSandbox for \"6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59\" returns successfully" Sep 6 00:16:42.006731 env[1225]: time="2025-09-06T00:16:42.006686841Z" level=info msg="RemovePodSandbox for \"6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59\"" Sep 6 00:16:42.006936 env[1225]: time="2025-09-06T00:16:42.006882662Z" level=info msg="Forcibly stopping sandbox \"6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59\"" Sep 6 00:16:42.204000 audit[1884]: AVC avc: denied { watch } for pid=1884 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:16:42.204000 audit[1884]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0014bfd00 a2=fc6 a3=0 items=0 ppid=1739 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 key=(null) Sep 6 00:16:42.204000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:16:42.204000 audit[1884]: AVC avc: denied { watch } for pid=1884 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:16:42.204000 audit[1884]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002a82000 a2=fc6 a3=0 items=0 ppid=1739 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 key=(null) Sep 6 00:16:42.204000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:16:42.204000 audit[1884]: AVC avc: denied { watch } for pid=1884 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:16:42.204000 audit[1884]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001743fa0 a2=fc6 a3=0 items=0 ppid=1739 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 key=(null) Sep 6 00:16:42.204000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:16:42.204000 audit[1884]: AVC avc: denied { watch } for pid=1884 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:16:42.204000 audit[1884]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0003f18c0 a2=fc6 a3=0 items=0 ppid=1739 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 key=(null) Sep 6 00:16:42.204000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:16:42.245493 env[1225]: 2025-09-06 00:16:42.106 [WARNING][4707] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--54d579b49d--tdxp6-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"3e73d97e-f57b-4ce7-9a19-70a0052142ea", ResourceVersion:"1046", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 16, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"212472866f0ee4f17ccb2b7d850f004f1f7bd8fb9cd1dbef717125927f7a7cd5", Pod:"goldmane-54d579b49d-tdxp6", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali191c32adfa0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:42.245493 env[1225]: 2025-09-06 00:16:42.108 [INFO][4707] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" Sep 6 00:16:42.245493 env[1225]: 2025-09-06 00:16:42.112 [INFO][4707] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" iface="eth0" netns="" Sep 6 00:16:42.245493 env[1225]: 2025-09-06 00:16:42.114 [INFO][4707] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" Sep 6 00:16:42.245493 env[1225]: 2025-09-06 00:16:42.114 [INFO][4707] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" Sep 6 00:16:42.245493 env[1225]: 2025-09-06 00:16:42.182 [INFO][4717] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" HandleID="k8s-pod-network.6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" Workload="localhost-k8s-goldmane--54d579b49d--tdxp6-eth0" Sep 6 00:16:42.245493 env[1225]: 2025-09-06 00:16:42.183 [INFO][4717] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:42.245493 env[1225]: 2025-09-06 00:16:42.183 [INFO][4717] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:42.245493 env[1225]: 2025-09-06 00:16:42.212 [WARNING][4717] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" HandleID="k8s-pod-network.6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" Workload="localhost-k8s-goldmane--54d579b49d--tdxp6-eth0" Sep 6 00:16:42.245493 env[1225]: 2025-09-06 00:16:42.212 [INFO][4717] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" HandleID="k8s-pod-network.6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" Workload="localhost-k8s-goldmane--54d579b49d--tdxp6-eth0" Sep 6 00:16:42.245493 env[1225]: 2025-09-06 00:16:42.235 [INFO][4717] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:42.245493 env[1225]: 2025-09-06 00:16:42.239 [INFO][4707] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59" Sep 6 00:16:42.246393 env[1225]: time="2025-09-06T00:16:42.246344262Z" level=info msg="TearDown network for sandbox \"6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59\" successfully" Sep 6 00:16:42.343098 env[1225]: time="2025-09-06T00:16:42.343017118Z" level=info msg="RemovePodSandbox \"6ab81d2de506df02d440f1b67c6a5d8f9c9f9d81fb0a6bc5adf3b964dabfce59\" returns successfully" Sep 6 00:16:42.344088 env[1225]: time="2025-09-06T00:16:42.344021636Z" level=info msg="StopPodSandbox for \"84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9\"" Sep 6 00:16:42.500172 env[1225]: 2025-09-06 00:16:42.413 [WARNING][4734] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--jqlbh-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"e830bd3a-f4af-462b-bf17-815d051633f7", ResourceVersion:"1031", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 15, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9a5af4c1a014221daa34f58e15636dd4671db8200e0f01dd160f87abe9523b19", Pod:"coredns-668d6bf9bc-jqlbh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid5729bcb61a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:42.500172 env[1225]: 2025-09-06 00:16:42.414 [INFO][4734] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" Sep 6 00:16:42.500172 env[1225]: 2025-09-06 00:16:42.414 [INFO][4734] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" iface="eth0" netns="" Sep 6 00:16:42.500172 env[1225]: 2025-09-06 00:16:42.414 [INFO][4734] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" Sep 6 00:16:42.500172 env[1225]: 2025-09-06 00:16:42.414 [INFO][4734] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" Sep 6 00:16:42.500172 env[1225]: 2025-09-06 00:16:42.473 [INFO][4742] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" HandleID="k8s-pod-network.84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" Workload="localhost-k8s-coredns--668d6bf9bc--jqlbh-eth0" Sep 6 00:16:42.500172 env[1225]: 2025-09-06 00:16:42.473 [INFO][4742] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:42.500172 env[1225]: 2025-09-06 00:16:42.473 [INFO][4742] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:42.500172 env[1225]: 2025-09-06 00:16:42.488 [WARNING][4742] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" HandleID="k8s-pod-network.84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" Workload="localhost-k8s-coredns--668d6bf9bc--jqlbh-eth0" Sep 6 00:16:42.500172 env[1225]: 2025-09-06 00:16:42.488 [INFO][4742] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" HandleID="k8s-pod-network.84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" Workload="localhost-k8s-coredns--668d6bf9bc--jqlbh-eth0" Sep 6 00:16:42.500172 env[1225]: 2025-09-06 00:16:42.491 [INFO][4742] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:42.500172 env[1225]: 2025-09-06 00:16:42.495 [INFO][4734] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" Sep 6 00:16:42.501159 env[1225]: time="2025-09-06T00:16:42.501104530Z" level=info msg="TearDown network for sandbox \"84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9\" successfully" Sep 6 00:16:42.501269 env[1225]: time="2025-09-06T00:16:42.501240985Z" level=info msg="StopPodSandbox for \"84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9\" returns successfully" Sep 6 00:16:42.503456 env[1225]: time="2025-09-06T00:16:42.502376347Z" level=info msg="RemovePodSandbox for \"84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9\"" Sep 6 00:16:42.503456 env[1225]: time="2025-09-06T00:16:42.502441493Z" level=info msg="Forcibly stopping sandbox \"84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9\"" Sep 6 00:16:42.703310 env[1225]: 2025-09-06 00:16:42.601 [WARNING][4760] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--jqlbh-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"e830bd3a-f4af-462b-bf17-815d051633f7", ResourceVersion:"1031", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 15, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9a5af4c1a014221daa34f58e15636dd4671db8200e0f01dd160f87abe9523b19", Pod:"coredns-668d6bf9bc-jqlbh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid5729bcb61a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:42.703310 env[1225]: 2025-09-06 00:16:42.604 [INFO][4760] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" Sep 6 00:16:42.703310 env[1225]: 2025-09-06 00:16:42.604 [INFO][4760] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" iface="eth0" netns="" Sep 6 00:16:42.703310 env[1225]: 2025-09-06 00:16:42.604 [INFO][4760] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" Sep 6 00:16:42.703310 env[1225]: 2025-09-06 00:16:42.604 [INFO][4760] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" Sep 6 00:16:42.703310 env[1225]: 2025-09-06 00:16:42.645 [INFO][4769] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" HandleID="k8s-pod-network.84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" Workload="localhost-k8s-coredns--668d6bf9bc--jqlbh-eth0" Sep 6 00:16:42.703310 env[1225]: 2025-09-06 00:16:42.648 [INFO][4769] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:42.703310 env[1225]: 2025-09-06 00:16:42.649 [INFO][4769] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:42.703310 env[1225]: 2025-09-06 00:16:42.670 [WARNING][4769] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" HandleID="k8s-pod-network.84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" Workload="localhost-k8s-coredns--668d6bf9bc--jqlbh-eth0" Sep 6 00:16:42.703310 env[1225]: 2025-09-06 00:16:42.670 [INFO][4769] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" HandleID="k8s-pod-network.84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" Workload="localhost-k8s-coredns--668d6bf9bc--jqlbh-eth0" Sep 6 00:16:42.703310 env[1225]: 2025-09-06 00:16:42.681 [INFO][4769] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:42.703310 env[1225]: 2025-09-06 00:16:42.690 [INFO][4760] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9" Sep 6 00:16:42.704231 env[1225]: time="2025-09-06T00:16:42.704175095Z" level=info msg="TearDown network for sandbox \"84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9\" successfully" Sep 6 00:16:42.813864 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2189278650.mount: Deactivated successfully. Sep 6 00:16:42.847165 env[1225]: time="2025-09-06T00:16:42.847094144Z" level=info msg="RemovePodSandbox \"84a755efc6e03fe551fdc6e66972ecd9368f5be8ecf66821f516ba054eaf95f9\" returns successfully" Sep 6 00:16:42.847760 env[1225]: time="2025-09-06T00:16:42.847727661Z" level=info msg="StopPodSandbox for \"54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862\"" Sep 6 00:16:42.924870 env[1225]: time="2025-09-06T00:16:42.924803168Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:42.929254 env[1225]: time="2025-09-06T00:16:42.929194730Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7e29b0984d517678aab6ca138482c318989f6f28daf9d3b5dd6e4a5a3115ac16,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:42.942316 env[1225]: time="2025-09-06T00:16:42.942078968Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:42.946121 env[1225]: time="2025-09-06T00:16:42.946063321Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:29becebc47401da9997a2a30f4c25c511a5f379d17275680b048224829af71a5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:42.946753 env[1225]: time="2025-09-06T00:16:42.946719403Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\" returns image reference \"sha256:7e29b0984d517678aab6ca138482c318989f6f28daf9d3b5dd6e4a5a3115ac16\"" Sep 6 00:16:42.971389 env[1225]: time="2025-09-06T00:16:42.965239997Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\"" Sep 6 00:16:42.973343 env[1225]: time="2025-09-06T00:16:42.973290322Z" level=info msg="CreateContainer within sandbox \"9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Sep 6 00:16:43.039667 env[1225]: time="2025-09-06T00:16:43.039493095Z" level=info msg="CreateContainer within sandbox \"9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"40b36348a11bae63c4bcfdbf9c1a8481b22139f05363f8370e5286f6d87bf5f5\"" Sep 6 00:16:43.043584 env[1225]: time="2025-09-06T00:16:43.040676397Z" level=info msg="StartContainer for \"40b36348a11bae63c4bcfdbf9c1a8481b22139f05363f8370e5286f6d87bf5f5\"" Sep 6 00:16:43.082888 env[1225]: 2025-09-06 00:16:42.968 [WARNING][4786] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--5697c6c69--p4xxr-eth0", GenerateName:"whisker-5697c6c69-", Namespace:"calico-system", SelfLink:"", UID:"0282c0d0-6aac-469c-a14e-04b67dddca1b", ResourceVersion:"986", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 16, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"5697c6c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1", Pod:"whisker-5697c6c69-p4xxr", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calieab4fc827c7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:43.082888 env[1225]: 2025-09-06 00:16:42.969 [INFO][4786] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" Sep 6 00:16:43.082888 env[1225]: 2025-09-06 00:16:42.969 [INFO][4786] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" iface="eth0" netns="" Sep 6 00:16:43.082888 env[1225]: 2025-09-06 00:16:42.969 [INFO][4786] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" Sep 6 00:16:43.082888 env[1225]: 2025-09-06 00:16:42.969 [INFO][4786] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" Sep 6 00:16:43.082888 env[1225]: 2025-09-06 00:16:43.040 [INFO][4795] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" HandleID="k8s-pod-network.54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" Workload="localhost-k8s-whisker--5697c6c69--p4xxr-eth0" Sep 6 00:16:43.082888 env[1225]: 2025-09-06 00:16:43.041 [INFO][4795] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:43.082888 env[1225]: 2025-09-06 00:16:43.041 [INFO][4795] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:43.082888 env[1225]: 2025-09-06 00:16:43.064 [WARNING][4795] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" HandleID="k8s-pod-network.54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" Workload="localhost-k8s-whisker--5697c6c69--p4xxr-eth0" Sep 6 00:16:43.082888 env[1225]: 2025-09-06 00:16:43.064 [INFO][4795] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" HandleID="k8s-pod-network.54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" Workload="localhost-k8s-whisker--5697c6c69--p4xxr-eth0" Sep 6 00:16:43.082888 env[1225]: 2025-09-06 00:16:43.074 [INFO][4795] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:43.082888 env[1225]: 2025-09-06 00:16:43.078 [INFO][4786] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" Sep 6 00:16:43.082888 env[1225]: time="2025-09-06T00:16:43.082250010Z" level=info msg="TearDown network for sandbox \"54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862\" successfully" Sep 6 00:16:43.082888 env[1225]: time="2025-09-06T00:16:43.082298113Z" level=info msg="StopPodSandbox for \"54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862\" returns successfully" Sep 6 00:16:43.085628 env[1225]: time="2025-09-06T00:16:43.083091009Z" level=info msg="RemovePodSandbox for \"54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862\"" Sep 6 00:16:43.085628 env[1225]: time="2025-09-06T00:16:43.083132169Z" level=info msg="Forcibly stopping sandbox \"54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862\"" Sep 6 00:16:43.102223 systemd[1]: Started cri-containerd-40b36348a11bae63c4bcfdbf9c1a8481b22139f05363f8370e5286f6d87bf5f5.scope. Sep 6 00:16:43.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.144000 audit: BPF prog-id=212 op=LOAD Sep 6 00:16:43.146000 audit[4812]: AVC avc: denied { bpf } for pid=4812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.146000 audit[4812]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3476 pid=4812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:43.146000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430623336333438613131626165363363346263666462663963316138 Sep 6 00:16:43.147000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.147000 audit[4812]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=3476 pid=4812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:43.147000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430623336333438613131626165363363346263666462663963316138 Sep 6 00:16:43.147000 audit[4812]: AVC avc: denied { bpf } for pid=4812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.147000 audit[4812]: AVC avc: denied { bpf } for pid=4812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.147000 audit[4812]: AVC avc: denied { bpf } for pid=4812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.147000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.147000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.147000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.147000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.147000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.147000 audit[4812]: AVC avc: denied { bpf } for pid=4812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.147000 audit[4812]: AVC avc: denied { bpf } for pid=4812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.147000 audit: BPF prog-id=213 op=LOAD Sep 6 00:16:43.147000 audit[4812]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000384000 items=0 ppid=3476 pid=4812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:43.147000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430623336333438613131626165363363346263666462663963316138 Sep 6 00:16:43.149000 audit[4812]: AVC avc: denied { bpf } for pid=4812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.149000 audit[4812]: AVC avc: denied { bpf } for pid=4812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.149000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.149000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.149000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.149000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.149000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.149000 audit[4812]: AVC avc: denied { bpf } for pid=4812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.149000 audit[4812]: AVC avc: denied { bpf } for pid=4812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.149000 audit: BPF prog-id=214 op=LOAD Sep 6 00:16:43.149000 audit[4812]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000384048 items=0 ppid=3476 pid=4812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:43.149000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430623336333438613131626165363363346263666462663963316138 Sep 6 00:16:43.151000 audit: BPF prog-id=214 op=UNLOAD Sep 6 00:16:43.151000 audit: BPF prog-id=213 op=UNLOAD Sep 6 00:16:43.151000 audit[4812]: AVC avc: denied { bpf } for pid=4812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.151000 audit[4812]: AVC avc: denied { bpf } for pid=4812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.151000 audit[4812]: AVC avc: denied { bpf } for pid=4812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.151000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.151000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.151000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.151000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.151000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.151000 audit[4812]: AVC avc: denied { bpf } for pid=4812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.151000 audit[4812]: AVC avc: denied { bpf } for pid=4812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:43.151000 audit: BPF prog-id=215 op=LOAD Sep 6 00:16:43.151000 audit[4812]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000384458 items=0 ppid=3476 pid=4812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:43.151000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430623336333438613131626165363363346263666462663963316138 Sep 6 00:16:43.216644 env[1225]: time="2025-09-06T00:16:43.214246522Z" level=info msg="StartContainer for \"40b36348a11bae63c4bcfdbf9c1a8481b22139f05363f8370e5286f6d87bf5f5\" returns successfully" Sep 6 00:16:43.267649 env[1225]: 2025-09-06 00:16:43.165 [WARNING][4833] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--5697c6c69--p4xxr-eth0", GenerateName:"whisker-5697c6c69-", Namespace:"calico-system", SelfLink:"", UID:"0282c0d0-6aac-469c-a14e-04b67dddca1b", ResourceVersion:"986", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 16, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"5697c6c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1", Pod:"whisker-5697c6c69-p4xxr", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calieab4fc827c7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:43.267649 env[1225]: 2025-09-06 00:16:43.166 [INFO][4833] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" Sep 6 00:16:43.267649 env[1225]: 2025-09-06 00:16:43.166 [INFO][4833] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" iface="eth0" netns="" Sep 6 00:16:43.267649 env[1225]: 2025-09-06 00:16:43.166 [INFO][4833] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" Sep 6 00:16:43.267649 env[1225]: 2025-09-06 00:16:43.166 [INFO][4833] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" Sep 6 00:16:43.267649 env[1225]: 2025-09-06 00:16:43.232 [INFO][4847] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" HandleID="k8s-pod-network.54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" Workload="localhost-k8s-whisker--5697c6c69--p4xxr-eth0" Sep 6 00:16:43.267649 env[1225]: 2025-09-06 00:16:43.232 [INFO][4847] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:43.267649 env[1225]: 2025-09-06 00:16:43.232 [INFO][4847] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:43.267649 env[1225]: 2025-09-06 00:16:43.244 [WARNING][4847] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" HandleID="k8s-pod-network.54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" Workload="localhost-k8s-whisker--5697c6c69--p4xxr-eth0" Sep 6 00:16:43.267649 env[1225]: 2025-09-06 00:16:43.245 [INFO][4847] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" HandleID="k8s-pod-network.54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" Workload="localhost-k8s-whisker--5697c6c69--p4xxr-eth0" Sep 6 00:16:43.267649 env[1225]: 2025-09-06 00:16:43.250 [INFO][4847] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:43.267649 env[1225]: 2025-09-06 00:16:43.256 [INFO][4833] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862" Sep 6 00:16:43.267649 env[1225]: time="2025-09-06T00:16:43.265203351Z" level=info msg="TearDown network for sandbox \"54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862\" successfully" Sep 6 00:16:43.276943 env[1225]: time="2025-09-06T00:16:43.274802054Z" level=info msg="RemovePodSandbox \"54060d0920b50ab1bf09591626e48bba65d346bd09541a07df1c2cd89a1c0862\" returns successfully" Sep 6 00:16:43.276943 env[1225]: time="2025-09-06T00:16:43.275928216Z" level=info msg="StopPodSandbox for \"1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e\"" Sep 6 00:16:43.401957 env[1225]: time="2025-09-06T00:16:43.400832850Z" level=info msg="StopContainer for \"40b36348a11bae63c4bcfdbf9c1a8481b22139f05363f8370e5286f6d87bf5f5\" with timeout 30 (s)" Sep 6 00:16:43.405671 env[1225]: time="2025-09-06T00:16:43.401608483Z" level=info msg="StopContainer for \"c3d032c627b69ae595911dd1f215a03a1d8a2ee1cd0703855ff8e742550c8994\" with timeout 30 (s)" Sep 6 00:16:43.409142 env[1225]: time="2025-09-06T00:16:43.408735259Z" level=info msg="Stop container \"c3d032c627b69ae595911dd1f215a03a1d8a2ee1cd0703855ff8e742550c8994\" with signal terminated" Sep 6 00:16:43.409142 env[1225]: time="2025-09-06T00:16:43.408913163Z" level=info msg="Stop container \"40b36348a11bae63c4bcfdbf9c1a8481b22139f05363f8370e5286f6d87bf5f5\" with signal terminated" Sep 6 00:16:43.439699 env[1225]: 2025-09-06 00:16:43.343 [WARNING][4882] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--77f65f4854--jkr5j-eth0", GenerateName:"calico-apiserver-77f65f4854-", Namespace:"calico-apiserver", SelfLink:"", UID:"32c9d655-95c5-436b-adcd-e3fe02fbc713", ResourceVersion:"1060", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 15, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"77f65f4854", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b223ad4db057a55ee23f0cfdcc4865ef480e21d8897abac6c282ef659145d149", Pod:"calico-apiserver-77f65f4854-jkr5j", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali7b9019a0275", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:43.439699 env[1225]: 2025-09-06 00:16:43.343 [INFO][4882] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" Sep 6 00:16:43.439699 env[1225]: 2025-09-06 00:16:43.343 [INFO][4882] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" iface="eth0" netns="" Sep 6 00:16:43.439699 env[1225]: 2025-09-06 00:16:43.343 [INFO][4882] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" Sep 6 00:16:43.439699 env[1225]: 2025-09-06 00:16:43.343 [INFO][4882] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" Sep 6 00:16:43.439699 env[1225]: 2025-09-06 00:16:43.393 [INFO][4890] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" HandleID="k8s-pod-network.1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" Workload="localhost-k8s-calico--apiserver--77f65f4854--jkr5j-eth0" Sep 6 00:16:43.439699 env[1225]: 2025-09-06 00:16:43.394 [INFO][4890] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:43.439699 env[1225]: 2025-09-06 00:16:43.394 [INFO][4890] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:43.439699 env[1225]: 2025-09-06 00:16:43.406 [WARNING][4890] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" HandleID="k8s-pod-network.1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" Workload="localhost-k8s-calico--apiserver--77f65f4854--jkr5j-eth0" Sep 6 00:16:43.439699 env[1225]: 2025-09-06 00:16:43.406 [INFO][4890] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" HandleID="k8s-pod-network.1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" Workload="localhost-k8s-calico--apiserver--77f65f4854--jkr5j-eth0" Sep 6 00:16:43.439699 env[1225]: 2025-09-06 00:16:43.409 [INFO][4890] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:43.439699 env[1225]: 2025-09-06 00:16:43.429 [INFO][4882] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" Sep 6 00:16:43.439699 env[1225]: time="2025-09-06T00:16:43.437224586Z" level=info msg="TearDown network for sandbox \"1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e\" successfully" Sep 6 00:16:43.439699 env[1225]: time="2025-09-06T00:16:43.437276716Z" level=info msg="StopPodSandbox for \"1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e\" returns successfully" Sep 6 00:16:43.439699 env[1225]: time="2025-09-06T00:16:43.438390634Z" level=info msg="RemovePodSandbox for \"1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e\"" Sep 6 00:16:43.439699 env[1225]: time="2025-09-06T00:16:43.438425272Z" level=info msg="Forcibly stopping sandbox \"1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e\"" Sep 6 00:16:43.457013 systemd[1]: cri-containerd-40b36348a11bae63c4bcfdbf9c1a8481b22139f05363f8370e5286f6d87bf5f5.scope: Deactivated successfully. Sep 6 00:16:43.456000 audit: BPF prog-id=212 op=UNLOAD Sep 6 00:16:43.462000 audit: BPF prog-id=215 op=UNLOAD Sep 6 00:16:43.472000 audit: BPF prog-id=187 op=UNLOAD Sep 6 00:16:43.473243 systemd[1]: cri-containerd-c3d032c627b69ae595911dd1f215a03a1d8a2ee1cd0703855ff8e742550c8994.scope: Deactivated successfully. Sep 6 00:16:43.490000 audit[4931]: NETFILTER_CFG table=filter:116 family=2 entries=13 op=nft_register_rule pid=4931 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:43.493000 audit: BPF prog-id=190 op=UNLOAD Sep 6 00:16:43.490000 audit[4931]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fffa47c78c0 a2=0 a3=7fffa47c78ac items=0 ppid=2180 pid=4931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:43.490000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:43.502000 audit[4931]: NETFILTER_CFG table=nat:117 family=2 entries=27 op=nft_register_chain pid=4931 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:43.502000 audit[4931]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7fffa47c78c0 a2=0 a3=7fffa47c78ac items=0 ppid=2180 pid=4931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:43.502000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:43.537911 env[1225]: time="2025-09-06T00:16:43.536667287Z" level=info msg="shim disconnected" id=c3d032c627b69ae595911dd1f215a03a1d8a2ee1cd0703855ff8e742550c8994 Sep 6 00:16:43.537911 env[1225]: time="2025-09-06T00:16:43.536722965Z" level=warning msg="cleaning up after shim disconnected" id=c3d032c627b69ae595911dd1f215a03a1d8a2ee1cd0703855ff8e742550c8994 namespace=k8s.io Sep 6 00:16:43.537911 env[1225]: time="2025-09-06T00:16:43.536732634Z" level=info msg="cleaning up dead shim" Sep 6 00:16:43.568040 env[1225]: time="2025-09-06T00:16:43.559358042Z" level=warning msg="cleanup warnings time=\"2025-09-06T00:16:43Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4952 runtime=io.containerd.runc.v2\n" Sep 6 00:16:43.645644 env[1225]: 2025-09-06 00:16:43.554 [WARNING][4918] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--77f65f4854--jkr5j-eth0", GenerateName:"calico-apiserver-77f65f4854-", Namespace:"calico-apiserver", SelfLink:"", UID:"32c9d655-95c5-436b-adcd-e3fe02fbc713", ResourceVersion:"1060", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 15, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"77f65f4854", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b223ad4db057a55ee23f0cfdcc4865ef480e21d8897abac6c282ef659145d149", Pod:"calico-apiserver-77f65f4854-jkr5j", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali7b9019a0275", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:43.645644 env[1225]: 2025-09-06 00:16:43.555 [INFO][4918] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" Sep 6 00:16:43.645644 env[1225]: 2025-09-06 00:16:43.555 [INFO][4918] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" iface="eth0" netns="" Sep 6 00:16:43.645644 env[1225]: 2025-09-06 00:16:43.555 [INFO][4918] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" Sep 6 00:16:43.645644 env[1225]: 2025-09-06 00:16:43.555 [INFO][4918] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" Sep 6 00:16:43.645644 env[1225]: 2025-09-06 00:16:43.608 [INFO][4966] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" HandleID="k8s-pod-network.1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" Workload="localhost-k8s-calico--apiserver--77f65f4854--jkr5j-eth0" Sep 6 00:16:43.645644 env[1225]: 2025-09-06 00:16:43.609 [INFO][4966] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:43.645644 env[1225]: 2025-09-06 00:16:43.609 [INFO][4966] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:43.645644 env[1225]: 2025-09-06 00:16:43.626 [WARNING][4966] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" HandleID="k8s-pod-network.1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" Workload="localhost-k8s-calico--apiserver--77f65f4854--jkr5j-eth0" Sep 6 00:16:43.645644 env[1225]: 2025-09-06 00:16:43.626 [INFO][4966] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" HandleID="k8s-pod-network.1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" Workload="localhost-k8s-calico--apiserver--77f65f4854--jkr5j-eth0" Sep 6 00:16:43.645644 env[1225]: 2025-09-06 00:16:43.630 [INFO][4966] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:43.645644 env[1225]: 2025-09-06 00:16:43.637 [INFO][4918] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e" Sep 6 00:16:43.646339 env[1225]: time="2025-09-06T00:16:43.645753659Z" level=info msg="TearDown network for sandbox \"1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e\" successfully" Sep 6 00:16:43.741342 env[1225]: time="2025-09-06T00:16:43.741255227Z" level=info msg="shim disconnected" id=40b36348a11bae63c4bcfdbf9c1a8481b22139f05363f8370e5286f6d87bf5f5 Sep 6 00:16:43.741342 env[1225]: time="2025-09-06T00:16:43.741342767Z" level=warning msg="cleaning up after shim disconnected" id=40b36348a11bae63c4bcfdbf9c1a8481b22139f05363f8370e5286f6d87bf5f5 namespace=k8s.io Sep 6 00:16:43.741342 env[1225]: time="2025-09-06T00:16:43.741356123Z" level=info msg="cleaning up dead shim" Sep 6 00:16:43.743852 env[1225]: time="2025-09-06T00:16:43.743075644Z" level=info msg="RemovePodSandbox \"1136146f1f5b9ef6e223ccc542f09d3f0c0e3697064819752e3766f8d7f5471e\" returns successfully" Sep 6 00:16:43.744129 env[1225]: time="2025-09-06T00:16:43.743898728Z" level=info msg="StopPodSandbox for \"59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12\"" Sep 6 00:16:43.761232 env[1225]: time="2025-09-06T00:16:43.757120139Z" level=info msg="StopContainer for \"c3d032c627b69ae595911dd1f215a03a1d8a2ee1cd0703855ff8e742550c8994\" returns successfully" Sep 6 00:16:43.773805 env[1225]: time="2025-09-06T00:16:43.773724383Z" level=warning msg="cleanup warnings time=\"2025-09-06T00:16:43Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4974 runtime=io.containerd.runc.v2\n" Sep 6 00:16:43.781002 env[1225]: time="2025-09-06T00:16:43.780894763Z" level=info msg="StopContainer for \"40b36348a11bae63c4bcfdbf9c1a8481b22139f05363f8370e5286f6d87bf5f5\" returns successfully" Sep 6 00:16:43.781706 env[1225]: time="2025-09-06T00:16:43.781655807Z" level=info msg="StopPodSandbox for \"9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1\"" Sep 6 00:16:43.781785 env[1225]: time="2025-09-06T00:16:43.781741654Z" level=info msg="Container to stop \"c3d032c627b69ae595911dd1f215a03a1d8a2ee1cd0703855ff8e742550c8994\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Sep 6 00:16:43.781785 env[1225]: time="2025-09-06T00:16:43.781773125Z" level=info msg="Container to stop \"40b36348a11bae63c4bcfdbf9c1a8481b22139f05363f8370e5286f6d87bf5f5\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Sep 6 00:16:43.801000 audit: BPF prog-id=139 op=UNLOAD Sep 6 00:16:43.803004 systemd[1]: cri-containerd-9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1.scope: Deactivated successfully. Sep 6 00:16:43.817000 audit: BPF prog-id=142 op=UNLOAD Sep 6 00:16:43.816344 systemd[1]: run-containerd-runc-k8s.io-40b36348a11bae63c4bcfdbf9c1a8481b22139f05363f8370e5286f6d87bf5f5-runc.2FD61c.mount: Deactivated successfully. Sep 6 00:16:43.816508 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-40b36348a11bae63c4bcfdbf9c1a8481b22139f05363f8370e5286f6d87bf5f5-rootfs.mount: Deactivated successfully. Sep 6 00:16:43.816617 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c3d032c627b69ae595911dd1f215a03a1d8a2ee1cd0703855ff8e742550c8994-rootfs.mount: Deactivated successfully. Sep 6 00:16:43.816715 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1-shm.mount: Deactivated successfully. Sep 6 00:16:43.854678 env[1225]: time="2025-09-06T00:16:43.850835036Z" level=info msg="shim disconnected" id=9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1 Sep 6 00:16:43.854678 env[1225]: time="2025-09-06T00:16:43.850921984Z" level=warning msg="cleaning up after shim disconnected" id=9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1 namespace=k8s.io Sep 6 00:16:43.854678 env[1225]: time="2025-09-06T00:16:43.850938526Z" level=info msg="cleaning up dead shim" Sep 6 00:16:43.853724 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1-rootfs.mount: Deactivated successfully. Sep 6 00:16:43.872363 env[1225]: time="2025-09-06T00:16:43.872101882Z" level=warning msg="cleanup warnings time=\"2025-09-06T00:16:43Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5029 runtime=io.containerd.runc.v2\n" Sep 6 00:16:43.907665 env[1225]: 2025-09-06 00:16:43.825 [WARNING][4992] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--pkfnl-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"5fcc5872-6420-4c35-9d81-fbabf8a0c640", ResourceVersion:"1024", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 16, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d37113f5bb32f68e4fe0dcf7d794d701b116fbbda18c39d445f9e46064fa4f17", Pod:"csi-node-driver-pkfnl", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali8aa260c569e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:43.907665 env[1225]: 2025-09-06 00:16:43.825 [INFO][4992] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" Sep 6 00:16:43.907665 env[1225]: 2025-09-06 00:16:43.825 [INFO][4992] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" iface="eth0" netns="" Sep 6 00:16:43.907665 env[1225]: 2025-09-06 00:16:43.826 [INFO][4992] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" Sep 6 00:16:43.907665 env[1225]: 2025-09-06 00:16:43.826 [INFO][4992] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" Sep 6 00:16:43.907665 env[1225]: 2025-09-06 00:16:43.871 [INFO][5016] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" HandleID="k8s-pod-network.59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" Workload="localhost-k8s-csi--node--driver--pkfnl-eth0" Sep 6 00:16:43.907665 env[1225]: 2025-09-06 00:16:43.871 [INFO][5016] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:43.907665 env[1225]: 2025-09-06 00:16:43.871 [INFO][5016] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:43.907665 env[1225]: 2025-09-06 00:16:43.884 [WARNING][5016] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" HandleID="k8s-pod-network.59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" Workload="localhost-k8s-csi--node--driver--pkfnl-eth0" Sep 6 00:16:43.907665 env[1225]: 2025-09-06 00:16:43.884 [INFO][5016] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" HandleID="k8s-pod-network.59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" Workload="localhost-k8s-csi--node--driver--pkfnl-eth0" Sep 6 00:16:43.907665 env[1225]: 2025-09-06 00:16:43.889 [INFO][5016] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:43.907665 env[1225]: 2025-09-06 00:16:43.893 [INFO][4992] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" Sep 6 00:16:43.908683 env[1225]: time="2025-09-06T00:16:43.907725609Z" level=info msg="TearDown network for sandbox \"59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12\" successfully" Sep 6 00:16:43.908683 env[1225]: time="2025-09-06T00:16:43.907814932Z" level=info msg="StopPodSandbox for \"59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12\" returns successfully" Sep 6 00:16:43.916508 env[1225]: time="2025-09-06T00:16:43.909546827Z" level=info msg="RemovePodSandbox for \"59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12\"" Sep 6 00:16:43.916508 env[1225]: time="2025-09-06T00:16:43.909593627Z" level=info msg="Forcibly stopping sandbox \"59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12\"" Sep 6 00:16:44.023719 kubelet[2030]: I0906 00:16:44.020264 2030 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-5697c6c69-p4xxr" podStartSLOduration=25.323771043 podStartE2EDuration="38.020235025s" podCreationTimestamp="2025-09-06 00:16:06 +0000 UTC" firstStartedPulling="2025-09-06 00:16:30.261805983 +0000 UTC m=+49.856030268" lastFinishedPulling="2025-09-06 00:16:42.958269955 +0000 UTC m=+62.552494250" observedRunningTime="2025-09-06 00:16:43.456113395 +0000 UTC m=+63.050337710" watchObservedRunningTime="2025-09-06 00:16:44.020235025 +0000 UTC m=+63.614459310" Sep 6 00:16:44.044083 systemd-networkd[1055]: calieab4fc827c7: Link DOWN Sep 6 00:16:44.044094 systemd-networkd[1055]: calieab4fc827c7: Lost carrier Sep 6 00:16:44.077000 audit[5095]: NETFILTER_CFG table=filter:118 family=2 entries=67 op=nft_register_rule pid=5095 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:16:44.077000 audit[5095]: SYSCALL arch=c000003e syscall=46 success=yes exit=8012 a0=3 a1=7ffc969cc470 a2=0 a3=7ffc969cc45c items=0 ppid=3701 pid=5095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:44.077000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:16:44.078000 audit[5095]: NETFILTER_CFG table=filter:119 family=2 entries=6 op=nft_unregister_chain pid=5095 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:16:44.078000 audit[5095]: SYSCALL arch=c000003e syscall=46 success=yes exit=880 a0=3 a1=7ffc969cc470 a2=0 a3=55adba072000 items=0 ppid=3701 pid=5095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:44.078000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:16:44.140551 env[1225]: 2025-09-06 00:16:43.987 [WARNING][5067] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--pkfnl-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"5fcc5872-6420-4c35-9d81-fbabf8a0c640", ResourceVersion:"1024", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 16, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d37113f5bb32f68e4fe0dcf7d794d701b116fbbda18c39d445f9e46064fa4f17", Pod:"csi-node-driver-pkfnl", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali8aa260c569e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:44.140551 env[1225]: 2025-09-06 00:16:43.988 [INFO][5067] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" Sep 6 00:16:44.140551 env[1225]: 2025-09-06 00:16:43.988 [INFO][5067] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" iface="eth0" netns="" Sep 6 00:16:44.140551 env[1225]: 2025-09-06 00:16:43.988 [INFO][5067] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" Sep 6 00:16:44.140551 env[1225]: 2025-09-06 00:16:43.988 [INFO][5067] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" Sep 6 00:16:44.140551 env[1225]: 2025-09-06 00:16:44.088 [INFO][5083] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" HandleID="k8s-pod-network.59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" Workload="localhost-k8s-csi--node--driver--pkfnl-eth0" Sep 6 00:16:44.140551 env[1225]: 2025-09-06 00:16:44.089 [INFO][5083] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:44.140551 env[1225]: 2025-09-06 00:16:44.093 [INFO][5083] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:44.140551 env[1225]: 2025-09-06 00:16:44.119 [WARNING][5083] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" HandleID="k8s-pod-network.59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" Workload="localhost-k8s-csi--node--driver--pkfnl-eth0" Sep 6 00:16:44.140551 env[1225]: 2025-09-06 00:16:44.119 [INFO][5083] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" HandleID="k8s-pod-network.59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" Workload="localhost-k8s-csi--node--driver--pkfnl-eth0" Sep 6 00:16:44.140551 env[1225]: 2025-09-06 00:16:44.126 [INFO][5083] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:44.140551 env[1225]: 2025-09-06 00:16:44.135 [INFO][5067] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12" Sep 6 00:16:44.140551 env[1225]: time="2025-09-06T00:16:44.139948205Z" level=info msg="TearDown network for sandbox \"59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12\" successfully" Sep 6 00:16:44.158674 env[1225]: time="2025-09-06T00:16:44.158527849Z" level=info msg="RemovePodSandbox \"59cf1172ea2b3ee078baac21ea4cbba37c6361736688c0efe48c290ae2fdca12\" returns successfully" Sep 6 00:16:44.161971 env[1225]: time="2025-09-06T00:16:44.161426351Z" level=info msg="StopPodSandbox for \"c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0\"" Sep 6 00:16:44.303965 env[1225]: 2025-09-06 00:16:44.033 [INFO][5066] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Sep 6 00:16:44.303965 env[1225]: 2025-09-06 00:16:44.033 [INFO][5066] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" iface="eth0" netns="/var/run/netns/cni-10337aba-7110-5c90-5606-8fc015a0a428" Sep 6 00:16:44.303965 env[1225]: 2025-09-06 00:16:44.034 [INFO][5066] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" iface="eth0" netns="/var/run/netns/cni-10337aba-7110-5c90-5606-8fc015a0a428" Sep 6 00:16:44.303965 env[1225]: 2025-09-06 00:16:44.077 [INFO][5066] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" after=43.537867ms iface="eth0" netns="/var/run/netns/cni-10337aba-7110-5c90-5606-8fc015a0a428" Sep 6 00:16:44.303965 env[1225]: 2025-09-06 00:16:44.077 [INFO][5066] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Sep 6 00:16:44.303965 env[1225]: 2025-09-06 00:16:44.077 [INFO][5066] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Sep 6 00:16:44.303965 env[1225]: 2025-09-06 00:16:44.122 [INFO][5097] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" HandleID="k8s-pod-network.9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Workload="localhost-k8s-whisker--5697c6c69--p4xxr-eth0" Sep 6 00:16:44.303965 env[1225]: 2025-09-06 00:16:44.122 [INFO][5097] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:44.303965 env[1225]: 2025-09-06 00:16:44.126 [INFO][5097] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:44.303965 env[1225]: 2025-09-06 00:16:44.288 [INFO][5097] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" HandleID="k8s-pod-network.9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Workload="localhost-k8s-whisker--5697c6c69--p4xxr-eth0" Sep 6 00:16:44.303965 env[1225]: 2025-09-06 00:16:44.288 [INFO][5097] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" HandleID="k8s-pod-network.9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Workload="localhost-k8s-whisker--5697c6c69--p4xxr-eth0" Sep 6 00:16:44.303965 env[1225]: 2025-09-06 00:16:44.297 [INFO][5097] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:44.303965 env[1225]: 2025-09-06 00:16:44.300 [INFO][5066] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Sep 6 00:16:44.309539 env[1225]: time="2025-09-06T00:16:44.304886447Z" level=info msg="TearDown network for sandbox \"9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1\" successfully" Sep 6 00:16:44.309539 env[1225]: time="2025-09-06T00:16:44.304935121Z" level=info msg="StopPodSandbox for \"9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1\" returns successfully" Sep 6 00:16:44.308969 systemd[1]: run-netns-cni\x2d10337aba\x2d7110\x2d5c90\x2d5606\x2d8fc015a0a428.mount: Deactivated successfully. Sep 6 00:16:44.366194 kubelet[2030]: I0906 00:16:44.365997 2030 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-xxm7j\" (UniqueName: \"kubernetes.io/projected/0282c0d0-6aac-469c-a14e-04b67dddca1b-kube-api-access-xxm7j\") pod \"0282c0d0-6aac-469c-a14e-04b67dddca1b\" (UID: \"0282c0d0-6aac-469c-a14e-04b67dddca1b\") " Sep 6 00:16:44.366194 kubelet[2030]: I0906 00:16:44.366092 2030 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/0282c0d0-6aac-469c-a14e-04b67dddca1b-whisker-backend-key-pair\") pod \"0282c0d0-6aac-469c-a14e-04b67dddca1b\" (UID: \"0282c0d0-6aac-469c-a14e-04b67dddca1b\") " Sep 6 00:16:44.366194 kubelet[2030]: I0906 00:16:44.366124 2030 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/0282c0d0-6aac-469c-a14e-04b67dddca1b-whisker-ca-bundle\") pod \"0282c0d0-6aac-469c-a14e-04b67dddca1b\" (UID: \"0282c0d0-6aac-469c-a14e-04b67dddca1b\") " Sep 6 00:16:44.370066 kubelet[2030]: I0906 00:16:44.369566 2030 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/0282c0d0-6aac-469c-a14e-04b67dddca1b-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "0282c0d0-6aac-469c-a14e-04b67dddca1b" (UID: "0282c0d0-6aac-469c-a14e-04b67dddca1b"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Sep 6 00:16:44.389531 systemd[1]: var-lib-kubelet-pods-0282c0d0\x2d6aac\x2d469c\x2da14e\x2d04b67dddca1b-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dxxm7j.mount: Deactivated successfully. Sep 6 00:16:44.392381 kubelet[2030]: I0906 00:16:44.392028 2030 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/0282c0d0-6aac-469c-a14e-04b67dddca1b-kube-api-access-xxm7j" (OuterVolumeSpecName: "kube-api-access-xxm7j") pod "0282c0d0-6aac-469c-a14e-04b67dddca1b" (UID: "0282c0d0-6aac-469c-a14e-04b67dddca1b"). InnerVolumeSpecName "kube-api-access-xxm7j". PluginName "kubernetes.io/projected", VolumeGIDValue "" Sep 6 00:16:44.406240 systemd[1]: var-lib-kubelet-pods-0282c0d0\x2d6aac\x2d469c\x2da14e\x2d04b67dddca1b-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Sep 6 00:16:44.416569 kubelet[2030]: I0906 00:16:44.416520 2030 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/0282c0d0-6aac-469c-a14e-04b67dddca1b-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "0282c0d0-6aac-469c-a14e-04b67dddca1b" (UID: "0282c0d0-6aac-469c-a14e-04b67dddca1b"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Sep 6 00:16:44.421702 env[1225]: 2025-09-06 00:16:44.299 [WARNING][5119] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--77f65f4854--prqvv-eth0", GenerateName:"calico-apiserver-77f65f4854-", Namespace:"calico-apiserver", SelfLink:"", UID:"bd47af89-ef90-4d72-a1f0-b0a4126e6c60", ResourceVersion:"1063", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 15, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"77f65f4854", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"3871a77cd7a4f68fe9e65aef4a28f03f19627e55100b8444f8e798d244672856", Pod:"calico-apiserver-77f65f4854-prqvv", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid4295291798", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:44.421702 env[1225]: 2025-09-06 00:16:44.299 [INFO][5119] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" Sep 6 00:16:44.421702 env[1225]: 2025-09-06 00:16:44.299 [INFO][5119] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" iface="eth0" netns="" Sep 6 00:16:44.421702 env[1225]: 2025-09-06 00:16:44.300 [INFO][5119] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" Sep 6 00:16:44.421702 env[1225]: 2025-09-06 00:16:44.300 [INFO][5119] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" Sep 6 00:16:44.421702 env[1225]: 2025-09-06 00:16:44.373 [INFO][5128] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" HandleID="k8s-pod-network.c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" Workload="localhost-k8s-calico--apiserver--77f65f4854--prqvv-eth0" Sep 6 00:16:44.421702 env[1225]: 2025-09-06 00:16:44.373 [INFO][5128] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:44.421702 env[1225]: 2025-09-06 00:16:44.373 [INFO][5128] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:44.421702 env[1225]: 2025-09-06 00:16:44.406 [WARNING][5128] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" HandleID="k8s-pod-network.c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" Workload="localhost-k8s-calico--apiserver--77f65f4854--prqvv-eth0" Sep 6 00:16:44.421702 env[1225]: 2025-09-06 00:16:44.406 [INFO][5128] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" HandleID="k8s-pod-network.c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" Workload="localhost-k8s-calico--apiserver--77f65f4854--prqvv-eth0" Sep 6 00:16:44.421702 env[1225]: 2025-09-06 00:16:44.412 [INFO][5128] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:44.421702 env[1225]: 2025-09-06 00:16:44.415 [INFO][5119] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" Sep 6 00:16:44.421702 env[1225]: time="2025-09-06T00:16:44.419434268Z" level=info msg="TearDown network for sandbox \"c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0\" successfully" Sep 6 00:16:44.421702 env[1225]: time="2025-09-06T00:16:44.419513211Z" level=info msg="StopPodSandbox for \"c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0\" returns successfully" Sep 6 00:16:44.422569 kubelet[2030]: I0906 00:16:44.419956 2030 scope.go:117] "RemoveContainer" containerID="40b36348a11bae63c4bcfdbf9c1a8481b22139f05363f8370e5286f6d87bf5f5" Sep 6 00:16:44.418000 audit[5138]: NETFILTER_CFG table=filter:120 family=2 entries=13 op=nft_register_rule pid=5138 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:44.423815 env[1225]: time="2025-09-06T00:16:44.423259844Z" level=info msg="RemovePodSandbox for \"c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0\"" Sep 6 00:16:44.423815 env[1225]: time="2025-09-06T00:16:44.423318817Z" level=info msg="Forcibly stopping sandbox \"c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0\"" Sep 6 00:16:44.428037 kernel: kauditd_printk_skb: 120 callbacks suppressed Sep 6 00:16:44.428200 kernel: audit: type=1325 audit(1757117804.418:1414): table=filter:120 family=2 entries=13 op=nft_register_rule pid=5138 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:44.426911 systemd[1]: Removed slice kubepods-besteffort-pod0282c0d0_6aac_469c_a14e_04b67dddca1b.slice. Sep 6 00:16:44.438545 kernel: audit: type=1300 audit(1757117804.418:1414): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff863427e0 a2=0 a3=7fff863427cc items=0 ppid=2180 pid=5138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:44.418000 audit[5138]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff863427e0 a2=0 a3=7fff863427cc items=0 ppid=2180 pid=5138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:44.439253 env[1225]: time="2025-09-06T00:16:44.431132593Z" level=info msg="RemoveContainer for \"40b36348a11bae63c4bcfdbf9c1a8481b22139f05363f8370e5286f6d87bf5f5\"" Sep 6 00:16:44.418000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:44.446056 kernel: audit: type=1327 audit(1757117804.418:1414): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:44.446000 audit[5138]: NETFILTER_CFG table=nat:121 family=2 entries=27 op=nft_unregister_chain pid=5138 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:44.455923 kubelet[2030]: I0906 00:16:44.452323 2030 scope.go:117] "RemoveContainer" containerID="c3d032c627b69ae595911dd1f215a03a1d8a2ee1cd0703855ff8e742550c8994" Sep 6 00:16:44.456114 kernel: audit: type=1325 audit(1757117804.446:1415): table=nat:121 family=2 entries=27 op=nft_unregister_chain pid=5138 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:44.456188 env[1225]: time="2025-09-06T00:16:44.451787384Z" level=info msg="RemoveContainer for \"40b36348a11bae63c4bcfdbf9c1a8481b22139f05363f8370e5286f6d87bf5f5\" returns successfully" Sep 6 00:16:44.446000 audit[5138]: SYSCALL arch=c000003e syscall=46 success=yes exit=6028 a0=3 a1=7fff863427e0 a2=0 a3=7fff863427cc items=0 ppid=2180 pid=5138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:44.462760 env[1225]: time="2025-09-06T00:16:44.460173698Z" level=info msg="RemoveContainer for \"c3d032c627b69ae595911dd1f215a03a1d8a2ee1cd0703855ff8e742550c8994\"" Sep 6 00:16:44.466046 kernel: audit: type=1300 audit(1757117804.446:1415): arch=c000003e syscall=46 success=yes exit=6028 a0=3 a1=7fff863427e0 a2=0 a3=7fff863427cc items=0 ppid=2180 pid=5138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:44.446000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:44.470810 kubelet[2030]: I0906 00:16:44.467375 2030 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-xxm7j\" (UniqueName: \"kubernetes.io/projected/0282c0d0-6aac-469c-a14e-04b67dddca1b-kube-api-access-xxm7j\") on node \"localhost\" DevicePath \"\"" Sep 6 00:16:44.470810 kubelet[2030]: I0906 00:16:44.467417 2030 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/0282c0d0-6aac-469c-a14e-04b67dddca1b-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Sep 6 00:16:44.470810 kubelet[2030]: I0906 00:16:44.467431 2030 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/0282c0d0-6aac-469c-a14e-04b67dddca1b-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Sep 6 00:16:44.471109 kernel: audit: type=1327 audit(1757117804.446:1415): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:44.536249 env[1225]: time="2025-09-06T00:16:44.536159945Z" level=info msg="RemoveContainer for \"c3d032c627b69ae595911dd1f215a03a1d8a2ee1cd0703855ff8e742550c8994\" returns successfully" Sep 6 00:16:44.536993 kubelet[2030]: I0906 00:16:44.536787 2030 scope.go:117] "RemoveContainer" containerID="40b36348a11bae63c4bcfdbf9c1a8481b22139f05363f8370e5286f6d87bf5f5" Sep 6 00:16:44.549767 env[1225]: time="2025-09-06T00:16:44.549467695Z" level=error msg="ContainerStatus for \"40b36348a11bae63c4bcfdbf9c1a8481b22139f05363f8370e5286f6d87bf5f5\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"40b36348a11bae63c4bcfdbf9c1a8481b22139f05363f8370e5286f6d87bf5f5\": not found" Sep 6 00:16:44.550614 kubelet[2030]: E0906 00:16:44.550355 2030 log.go:32] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"40b36348a11bae63c4bcfdbf9c1a8481b22139f05363f8370e5286f6d87bf5f5\": not found" containerID="40b36348a11bae63c4bcfdbf9c1a8481b22139f05363f8370e5286f6d87bf5f5" Sep 6 00:16:44.550614 kubelet[2030]: I0906 00:16:44.550416 2030 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"40b36348a11bae63c4bcfdbf9c1a8481b22139f05363f8370e5286f6d87bf5f5"} err="failed to get container status \"40b36348a11bae63c4bcfdbf9c1a8481b22139f05363f8370e5286f6d87bf5f5\": rpc error: code = NotFound desc = an error occurred when try to find container \"40b36348a11bae63c4bcfdbf9c1a8481b22139f05363f8370e5286f6d87bf5f5\": not found" Sep 6 00:16:44.550614 kubelet[2030]: I0906 00:16:44.550460 2030 scope.go:117] "RemoveContainer" containerID="c3d032c627b69ae595911dd1f215a03a1d8a2ee1cd0703855ff8e742550c8994" Sep 6 00:16:44.552358 env[1225]: time="2025-09-06T00:16:44.552263607Z" level=error msg="ContainerStatus for \"c3d032c627b69ae595911dd1f215a03a1d8a2ee1cd0703855ff8e742550c8994\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"c3d032c627b69ae595911dd1f215a03a1d8a2ee1cd0703855ff8e742550c8994\": not found" Sep 6 00:16:44.555186 kubelet[2030]: E0906 00:16:44.554934 2030 log.go:32] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"c3d032c627b69ae595911dd1f215a03a1d8a2ee1cd0703855ff8e742550c8994\": not found" containerID="c3d032c627b69ae595911dd1f215a03a1d8a2ee1cd0703855ff8e742550c8994" Sep 6 00:16:44.555186 kubelet[2030]: I0906 00:16:44.555007 2030 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"c3d032c627b69ae595911dd1f215a03a1d8a2ee1cd0703855ff8e742550c8994"} err="failed to get container status \"c3d032c627b69ae595911dd1f215a03a1d8a2ee1cd0703855ff8e742550c8994\": rpc error: code = NotFound desc = an error occurred when try to find container \"c3d032c627b69ae595911dd1f215a03a1d8a2ee1cd0703855ff8e742550c8994\": not found" Sep 6 00:16:44.555186 kubelet[2030]: I0906 00:16:44.555051 2030 scope.go:117] "RemoveContainer" containerID="40b36348a11bae63c4bcfdbf9c1a8481b22139f05363f8370e5286f6d87bf5f5" Sep 6 00:16:44.558054 kubelet[2030]: I0906 00:16:44.556012 2030 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"40b36348a11bae63c4bcfdbf9c1a8481b22139f05363f8370e5286f6d87bf5f5"} err="failed to get container status \"40b36348a11bae63c4bcfdbf9c1a8481b22139f05363f8370e5286f6d87bf5f5\": rpc error: code = NotFound desc = an error occurred when try to find container \"40b36348a11bae63c4bcfdbf9c1a8481b22139f05363f8370e5286f6d87bf5f5\": not found" Sep 6 00:16:44.558054 kubelet[2030]: I0906 00:16:44.556041 2030 scope.go:117] "RemoveContainer" containerID="c3d032c627b69ae595911dd1f215a03a1d8a2ee1cd0703855ff8e742550c8994" Sep 6 00:16:44.558158 env[1225]: time="2025-09-06T00:16:44.555782188Z" level=error msg="ContainerStatus for \"40b36348a11bae63c4bcfdbf9c1a8481b22139f05363f8370e5286f6d87bf5f5\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"40b36348a11bae63c4bcfdbf9c1a8481b22139f05363f8370e5286f6d87bf5f5\": not found" Sep 6 00:16:44.558158 env[1225]: time="2025-09-06T00:16:44.556264933Z" level=error msg="ContainerStatus for \"c3d032c627b69ae595911dd1f215a03a1d8a2ee1cd0703855ff8e742550c8994\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"c3d032c627b69ae595911dd1f215a03a1d8a2ee1cd0703855ff8e742550c8994\": not found" Sep 6 00:16:44.558577 kubelet[2030]: I0906 00:16:44.558495 2030 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"c3d032c627b69ae595911dd1f215a03a1d8a2ee1cd0703855ff8e742550c8994"} err="failed to get container status \"c3d032c627b69ae595911dd1f215a03a1d8a2ee1cd0703855ff8e742550c8994\": rpc error: code = NotFound desc = an error occurred when try to find container \"c3d032c627b69ae595911dd1f215a03a1d8a2ee1cd0703855ff8e742550c8994\": not found" Sep 6 00:16:44.618960 kubelet[2030]: I0906 00:16:44.617777 2030 memory_manager.go:355] "RemoveStaleState removing state" podUID="0282c0d0-6aac-469c-a14e-04b67dddca1b" containerName="whisker" Sep 6 00:16:44.618960 kubelet[2030]: I0906 00:16:44.617883 2030 memory_manager.go:355] "RemoveStaleState removing state" podUID="0282c0d0-6aac-469c-a14e-04b67dddca1b" containerName="whisker-backend" Sep 6 00:16:44.642458 systemd[1]: Created slice kubepods-besteffort-pod4b488397_885b_4569_91fc_052c60c2448b.slice. Sep 6 00:16:44.674682 kubelet[2030]: I0906 00:16:44.674517 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/4b488397-885b-4569-91fc-052c60c2448b-whisker-ca-bundle\") pod \"whisker-7484fc9d5b-5pvhz\" (UID: \"4b488397-885b-4569-91fc-052c60c2448b\") " pod="calico-system/whisker-7484fc9d5b-5pvhz" Sep 6 00:16:44.675090 kubelet[2030]: I0906 00:16:44.675062 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/4b488397-885b-4569-91fc-052c60c2448b-whisker-backend-key-pair\") pod \"whisker-7484fc9d5b-5pvhz\" (UID: \"4b488397-885b-4569-91fc-052c60c2448b\") " pod="calico-system/whisker-7484fc9d5b-5pvhz" Sep 6 00:16:44.676406 kubelet[2030]: I0906 00:16:44.675287 2030 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pn76s\" (UniqueName: \"kubernetes.io/projected/4b488397-885b-4569-91fc-052c60c2448b-kube-api-access-pn76s\") pod \"whisker-7484fc9d5b-5pvhz\" (UID: \"4b488397-885b-4569-91fc-052c60c2448b\") " pod="calico-system/whisker-7484fc9d5b-5pvhz" Sep 6 00:16:44.718946 kubelet[2030]: I0906 00:16:44.718359 2030 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="0282c0d0-6aac-469c-a14e-04b67dddca1b" path="/var/lib/kubelet/pods/0282c0d0-6aac-469c-a14e-04b67dddca1b/volumes" Sep 6 00:16:44.828295 env[1225]: 2025-09-06 00:16:44.680 [WARNING][5149] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--77f65f4854--prqvv-eth0", GenerateName:"calico-apiserver-77f65f4854-", Namespace:"calico-apiserver", SelfLink:"", UID:"bd47af89-ef90-4d72-a1f0-b0a4126e6c60", ResourceVersion:"1063", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 15, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"77f65f4854", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"3871a77cd7a4f68fe9e65aef4a28f03f19627e55100b8444f8e798d244672856", Pod:"calico-apiserver-77f65f4854-prqvv", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid4295291798", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:44.828295 env[1225]: 2025-09-06 00:16:44.680 [INFO][5149] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" Sep 6 00:16:44.828295 env[1225]: 2025-09-06 00:16:44.680 [INFO][5149] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" iface="eth0" netns="" Sep 6 00:16:44.828295 env[1225]: 2025-09-06 00:16:44.680 [INFO][5149] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" Sep 6 00:16:44.828295 env[1225]: 2025-09-06 00:16:44.680 [INFO][5149] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" Sep 6 00:16:44.828295 env[1225]: 2025-09-06 00:16:44.759 [INFO][5157] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" HandleID="k8s-pod-network.c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" Workload="localhost-k8s-calico--apiserver--77f65f4854--prqvv-eth0" Sep 6 00:16:44.828295 env[1225]: 2025-09-06 00:16:44.759 [INFO][5157] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:44.828295 env[1225]: 2025-09-06 00:16:44.759 [INFO][5157] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:44.828295 env[1225]: 2025-09-06 00:16:44.788 [WARNING][5157] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" HandleID="k8s-pod-network.c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" Workload="localhost-k8s-calico--apiserver--77f65f4854--prqvv-eth0" Sep 6 00:16:44.828295 env[1225]: 2025-09-06 00:16:44.788 [INFO][5157] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" HandleID="k8s-pod-network.c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" Workload="localhost-k8s-calico--apiserver--77f65f4854--prqvv-eth0" Sep 6 00:16:44.828295 env[1225]: 2025-09-06 00:16:44.795 [INFO][5157] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:44.828295 env[1225]: 2025-09-06 00:16:44.802 [INFO][5149] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0" Sep 6 00:16:44.828295 env[1225]: time="2025-09-06T00:16:44.825087674Z" level=info msg="TearDown network for sandbox \"c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0\" successfully" Sep 6 00:16:44.843472 env[1225]: time="2025-09-06T00:16:44.843377377Z" level=info msg="RemovePodSandbox \"c30a722aa1a0e8083a1494d74298eb6def04f245b8305be260f16e6ee12b71d0\" returns successfully" Sep 6 00:16:44.970953 env[1225]: time="2025-09-06T00:16:44.969208971Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7484fc9d5b-5pvhz,Uid:4b488397-885b-4569-91fc-052c60c2448b,Namespace:calico-system,Attempt:0,}" Sep 6 00:16:45.584682 systemd-networkd[1055]: cali3310364e81b: Link UP Sep 6 00:16:45.588024 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 6 00:16:45.588396 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali3310364e81b: link becomes ready Sep 6 00:16:45.589005 systemd-networkd[1055]: cali3310364e81b: Gained carrier Sep 6 00:16:45.624942 env[1225]: 2025-09-06 00:16:45.384 [INFO][5167] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--7484fc9d5b--5pvhz-eth0 whisker-7484fc9d5b- calico-system 4b488397-885b-4569-91fc-052c60c2448b 1128 0 2025-09-06 00:16:44 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:7484fc9d5b projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-7484fc9d5b-5pvhz eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali3310364e81b [] [] }} ContainerID="8b4489eff2a0d0e2182417736345a95ffa9931eb2083c883758c454887edaec5" Namespace="calico-system" Pod="whisker-7484fc9d5b-5pvhz" WorkloadEndpoint="localhost-k8s-whisker--7484fc9d5b--5pvhz-" Sep 6 00:16:45.624942 env[1225]: 2025-09-06 00:16:45.384 [INFO][5167] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8b4489eff2a0d0e2182417736345a95ffa9931eb2083c883758c454887edaec5" Namespace="calico-system" Pod="whisker-7484fc9d5b-5pvhz" WorkloadEndpoint="localhost-k8s-whisker--7484fc9d5b--5pvhz-eth0" Sep 6 00:16:45.624942 env[1225]: 2025-09-06 00:16:45.462 [INFO][5180] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8b4489eff2a0d0e2182417736345a95ffa9931eb2083c883758c454887edaec5" HandleID="k8s-pod-network.8b4489eff2a0d0e2182417736345a95ffa9931eb2083c883758c454887edaec5" Workload="localhost-k8s-whisker--7484fc9d5b--5pvhz-eth0" Sep 6 00:16:45.624942 env[1225]: 2025-09-06 00:16:45.462 [INFO][5180] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="8b4489eff2a0d0e2182417736345a95ffa9931eb2083c883758c454887edaec5" HandleID="k8s-pod-network.8b4489eff2a0d0e2182417736345a95ffa9931eb2083c883758c454887edaec5" Workload="localhost-k8s-whisker--7484fc9d5b--5pvhz-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00004f710), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-7484fc9d5b-5pvhz", "timestamp":"2025-09-06 00:16:45.462616335 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:16:45.624942 env[1225]: 2025-09-06 00:16:45.462 [INFO][5180] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:16:45.624942 env[1225]: 2025-09-06 00:16:45.463 [INFO][5180] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:16:45.624942 env[1225]: 2025-09-06 00:16:45.463 [INFO][5180] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 6 00:16:45.624942 env[1225]: 2025-09-06 00:16:45.475 [INFO][5180] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8b4489eff2a0d0e2182417736345a95ffa9931eb2083c883758c454887edaec5" host="localhost" Sep 6 00:16:45.624942 env[1225]: 2025-09-06 00:16:45.488 [INFO][5180] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 6 00:16:45.624942 env[1225]: 2025-09-06 00:16:45.504 [INFO][5180] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 6 00:16:45.624942 env[1225]: 2025-09-06 00:16:45.510 [INFO][5180] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 6 00:16:45.624942 env[1225]: 2025-09-06 00:16:45.519 [INFO][5180] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 6 00:16:45.624942 env[1225]: 2025-09-06 00:16:45.519 [INFO][5180] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.8b4489eff2a0d0e2182417736345a95ffa9931eb2083c883758c454887edaec5" host="localhost" Sep 6 00:16:45.624942 env[1225]: 2025-09-06 00:16:45.528 [INFO][5180] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.8b4489eff2a0d0e2182417736345a95ffa9931eb2083c883758c454887edaec5 Sep 6 00:16:45.624942 env[1225]: 2025-09-06 00:16:45.543 [INFO][5180] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.8b4489eff2a0d0e2182417736345a95ffa9931eb2083c883758c454887edaec5" host="localhost" Sep 6 00:16:45.624942 env[1225]: 2025-09-06 00:16:45.560 [INFO][5180] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.137/26] block=192.168.88.128/26 handle="k8s-pod-network.8b4489eff2a0d0e2182417736345a95ffa9931eb2083c883758c454887edaec5" host="localhost" Sep 6 00:16:45.624942 env[1225]: 2025-09-06 00:16:45.560 [INFO][5180] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.137/26] handle="k8s-pod-network.8b4489eff2a0d0e2182417736345a95ffa9931eb2083c883758c454887edaec5" host="localhost" Sep 6 00:16:45.624942 env[1225]: 2025-09-06 00:16:45.560 [INFO][5180] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:16:45.624942 env[1225]: 2025-09-06 00:16:45.560 [INFO][5180] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.137/26] IPv6=[] ContainerID="8b4489eff2a0d0e2182417736345a95ffa9931eb2083c883758c454887edaec5" HandleID="k8s-pod-network.8b4489eff2a0d0e2182417736345a95ffa9931eb2083c883758c454887edaec5" Workload="localhost-k8s-whisker--7484fc9d5b--5pvhz-eth0" Sep 6 00:16:45.626197 env[1225]: 2025-09-06 00:16:45.568 [INFO][5167] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8b4489eff2a0d0e2182417736345a95ffa9931eb2083c883758c454887edaec5" Namespace="calico-system" Pod="whisker-7484fc9d5b-5pvhz" WorkloadEndpoint="localhost-k8s-whisker--7484fc9d5b--5pvhz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--7484fc9d5b--5pvhz-eth0", GenerateName:"whisker-7484fc9d5b-", Namespace:"calico-system", SelfLink:"", UID:"4b488397-885b-4569-91fc-052c60c2448b", ResourceVersion:"1128", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 16, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"7484fc9d5b", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-7484fc9d5b-5pvhz", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali3310364e81b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:45.626197 env[1225]: 2025-09-06 00:16:45.568 [INFO][5167] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.137/32] ContainerID="8b4489eff2a0d0e2182417736345a95ffa9931eb2083c883758c454887edaec5" Namespace="calico-system" Pod="whisker-7484fc9d5b-5pvhz" WorkloadEndpoint="localhost-k8s-whisker--7484fc9d5b--5pvhz-eth0" Sep 6 00:16:45.626197 env[1225]: 2025-09-06 00:16:45.568 [INFO][5167] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali3310364e81b ContainerID="8b4489eff2a0d0e2182417736345a95ffa9931eb2083c883758c454887edaec5" Namespace="calico-system" Pod="whisker-7484fc9d5b-5pvhz" WorkloadEndpoint="localhost-k8s-whisker--7484fc9d5b--5pvhz-eth0" Sep 6 00:16:45.626197 env[1225]: 2025-09-06 00:16:45.589 [INFO][5167] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8b4489eff2a0d0e2182417736345a95ffa9931eb2083c883758c454887edaec5" Namespace="calico-system" Pod="whisker-7484fc9d5b-5pvhz" WorkloadEndpoint="localhost-k8s-whisker--7484fc9d5b--5pvhz-eth0" Sep 6 00:16:45.626197 env[1225]: 2025-09-06 00:16:45.590 [INFO][5167] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8b4489eff2a0d0e2182417736345a95ffa9931eb2083c883758c454887edaec5" Namespace="calico-system" Pod="whisker-7484fc9d5b-5pvhz" WorkloadEndpoint="localhost-k8s-whisker--7484fc9d5b--5pvhz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--7484fc9d5b--5pvhz-eth0", GenerateName:"whisker-7484fc9d5b-", Namespace:"calico-system", SelfLink:"", UID:"4b488397-885b-4569-91fc-052c60c2448b", ResourceVersion:"1128", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 16, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"7484fc9d5b", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8b4489eff2a0d0e2182417736345a95ffa9931eb2083c883758c454887edaec5", Pod:"whisker-7484fc9d5b-5pvhz", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali3310364e81b", MAC:"22:5d:75:24:af:35", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:16:45.626197 env[1225]: 2025-09-06 00:16:45.619 [INFO][5167] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8b4489eff2a0d0e2182417736345a95ffa9931eb2083c883758c454887edaec5" Namespace="calico-system" Pod="whisker-7484fc9d5b-5pvhz" WorkloadEndpoint="localhost-k8s-whisker--7484fc9d5b--5pvhz-eth0" Sep 6 00:16:45.653000 audit[5197]: NETFILTER_CFG table=filter:122 family=2 entries=73 op=nft_register_chain pid=5197 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:16:45.653000 audit[5197]: SYSCALL arch=c000003e syscall=46 success=yes exit=38792 a0=3 a1=7ffe3fa4d690 a2=0 a3=7ffe3fa4d67c items=0 ppid=3701 pid=5197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:45.664213 kernel: audit: type=1325 audit(1757117805.653:1416): table=filter:122 family=2 entries=73 op=nft_register_chain pid=5197 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:16:45.664278 kernel: audit: type=1300 audit(1757117805.653:1416): arch=c000003e syscall=46 success=yes exit=38792 a0=3 a1=7ffe3fa4d690 a2=0 a3=7ffe3fa4d67c items=0 ppid=3701 pid=5197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:45.664303 kernel: audit: type=1327 audit(1757117805.653:1416): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:16:45.653000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:16:45.671463 env[1225]: time="2025-09-06T00:16:45.671383333Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:16:45.671463 env[1225]: time="2025-09-06T00:16:45.671463068Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:16:45.672526 env[1225]: time="2025-09-06T00:16:45.671488797Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:16:45.672526 env[1225]: time="2025-09-06T00:16:45.671673073Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8b4489eff2a0d0e2182417736345a95ffa9931eb2083c883758c454887edaec5 pid=5204 runtime=io.containerd.runc.v2 Sep 6 00:16:45.712071 systemd[1]: Started cri-containerd-8b4489eff2a0d0e2182417736345a95ffa9931eb2083c883758c454887edaec5.scope. Sep 6 00:16:45.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.751346 kernel: audit: type=1400 audit(1757117805.743:1417): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.752000 audit: BPF prog-id=216 op=LOAD Sep 6 00:16:45.754000 audit[5214]: AVC avc: denied { bpf } for pid=5214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.754000 audit[5214]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=5204 pid=5214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:45.754000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862343438396566663261306430653231383234313737333633343561 Sep 6 00:16:45.754000 audit[5214]: AVC avc: denied { perfmon } for pid=5214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.754000 audit[5214]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=5204 pid=5214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:45.754000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862343438396566663261306430653231383234313737333633343561 Sep 6 00:16:45.754000 audit[5214]: AVC avc: denied { bpf } for pid=5214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.754000 audit[5214]: AVC avc: denied { bpf } for pid=5214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.754000 audit[5214]: AVC avc: denied { bpf } for pid=5214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.754000 audit[5214]: AVC avc: denied { perfmon } for pid=5214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.754000 audit[5214]: AVC avc: denied { perfmon } for pid=5214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.754000 audit[5214]: AVC avc: denied { perfmon } for pid=5214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.754000 audit[5214]: AVC avc: denied { perfmon } for pid=5214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.754000 audit[5214]: AVC avc: denied { perfmon } for pid=5214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.754000 audit[5214]: AVC avc: denied { bpf } for pid=5214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.754000 audit[5214]: AVC avc: denied { bpf } for pid=5214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.754000 audit: BPF prog-id=217 op=LOAD Sep 6 00:16:45.754000 audit[5214]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003c0710 items=0 ppid=5204 pid=5214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:45.754000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862343438396566663261306430653231383234313737333633343561 Sep 6 00:16:45.758000 audit[5214]: AVC avc: denied { bpf } for pid=5214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.758000 audit[5214]: AVC avc: denied { bpf } for pid=5214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.758000 audit[5214]: AVC avc: denied { perfmon } for pid=5214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.758000 audit[5214]: AVC avc: denied { perfmon } for pid=5214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.758000 audit[5214]: AVC avc: denied { perfmon } for pid=5214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.758000 audit[5214]: AVC avc: denied { perfmon } for pid=5214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.758000 audit[5214]: AVC avc: denied { perfmon } for pid=5214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.758000 audit[5214]: AVC avc: denied { bpf } for pid=5214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.758000 audit[5214]: AVC avc: denied { bpf } for pid=5214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.758000 audit: BPF prog-id=218 op=LOAD Sep 6 00:16:45.758000 audit[5214]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003c0758 items=0 ppid=5204 pid=5214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:45.758000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862343438396566663261306430653231383234313737333633343561 Sep 6 00:16:45.767000 audit: BPF prog-id=218 op=UNLOAD Sep 6 00:16:45.767000 audit: BPF prog-id=217 op=UNLOAD Sep 6 00:16:45.767000 audit[5214]: AVC avc: denied { bpf } for pid=5214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.767000 audit[5214]: AVC avc: denied { bpf } for pid=5214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.767000 audit[5214]: AVC avc: denied { bpf } for pid=5214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.767000 audit[5214]: AVC avc: denied { perfmon } for pid=5214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.767000 audit[5214]: AVC avc: denied { perfmon } for pid=5214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.767000 audit[5214]: AVC avc: denied { perfmon } for pid=5214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.767000 audit[5214]: AVC avc: denied { perfmon } for pid=5214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.767000 audit[5214]: AVC avc: denied { perfmon } for pid=5214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.767000 audit[5214]: AVC avc: denied { bpf } for pid=5214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.767000 audit[5214]: AVC avc: denied { bpf } for pid=5214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:45.767000 audit: BPF prog-id=219 op=LOAD Sep 6 00:16:45.767000 audit[5214]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003c0b68 items=0 ppid=5204 pid=5214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:45.767000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862343438396566663261306430653231383234313737333633343561 Sep 6 00:16:45.779088 systemd-resolved[1178]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 6 00:16:45.850807 env[1225]: time="2025-09-06T00:16:45.850563029Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7484fc9d5b-5pvhz,Uid:4b488397-885b-4569-91fc-052c60c2448b,Namespace:calico-system,Attempt:0,} returns sandbox id \"8b4489eff2a0d0e2182417736345a95ffa9931eb2083c883758c454887edaec5\"" Sep 6 00:16:45.861747 env[1225]: time="2025-09-06T00:16:45.861496268Z" level=info msg="CreateContainer within sandbox \"8b4489eff2a0d0e2182417736345a95ffa9931eb2083c883758c454887edaec5\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Sep 6 00:16:45.921525 env[1225]: time="2025-09-06T00:16:45.921409251Z" level=info msg="CreateContainer within sandbox \"8b4489eff2a0d0e2182417736345a95ffa9931eb2083c883758c454887edaec5\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"678269c757ed482bd826f5047edb49e608c19fe997b0b866482c955b98105fa9\"" Sep 6 00:16:45.922545 env[1225]: time="2025-09-06T00:16:45.922503397Z" level=info msg="StartContainer for \"678269c757ed482bd826f5047edb49e608c19fe997b0b866482c955b98105fa9\"" Sep 6 00:16:45.981354 systemd[1]: Started cri-containerd-678269c757ed482bd826f5047edb49e608c19fe997b0b866482c955b98105fa9.scope. Sep 6 00:16:46.009000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.009000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.009000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.009000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.009000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.009000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.009000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.009000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.009000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.011000 audit: BPF prog-id=220 op=LOAD Sep 6 00:16:46.011000 audit[5244]: AVC avc: denied { bpf } for pid=5244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.011000 audit[5244]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bfc48 a2=10 a3=1c items=0 ppid=5204 pid=5244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:46.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637383236396337353765643438326264383236663530343765646234 Sep 6 00:16:46.011000 audit[5244]: AVC avc: denied { perfmon } for pid=5244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.011000 audit[5244]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bf6b0 a2=3c a3=8 items=0 ppid=5204 pid=5244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:46.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637383236396337353765643438326264383236663530343765646234 Sep 6 00:16:46.012000 audit[5244]: AVC avc: denied { bpf } for pid=5244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.012000 audit[5244]: AVC avc: denied { bpf } for pid=5244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.012000 audit[5244]: AVC avc: denied { bpf } for pid=5244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.012000 audit[5244]: AVC avc: denied { perfmon } for pid=5244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.012000 audit[5244]: AVC avc: denied { perfmon } for pid=5244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.012000 audit[5244]: AVC avc: denied { perfmon } for pid=5244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.012000 audit[5244]: AVC avc: denied { perfmon } for pid=5244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.012000 audit[5244]: AVC avc: denied { perfmon } for pid=5244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.012000 audit[5244]: AVC avc: denied { bpf } for pid=5244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.012000 audit[5244]: AVC avc: denied { bpf } for pid=5244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.012000 audit: BPF prog-id=221 op=LOAD Sep 6 00:16:46.012000 audit[5244]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bf9d8 a2=78 a3=c0000a8a30 items=0 ppid=5204 pid=5244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:46.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637383236396337353765643438326264383236663530343765646234 Sep 6 00:16:46.014000 audit[5244]: AVC avc: denied { bpf } for pid=5244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.014000 audit[5244]: AVC avc: denied { bpf } for pid=5244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.014000 audit[5244]: AVC avc: denied { perfmon } for pid=5244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.014000 audit[5244]: AVC avc: denied { perfmon } for pid=5244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.014000 audit[5244]: AVC avc: denied { perfmon } for pid=5244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.014000 audit[5244]: AVC avc: denied { perfmon } for pid=5244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.014000 audit[5244]: AVC avc: denied { perfmon } for pid=5244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.014000 audit[5244]: AVC avc: denied { bpf } for pid=5244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.014000 audit[5244]: AVC avc: denied { bpf } for pid=5244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.014000 audit: BPF prog-id=222 op=LOAD Sep 6 00:16:46.014000 audit[5244]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bf770 a2=78 a3=c0000a8a78 items=0 ppid=5204 pid=5244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:46.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637383236396337353765643438326264383236663530343765646234 Sep 6 00:16:46.017000 audit: BPF prog-id=222 op=UNLOAD Sep 6 00:16:46.017000 audit: BPF prog-id=221 op=UNLOAD Sep 6 00:16:46.017000 audit[5244]: AVC avc: denied { bpf } for pid=5244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.017000 audit[5244]: AVC avc: denied { bpf } for pid=5244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.017000 audit[5244]: AVC avc: denied { bpf } for pid=5244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.017000 audit[5244]: AVC avc: denied { perfmon } for pid=5244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.017000 audit[5244]: AVC avc: denied { perfmon } for pid=5244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.017000 audit[5244]: AVC avc: denied { perfmon } for pid=5244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.017000 audit[5244]: AVC avc: denied { perfmon } for pid=5244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.017000 audit[5244]: AVC avc: denied { perfmon } for pid=5244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.017000 audit[5244]: AVC avc: denied { bpf } for pid=5244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.017000 audit[5244]: AVC avc: denied { bpf } for pid=5244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.017000 audit: BPF prog-id=223 op=LOAD Sep 6 00:16:46.017000 audit[5244]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bfc30 a2=78 a3=c0000a8e88 items=0 ppid=5204 pid=5244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:46.017000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637383236396337353765643438326264383236663530343765646234 Sep 6 00:16:46.088519 env[1225]: time="2025-09-06T00:16:46.088413499Z" level=info msg="StartContainer for \"678269c757ed482bd826f5047edb49e608c19fe997b0b866482c955b98105fa9\" returns successfully" Sep 6 00:16:46.100112 env[1225]: time="2025-09-06T00:16:46.098600160Z" level=info msg="CreateContainer within sandbox \"8b4489eff2a0d0e2182417736345a95ffa9931eb2083c883758c454887edaec5\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Sep 6 00:16:46.157000 audit[5255]: AVC avc: denied { search } for pid=5255 comm="nginx" name="crypto" dev="proc" ino=30715 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c749 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Sep 6 00:16:46.157000 audit[5255]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fbe9f8f0728 a2=0 a3=0 items=0 ppid=5204 pid=5255 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c749 key=(null) Sep 6 00:16:46.157000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Sep 6 00:16:46.165190 env[1225]: time="2025-09-06T00:16:46.165079948Z" level=info msg="CreateContainer within sandbox \"8b4489eff2a0d0e2182417736345a95ffa9931eb2083c883758c454887edaec5\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"863aa346607445952e9a68e12407ac4b652ce3d3432023e75cfd0c27771139e6\"" Sep 6 00:16:46.167989 env[1225]: time="2025-09-06T00:16:46.167875322Z" level=info msg="StartContainer for \"863aa346607445952e9a68e12407ac4b652ce3d3432023e75cfd0c27771139e6\"" Sep 6 00:16:46.221586 systemd[1]: Started cri-containerd-863aa346607445952e9a68e12407ac4b652ce3d3432023e75cfd0c27771139e6.scope. Sep 6 00:16:46.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.247000 audit: BPF prog-id=224 op=LOAD Sep 6 00:16:46.248000 audit[5283]: AVC avc: denied { bpf } for pid=5283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.248000 audit[5283]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=5204 pid=5283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:46.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836336161333436363037343435393532653961363865313234303761 Sep 6 00:16:46.248000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.248000 audit[5283]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=5204 pid=5283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:46.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836336161333436363037343435393532653961363865313234303761 Sep 6 00:16:46.248000 audit[5283]: AVC avc: denied { bpf } for pid=5283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.248000 audit[5283]: AVC avc: denied { bpf } for pid=5283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.248000 audit[5283]: AVC avc: denied { bpf } for pid=5283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.248000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.248000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.248000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.248000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.248000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.248000 audit[5283]: AVC avc: denied { bpf } for pid=5283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.248000 audit[5283]: AVC avc: denied { bpf } for pid=5283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.248000 audit: BPF prog-id=225 op=LOAD Sep 6 00:16:46.248000 audit[5283]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000a73c0 items=0 ppid=5204 pid=5283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:46.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836336161333436363037343435393532653961363865313234303761 Sep 6 00:16:46.248000 audit[5283]: AVC avc: denied { bpf } for pid=5283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.248000 audit[5283]: AVC avc: denied { bpf } for pid=5283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.248000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.248000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.248000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.248000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.248000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.248000 audit[5283]: AVC avc: denied { bpf } for pid=5283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.248000 audit[5283]: AVC avc: denied { bpf } for pid=5283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.248000 audit: BPF prog-id=226 op=LOAD Sep 6 00:16:46.248000 audit[5283]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000a7408 items=0 ppid=5204 pid=5283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:46.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836336161333436363037343435393532653961363865313234303761 Sep 6 00:16:46.248000 audit: BPF prog-id=226 op=UNLOAD Sep 6 00:16:46.248000 audit: BPF prog-id=225 op=UNLOAD Sep 6 00:16:46.248000 audit[5283]: AVC avc: denied { bpf } for pid=5283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.248000 audit[5283]: AVC avc: denied { bpf } for pid=5283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.248000 audit[5283]: AVC avc: denied { bpf } for pid=5283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.248000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.248000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.248000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.248000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.248000 audit[5283]: AVC avc: denied { perfmon } for pid=5283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.248000 audit[5283]: AVC avc: denied { bpf } for pid=5283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.248000 audit[5283]: AVC avc: denied { bpf } for pid=5283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:46.248000 audit: BPF prog-id=227 op=LOAD Sep 6 00:16:46.248000 audit[5283]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0000a7818 items=0 ppid=5204 pid=5283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:46.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836336161333436363037343435393532653961363865313234303761 Sep 6 00:16:46.438904 env[1225]: time="2025-09-06T00:16:46.432750733Z" level=info msg="StartContainer for \"863aa346607445952e9a68e12407ac4b652ce3d3432023e75cfd0c27771139e6\" returns successfully" Sep 6 00:16:46.535296 kubelet[2030]: I0906 00:16:46.532561 2030 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-7484fc9d5b-5pvhz" podStartSLOduration=2.532536361 podStartE2EDuration="2.532536361s" podCreationTimestamp="2025-09-06 00:16:44 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 00:16:46.523744106 +0000 UTC m=+66.117968391" watchObservedRunningTime="2025-09-06 00:16:46.532536361 +0000 UTC m=+66.126760646" Sep 6 00:16:46.565000 audit[5316]: NETFILTER_CFG table=filter:123 family=2 entries=13 op=nft_register_rule pid=5316 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:46.565000 audit[5316]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fff963fee80 a2=0 a3=7fff963fee6c items=0 ppid=2180 pid=5316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:46.565000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:46.573000 audit[5316]: NETFILTER_CFG table=nat:124 family=2 entries=27 op=nft_register_chain pid=5316 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:46.573000 audit[5316]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7fff963fee80 a2=0 a3=7fff963fee6c items=0 ppid=2180 pid=5316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:46.573000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:46.820798 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2930713809.mount: Deactivated successfully. Sep 6 00:16:47.246683 systemd[1]: run-containerd-runc-k8s.io-954a341ac06695ba147e773491e7cf897d51750ea488cdfbe4c34a542eec2b1e-runc.XQY8uA.mount: Deactivated successfully. Sep 6 00:16:47.298279 systemd-networkd[1055]: cali3310364e81b: Gained IPv6LL Sep 6 00:16:47.793678 env[1225]: time="2025-09-06T00:16:47.793343417Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:47.800010 env[1225]: time="2025-09-06T00:16:47.798515578Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a7d029fd8f6be94c26af980675c1650818e1e6e19dbd2f8c13e6e61963f021e8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:47.810939 env[1225]: time="2025-09-06T00:16:47.805535418Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:47.810939 env[1225]: time="2025-09-06T00:16:47.809709271Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\" returns image reference \"sha256:a7d029fd8f6be94c26af980675c1650818e1e6e19dbd2f8c13e6e61963f021e8\"" Sep 6 00:16:47.815949 env[1225]: time="2025-09-06T00:16:47.815874060Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:46297703ab3739331a00a58f0d6a5498c8d3b6523ad947eed68592ee0f3e79f0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:47.823004 env[1225]: time="2025-09-06T00:16:47.822928568Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 6 00:16:47.824694 env[1225]: time="2025-09-06T00:16:47.824645455Z" level=info msg="CreateContainer within sandbox \"212472866f0ee4f17ccb2b7d850f004f1f7bd8fb9cd1dbef717125927f7a7cd5\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Sep 6 00:16:48.018768 env[1225]: time="2025-09-06T00:16:48.014103654Z" level=info msg="CreateContainer within sandbox \"212472866f0ee4f17ccb2b7d850f004f1f7bd8fb9cd1dbef717125927f7a7cd5\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"7bc34d81ce837d56eb1ec0dd63c8a768b41c85afa9b58ca36c0980ee702298fb\"" Sep 6 00:16:48.019773 env[1225]: time="2025-09-06T00:16:48.019689749Z" level=info msg="StartContainer for \"7bc34d81ce837d56eb1ec0dd63c8a768b41c85afa9b58ca36c0980ee702298fb\"" Sep 6 00:16:48.094491 systemd[1]: Started cri-containerd-7bc34d81ce837d56eb1ec0dd63c8a768b41c85afa9b58ca36c0980ee702298fb.scope. Sep 6 00:16:48.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.135000 audit: BPF prog-id=228 op=LOAD Sep 6 00:16:48.136000 audit[5347]: AVC avc: denied { bpf } for pid=5347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.136000 audit[5347]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4146 pid=5347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:48.136000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762633334643831636538333764353665623165633064643633633861 Sep 6 00:16:48.136000 audit[5347]: AVC avc: denied { perfmon } for pid=5347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.136000 audit[5347]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4146 pid=5347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:48.136000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762633334643831636538333764353665623165633064643633633861 Sep 6 00:16:48.136000 audit[5347]: AVC avc: denied { bpf } for pid=5347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.136000 audit[5347]: AVC avc: denied { bpf } for pid=5347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.136000 audit[5347]: AVC avc: denied { bpf } for pid=5347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.136000 audit[5347]: AVC avc: denied { perfmon } for pid=5347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.136000 audit[5347]: AVC avc: denied { perfmon } for pid=5347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.136000 audit[5347]: AVC avc: denied { perfmon } for pid=5347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.136000 audit[5347]: AVC avc: denied { perfmon } for pid=5347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.136000 audit[5347]: AVC avc: denied { perfmon } for pid=5347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.136000 audit[5347]: AVC avc: denied { bpf } for pid=5347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.136000 audit[5347]: AVC avc: denied { bpf } for pid=5347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.136000 audit: BPF prog-id=229 op=LOAD Sep 6 00:16:48.136000 audit[5347]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00021f1f0 items=0 ppid=4146 pid=5347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:48.136000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762633334643831636538333764353665623165633064643633633861 Sep 6 00:16:48.139000 audit[5347]: AVC avc: denied { bpf } for pid=5347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.139000 audit[5347]: AVC avc: denied { bpf } for pid=5347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.139000 audit[5347]: AVC avc: denied { perfmon } for pid=5347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.139000 audit[5347]: AVC avc: denied { perfmon } for pid=5347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.139000 audit[5347]: AVC avc: denied { perfmon } for pid=5347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.139000 audit[5347]: AVC avc: denied { perfmon } for pid=5347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.139000 audit[5347]: AVC avc: denied { perfmon } for pid=5347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.139000 audit[5347]: AVC avc: denied { bpf } for pid=5347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.139000 audit[5347]: AVC avc: denied { bpf } for pid=5347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.139000 audit: BPF prog-id=230 op=LOAD Sep 6 00:16:48.139000 audit[5347]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00021f238 items=0 ppid=4146 pid=5347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:48.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762633334643831636538333764353665623165633064643633633861 Sep 6 00:16:48.140000 audit: BPF prog-id=230 op=UNLOAD Sep 6 00:16:48.140000 audit: BPF prog-id=229 op=UNLOAD Sep 6 00:16:48.140000 audit[5347]: AVC avc: denied { bpf } for pid=5347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.140000 audit[5347]: AVC avc: denied { bpf } for pid=5347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.140000 audit[5347]: AVC avc: denied { bpf } for pid=5347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.140000 audit[5347]: AVC avc: denied { perfmon } for pid=5347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.140000 audit[5347]: AVC avc: denied { perfmon } for pid=5347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.140000 audit[5347]: AVC avc: denied { perfmon } for pid=5347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.140000 audit[5347]: AVC avc: denied { perfmon } for pid=5347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.140000 audit[5347]: AVC avc: denied { perfmon } for pid=5347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.140000 audit[5347]: AVC avc: denied { bpf } for pid=5347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.140000 audit[5347]: AVC avc: denied { bpf } for pid=5347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:48.140000 audit: BPF prog-id=231 op=LOAD Sep 6 00:16:48.140000 audit[5347]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00021f648 items=0 ppid=4146 pid=5347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:48.140000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762633334643831636538333764353665623165633064643633633861 Sep 6 00:16:48.346786 env[1225]: time="2025-09-06T00:16:48.346564376Z" level=info msg="StartContainer for \"7bc34d81ce837d56eb1ec0dd63c8a768b41c85afa9b58ca36c0980ee702298fb\" returns successfully" Sep 6 00:16:48.561800 kubelet[2030]: I0906 00:16:48.560000 2030 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-54d579b49d-tdxp6" podStartSLOduration=33.756645722 podStartE2EDuration="48.559955309s" podCreationTimestamp="2025-09-06 00:16:00 +0000 UTC" firstStartedPulling="2025-09-06 00:16:33.013539867 +0000 UTC m=+52.607764152" lastFinishedPulling="2025-09-06 00:16:47.816849454 +0000 UTC m=+67.411073739" observedRunningTime="2025-09-06 00:16:48.557946882 +0000 UTC m=+68.152171167" watchObservedRunningTime="2025-09-06 00:16:48.559955309 +0000 UTC m=+68.154179594" Sep 6 00:16:48.588000 audit[5391]: NETFILTER_CFG table=filter:125 family=2 entries=12 op=nft_register_rule pid=5391 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:48.588000 audit[5391]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffdd0a7f250 a2=0 a3=7ffdd0a7f23c items=0 ppid=2180 pid=5391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:48.588000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:48.597000 audit[5391]: NETFILTER_CFG table=nat:126 family=2 entries=22 op=nft_register_rule pid=5391 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:48.597000 audit[5391]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffdd0a7f250 a2=0 a3=7ffdd0a7f23c items=0 ppid=2180 pid=5391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:48.597000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:49.703775 kubelet[2030]: E0906 00:16:49.703694 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:16:50.574562 systemd[1]: run-containerd-runc-k8s.io-7bc34d81ce837d56eb1ec0dd63c8a768b41c85afa9b58ca36c0980ee702298fb-runc.tYQ9Yc.mount: Deactivated successfully. Sep 6 00:16:53.222721 env[1225]: time="2025-09-06T00:16:53.221002812Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:53.222721 env[1225]: time="2025-09-06T00:16:53.221920058Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:53.224816 env[1225]: time="2025-09-06T00:16:53.224732180Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:53.231343 env[1225]: time="2025-09-06T00:16:53.231260867Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:53.232252 env[1225]: time="2025-09-06T00:16:53.232165870Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a\"" Sep 6 00:16:53.243127 env[1225]: time="2025-09-06T00:16:53.241746822Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 6 00:16:53.245425 env[1225]: time="2025-09-06T00:16:53.245375567Z" level=info msg="CreateContainer within sandbox \"b223ad4db057a55ee23f0cfdcc4865ef480e21d8897abac6c282ef659145d149\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 6 00:16:53.317120 env[1225]: time="2025-09-06T00:16:53.317015887Z" level=info msg="CreateContainer within sandbox \"b223ad4db057a55ee23f0cfdcc4865ef480e21d8897abac6c282ef659145d149\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"80c02be46d3f4c3677344e809c47a89716556ef02ecbdf7f8d89169924c7c178\"" Sep 6 00:16:53.321263 env[1225]: time="2025-09-06T00:16:53.321208587Z" level=info msg="StartContainer for \"80c02be46d3f4c3677344e809c47a89716556ef02ecbdf7f8d89169924c7c178\"" Sep 6 00:16:53.389322 systemd[1]: run-containerd-runc-k8s.io-80c02be46d3f4c3677344e809c47a89716556ef02ecbdf7f8d89169924c7c178-runc.aGI102.mount: Deactivated successfully. Sep 6 00:16:53.411630 systemd[1]: Started cri-containerd-80c02be46d3f4c3677344e809c47a89716556ef02ecbdf7f8d89169924c7c178.scope. Sep 6 00:16:53.447141 kernel: kauditd_printk_skb: 242 callbacks suppressed Sep 6 00:16:53.447349 kernel: audit: type=1400 audit(1757117813.436:1494): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.457460 kernel: audit: type=1400 audit(1757117813.436:1495): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.465565 kernel: audit: type=1400 audit(1757117813.436:1496): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.487924 kernel: audit: type=1400 audit(1757117813.436:1497): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.488138 kernel: audit: type=1400 audit(1757117813.436:1498): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.488170 kernel: audit: type=1400 audit(1757117813.436:1499): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.497922 kernel: audit: type=1400 audit(1757117813.436:1500): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.504224 kernel: audit: type=1400 audit(1757117813.436:1501): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.519656 kernel: audit: type=1400 audit(1757117813.436:1502): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.520530 kernel: audit: type=1400 audit(1757117813.456:1503): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.456000 audit: BPF prog-id=232 op=LOAD Sep 6 00:16:53.461000 audit[5459]: AVC avc: denied { bpf } for pid=5459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.461000 audit[5459]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00019fc48 a2=10 a3=1c items=0 ppid=4350 pid=5459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:53.461000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830633032626534366433663463333637373334346538303963343761 Sep 6 00:16:53.461000 audit[5459]: AVC avc: denied { perfmon } for pid=5459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.461000 audit[5459]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00019f6b0 a2=3c a3=8 items=0 ppid=4350 pid=5459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:53.461000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830633032626534366433663463333637373334346538303963343761 Sep 6 00:16:53.461000 audit[5459]: AVC avc: denied { bpf } for pid=5459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.461000 audit[5459]: AVC avc: denied { bpf } for pid=5459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.461000 audit[5459]: AVC avc: denied { bpf } for pid=5459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.461000 audit[5459]: AVC avc: denied { perfmon } for pid=5459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.461000 audit[5459]: AVC avc: denied { perfmon } for pid=5459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.461000 audit[5459]: AVC avc: denied { perfmon } for pid=5459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.461000 audit[5459]: AVC avc: denied { perfmon } for pid=5459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.461000 audit[5459]: AVC avc: denied { perfmon } for pid=5459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.461000 audit[5459]: AVC avc: denied { bpf } for pid=5459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.461000 audit[5459]: AVC avc: denied { bpf } for pid=5459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.461000 audit: BPF prog-id=233 op=LOAD Sep 6 00:16:53.461000 audit[5459]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019f9d8 a2=78 a3=c000390d70 items=0 ppid=4350 pid=5459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:53.461000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830633032626534366433663463333637373334346538303963343761 Sep 6 00:16:53.486000 audit[5459]: AVC avc: denied { bpf } for pid=5459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.486000 audit[5459]: AVC avc: denied { bpf } for pid=5459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.486000 audit[5459]: AVC avc: denied { perfmon } for pid=5459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.486000 audit[5459]: AVC avc: denied { perfmon } for pid=5459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.486000 audit[5459]: AVC avc: denied { perfmon } for pid=5459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.486000 audit[5459]: AVC avc: denied { perfmon } for pid=5459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.486000 audit[5459]: AVC avc: denied { perfmon } for pid=5459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.486000 audit[5459]: AVC avc: denied { bpf } for pid=5459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.486000 audit[5459]: AVC avc: denied { bpf } for pid=5459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.486000 audit: BPF prog-id=234 op=LOAD Sep 6 00:16:53.486000 audit[5459]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00019f770 a2=78 a3=c000390db8 items=0 ppid=4350 pid=5459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:53.486000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830633032626534366433663463333637373334346538303963343761 Sep 6 00:16:53.502000 audit: BPF prog-id=234 op=UNLOAD Sep 6 00:16:53.503000 audit: BPF prog-id=233 op=UNLOAD Sep 6 00:16:53.503000 audit[5459]: AVC avc: denied { bpf } for pid=5459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.503000 audit[5459]: AVC avc: denied { bpf } for pid=5459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.503000 audit[5459]: AVC avc: denied { bpf } for pid=5459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.503000 audit[5459]: AVC avc: denied { perfmon } for pid=5459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.503000 audit[5459]: AVC avc: denied { perfmon } for pid=5459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.503000 audit[5459]: AVC avc: denied { perfmon } for pid=5459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.503000 audit[5459]: AVC avc: denied { perfmon } for pid=5459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.503000 audit[5459]: AVC avc: denied { perfmon } for pid=5459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.503000 audit[5459]: AVC avc: denied { bpf } for pid=5459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.503000 audit[5459]: AVC avc: denied { bpf } for pid=5459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.503000 audit: BPF prog-id=235 op=LOAD Sep 6 00:16:53.503000 audit[5459]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019fc30 a2=78 a3=c0003911c8 items=0 ppid=4350 pid=5459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:53.503000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830633032626534366433663463333637373334346538303963343761 Sep 6 00:16:53.626971 env[1225]: time="2025-09-06T00:16:53.626831186Z" level=info msg="StartContainer for \"80c02be46d3f4c3677344e809c47a89716556ef02ecbdf7f8d89169924c7c178\" returns successfully" Sep 6 00:16:53.689773 env[1225]: time="2025-09-06T00:16:53.688746345Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:53.715331 env[1225]: time="2025-09-06T00:16:53.715262507Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:53.718626 env[1225]: time="2025-09-06T00:16:53.718566406Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:53.722153 env[1225]: time="2025-09-06T00:16:53.722078887Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:53.723558 env[1225]: time="2025-09-06T00:16:53.723501485Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a\"" Sep 6 00:16:53.730164 env[1225]: time="2025-09-06T00:16:53.728624196Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\"" Sep 6 00:16:53.733421 env[1225]: time="2025-09-06T00:16:53.731545128Z" level=info msg="CreateContainer within sandbox \"3871a77cd7a4f68fe9e65aef4a28f03f19627e55100b8444f8e798d244672856\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 6 00:16:53.852313 env[1225]: time="2025-09-06T00:16:53.852237057Z" level=info msg="CreateContainer within sandbox \"3871a77cd7a4f68fe9e65aef4a28f03f19627e55100b8444f8e798d244672856\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"6c335eb56df0c8b719f29c335ff72300144151b28db0630dea52bb77c62fed7c\"" Sep 6 00:16:53.859211 env[1225]: time="2025-09-06T00:16:53.858229040Z" level=info msg="StartContainer for \"6c335eb56df0c8b719f29c335ff72300144151b28db0630dea52bb77c62fed7c\"" Sep 6 00:16:53.910636 systemd[1]: Started cri-containerd-6c335eb56df0c8b719f29c335ff72300144151b28db0630dea52bb77c62fed7c.scope. Sep 6 00:16:53.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.957000 audit: BPF prog-id=236 op=LOAD Sep 6 00:16:53.957000 audit[5497]: AVC avc: denied { bpf } for pid=5497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.957000 audit[5497]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000195c48 a2=10 a3=1c items=0 ppid=4404 pid=5497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:53.957000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663333335656235366466306338623731396632396333333566663732 Sep 6 00:16:53.958000 audit[5497]: AVC avc: denied { perfmon } for pid=5497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.958000 audit[5497]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001956b0 a2=3c a3=8 items=0 ppid=4404 pid=5497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:53.958000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663333335656235366466306338623731396632396333333566663732 Sep 6 00:16:53.958000 audit[5497]: AVC avc: denied { bpf } for pid=5497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.958000 audit[5497]: AVC avc: denied { bpf } for pid=5497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.958000 audit[5497]: AVC avc: denied { bpf } for pid=5497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.958000 audit[5497]: AVC avc: denied { perfmon } for pid=5497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.958000 audit[5497]: AVC avc: denied { perfmon } for pid=5497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.958000 audit[5497]: AVC avc: denied { perfmon } for pid=5497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.958000 audit[5497]: AVC avc: denied { perfmon } for pid=5497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.958000 audit[5497]: AVC avc: denied { perfmon } for pid=5497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.958000 audit[5497]: AVC avc: denied { bpf } for pid=5497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.958000 audit[5497]: AVC avc: denied { bpf } for pid=5497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.958000 audit: BPF prog-id=237 op=LOAD Sep 6 00:16:53.958000 audit[5497]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001959d8 a2=78 a3=c000393400 items=0 ppid=4404 pid=5497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:53.958000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663333335656235366466306338623731396632396333333566663732 Sep 6 00:16:53.961000 audit[5497]: AVC avc: denied { bpf } for pid=5497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.961000 audit[5497]: AVC avc: denied { bpf } for pid=5497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.961000 audit[5497]: AVC avc: denied { perfmon } for pid=5497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.961000 audit[5497]: AVC avc: denied { perfmon } for pid=5497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.961000 audit[5497]: AVC avc: denied { perfmon } for pid=5497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.961000 audit[5497]: AVC avc: denied { perfmon } for pid=5497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.961000 audit[5497]: AVC avc: denied { perfmon } for pid=5497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.961000 audit[5497]: AVC avc: denied { bpf } for pid=5497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.961000 audit[5497]: AVC avc: denied { bpf } for pid=5497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.961000 audit: BPF prog-id=238 op=LOAD Sep 6 00:16:53.961000 audit[5497]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000195770 a2=78 a3=c000393448 items=0 ppid=4404 pid=5497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:53.961000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663333335656235366466306338623731396632396333333566663732 Sep 6 00:16:53.968000 audit: BPF prog-id=238 op=UNLOAD Sep 6 00:16:53.968000 audit: BPF prog-id=237 op=UNLOAD Sep 6 00:16:53.968000 audit[5497]: AVC avc: denied { bpf } for pid=5497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.968000 audit[5497]: AVC avc: denied { bpf } for pid=5497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.968000 audit[5497]: AVC avc: denied { bpf } for pid=5497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.968000 audit[5497]: AVC avc: denied { perfmon } for pid=5497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.968000 audit[5497]: AVC avc: denied { perfmon } for pid=5497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.968000 audit[5497]: AVC avc: denied { perfmon } for pid=5497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.968000 audit[5497]: AVC avc: denied { perfmon } for pid=5497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.968000 audit[5497]: AVC avc: denied { perfmon } for pid=5497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.968000 audit[5497]: AVC avc: denied { bpf } for pid=5497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.968000 audit[5497]: AVC avc: denied { bpf } for pid=5497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:53.968000 audit: BPF prog-id=239 op=LOAD Sep 6 00:16:53.968000 audit[5497]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000195c30 a2=78 a3=c000393858 items=0 ppid=4404 pid=5497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:53.968000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663333335656235366466306338623731396632396333333566663732 Sep 6 00:16:54.059964 env[1225]: time="2025-09-06T00:16:54.058748520Z" level=info msg="StartContainer for \"6c335eb56df0c8b719f29c335ff72300144151b28db0630dea52bb77c62fed7c\" returns successfully" Sep 6 00:16:54.611304 kubelet[2030]: I0906 00:16:54.610886 2030 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-77f65f4854-prqvv" podStartSLOduration=37.984695375 podStartE2EDuration="57.610862421s" podCreationTimestamp="2025-09-06 00:15:57 +0000 UTC" firstStartedPulling="2025-09-06 00:16:34.098326669 +0000 UTC m=+53.692550954" lastFinishedPulling="2025-09-06 00:16:53.724493715 +0000 UTC m=+73.318718000" observedRunningTime="2025-09-06 00:16:54.609999601 +0000 UTC m=+74.204223896" watchObservedRunningTime="2025-09-06 00:16:54.610862421 +0000 UTC m=+74.205086707" Sep 6 00:16:54.723530 kubelet[2030]: I0906 00:16:54.723277 2030 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-77f65f4854-jkr5j" podStartSLOduration=38.391163562 podStartE2EDuration="57.723256031s" podCreationTimestamp="2025-09-06 00:15:57 +0000 UTC" firstStartedPulling="2025-09-06 00:16:33.901551045 +0000 UTC m=+53.495775330" lastFinishedPulling="2025-09-06 00:16:53.233643494 +0000 UTC m=+72.827867799" observedRunningTime="2025-09-06 00:16:54.718526361 +0000 UTC m=+74.312750667" watchObservedRunningTime="2025-09-06 00:16:54.723256031 +0000 UTC m=+74.317480316" Sep 6 00:16:54.773000 audit[5530]: NETFILTER_CFG table=filter:127 family=2 entries=12 op=nft_register_rule pid=5530 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:54.773000 audit[5530]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffd73a82600 a2=0 a3=7ffd73a825ec items=0 ppid=2180 pid=5530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:54.773000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:54.802000 audit[5530]: NETFILTER_CFG table=nat:128 family=2 entries=22 op=nft_register_rule pid=5530 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:54.802000 audit[5530]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffd73a82600 a2=0 a3=7ffd73a825ec items=0 ppid=2180 pid=5530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:54.802000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:54.831000 audit[5532]: NETFILTER_CFG table=filter:129 family=2 entries=12 op=nft_register_rule pid=5532 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:54.831000 audit[5532]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffe0562c3d0 a2=0 a3=7ffe0562c3bc items=0 ppid=2180 pid=5532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:54.831000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:54.839000 audit[5532]: NETFILTER_CFG table=nat:130 family=2 entries=22 op=nft_register_rule pid=5532 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:54.839000 audit[5532]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffe0562c3d0 a2=0 a3=7ffe0562c3bc items=0 ppid=2180 pid=5532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:54.839000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:56.591999 env[1225]: time="2025-09-06T00:16:56.589355917Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:56.592740 kubelet[2030]: I0906 00:16:56.586491 2030 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 6 00:16:56.593447 kubelet[2030]: I0906 00:16:56.586547 2030 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 6 00:16:56.602307 env[1225]: time="2025-09-06T00:16:56.599793617Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b8f31c4fdaed3fa08af64de3d37d65a4c2ea0d9f6f522cb60d2e0cb424f8dd8a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:56.603515 env[1225]: time="2025-09-06T00:16:56.603470153Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:56.607694 env[1225]: time="2025-09-06T00:16:56.607637943Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:731ab232ca708102ab332340b1274d5cd656aa896ecc5368ee95850b811df86f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:16:56.610337 env[1225]: time="2025-09-06T00:16:56.610104614Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\" returns image reference \"sha256:b8f31c4fdaed3fa08af64de3d37d65a4c2ea0d9f6f522cb60d2e0cb424f8dd8a\"" Sep 6 00:16:56.615049 env[1225]: time="2025-09-06T00:16:56.614392014Z" level=info msg="CreateContainer within sandbox \"d37113f5bb32f68e4fe0dcf7d794d701b116fbbda18c39d445f9e46064fa4f17\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Sep 6 00:16:56.655526 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1016531797.mount: Deactivated successfully. Sep 6 00:16:56.666643 env[1225]: time="2025-09-06T00:16:56.666567861Z" level=info msg="CreateContainer within sandbox \"d37113f5bb32f68e4fe0dcf7d794d701b116fbbda18c39d445f9e46064fa4f17\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"b0e3e408d1e9e0ba52650b85a5329803cfde8aafff7eb1450e5d654bdfaafa30\"" Sep 6 00:16:56.668232 env[1225]: time="2025-09-06T00:16:56.668190199Z" level=info msg="StartContainer for \"b0e3e408d1e9e0ba52650b85a5329803cfde8aafff7eb1450e5d654bdfaafa30\"" Sep 6 00:16:56.713410 systemd[1]: Started cri-containerd-b0e3e408d1e9e0ba52650b85a5329803cfde8aafff7eb1450e5d654bdfaafa30.scope. Sep 6 00:16:56.742000 audit[5541]: AVC avc: denied { perfmon } for pid=5541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:56.742000 audit[5541]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f2e04397ba8 items=0 ppid=3978 pid=5541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:56.742000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230653365343038643165396530626135323635306238356135333239 Sep 6 00:16:56.742000 audit[5541]: AVC avc: denied { bpf } for pid=5541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:56.742000 audit[5541]: AVC avc: denied { bpf } for pid=5541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:56.742000 audit[5541]: AVC avc: denied { bpf } for pid=5541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:56.742000 audit[5541]: AVC avc: denied { perfmon } for pid=5541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:56.742000 audit[5541]: AVC avc: denied { perfmon } for pid=5541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:56.742000 audit[5541]: AVC avc: denied { perfmon } for pid=5541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:56.742000 audit[5541]: AVC avc: denied { perfmon } for pid=5541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:56.742000 audit[5541]: AVC avc: denied { perfmon } for pid=5541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:56.742000 audit[5541]: AVC avc: denied { bpf } for pid=5541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:56.742000 audit[5541]: AVC avc: denied { bpf } for pid=5541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:56.742000 audit: BPF prog-id=240 op=LOAD Sep 6 00:16:56.742000 audit[5541]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0003083d8 items=0 ppid=3978 pid=5541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:56.742000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230653365343038643165396530626135323635306238356135333239 Sep 6 00:16:56.742000 audit[5541]: AVC avc: denied { bpf } for pid=5541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:56.742000 audit[5541]: AVC avc: denied { bpf } for pid=5541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:56.742000 audit[5541]: AVC avc: denied { perfmon } for pid=5541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:56.742000 audit[5541]: AVC avc: denied { perfmon } for pid=5541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:56.742000 audit[5541]: AVC avc: denied { perfmon } for pid=5541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:56.742000 audit[5541]: AVC avc: denied { perfmon } for pid=5541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:56.742000 audit[5541]: AVC avc: denied { perfmon } for pid=5541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:56.742000 audit[5541]: AVC avc: denied { bpf } for pid=5541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:56.742000 audit[5541]: AVC avc: denied { bpf } for pid=5541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:56.742000 audit: BPF prog-id=241 op=LOAD Sep 6 00:16:56.742000 audit[5541]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000308428 items=0 ppid=3978 pid=5541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:56.742000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230653365343038643165396530626135323635306238356135333239 Sep 6 00:16:56.743000 audit: BPF prog-id=241 op=UNLOAD Sep 6 00:16:56.743000 audit: BPF prog-id=240 op=UNLOAD Sep 6 00:16:56.743000 audit[5541]: AVC avc: denied { bpf } for pid=5541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:56.743000 audit[5541]: AVC avc: denied { bpf } for pid=5541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:56.743000 audit[5541]: AVC avc: denied { bpf } for pid=5541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:56.743000 audit[5541]: AVC avc: denied { perfmon } for pid=5541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:56.743000 audit[5541]: AVC avc: denied { perfmon } for pid=5541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:56.743000 audit[5541]: AVC avc: denied { perfmon } for pid=5541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:56.743000 audit[5541]: AVC avc: denied { perfmon } for pid=5541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:56.743000 audit[5541]: AVC avc: denied { perfmon } for pid=5541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:56.743000 audit[5541]: AVC avc: denied { bpf } for pid=5541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:56.743000 audit[5541]: AVC avc: denied { bpf } for pid=5541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:16:56.743000 audit: BPF prog-id=242 op=LOAD Sep 6 00:16:56.743000 audit[5541]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0003084b8 items=0 ppid=3978 pid=5541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:56.743000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230653365343038643165396530626135323635306238356135333239 Sep 6 00:16:56.780165 env[1225]: time="2025-09-06T00:16:56.780102274Z" level=info msg="StartContainer for \"b0e3e408d1e9e0ba52650b85a5329803cfde8aafff7eb1450e5d654bdfaafa30\" returns successfully" Sep 6 00:16:57.034405 kubelet[2030]: I0906 00:16:57.034357 2030 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Sep 6 00:16:57.034706 kubelet[2030]: I0906 00:16:57.034686 2030 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Sep 6 00:16:57.221000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.22:22-10.0.0.1:45452 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:16:57.222422 systemd[1]: Started sshd@7-10.0.0.22:22-10.0.0.1:45452.service. Sep 6 00:16:57.314000 audit[5508]: AVC avc: denied { watch } for pid=5508 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_00_16_18.3632861691/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c183,c273 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c183,c273 tclass=file permissive=0 Sep 6 00:16:57.314000 audit[5508]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000b7e820 a2=fc6 a3=0 items=0 ppid=4404 pid=5508 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c183,c273 key=(null) Sep 6 00:16:57.314000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 00:16:57.376000 audit[5469]: AVC avc: denied { watch } for pid=5469 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_00_16_18.604940523/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c35,c200 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c35,c200 tclass=file permissive=0 Sep 6 00:16:57.376000 audit[5469]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00104ab20 a2=fc6 a3=0 items=0 ppid=4350 pid=5469 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c35,c200 key=(null) Sep 6 00:16:57.376000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 00:16:57.465000 audit[5575]: USER_ACCT pid=5575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:16:57.466515 sshd[5575]: Accepted publickey for core from 10.0.0.1 port 45452 ssh2: RSA SHA256:mcWI8lWnD23EhgVbwJM01vCNerY3y/CLOw6SIUCzfEA Sep 6 00:16:57.467000 audit[5575]: CRED_ACQ pid=5575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:16:57.468000 audit[5575]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd9d4848e0 a2=3 a3=0 items=0 ppid=1 pid=5575 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:57.468000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:16:57.493593 sshd[5575]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:16:57.529966 systemd[1]: Started session-8.scope. Sep 6 00:16:57.530845 systemd-logind[1218]: New session 8 of user core. Sep 6 00:16:57.546000 audit[5575]: USER_START pid=5575 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:16:57.548000 audit[5577]: CRED_ACQ pid=5577 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:16:57.584000 audit[5579]: NETFILTER_CFG table=filter:131 family=2 entries=11 op=nft_register_rule pid=5579 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:57.584000 audit[5579]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffd96f6a3f0 a2=0 a3=7ffd96f6a3dc items=0 ppid=2180 pid=5579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:57.584000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:57.590000 audit[5579]: NETFILTER_CFG table=nat:132 family=2 entries=29 op=nft_register_chain pid=5579 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:57.590000 audit[5579]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffd96f6a3f0 a2=0 a3=7ffd96f6a3dc items=0 ppid=2180 pid=5579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:57.590000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:57.789000 audit[5585]: NETFILTER_CFG table=filter:133 family=2 entries=10 op=nft_register_rule pid=5585 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:57.789000 audit[5585]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fff64b81340 a2=0 a3=7fff64b8132c items=0 ppid=2180 pid=5585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:57.789000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:57.803000 audit[5585]: NETFILTER_CFG table=nat:134 family=2 entries=36 op=nft_register_chain pid=5585 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:16:57.803000 audit[5585]: SYSCALL arch=c000003e syscall=46 success=yes exit=12004 a0=3 a1=7fff64b81340 a2=0 a3=7fff64b8132c items=0 ppid=2180 pid=5585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:16:57.803000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:16:58.645793 sshd[5575]: pam_unix(sshd:session): session closed for user core Sep 6 00:16:58.647000 audit[5575]: USER_END pid=5575 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:16:58.653054 kernel: kauditd_printk_skb: 185 callbacks suppressed Sep 6 00:16:58.653848 kernel: audit: type=1106 audit(1757117818.647:1552): pid=5575 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:16:58.650705 systemd[1]: sshd@7-10.0.0.22:22-10.0.0.1:45452.service: Deactivated successfully. Sep 6 00:16:58.651770 systemd[1]: session-8.scope: Deactivated successfully. Sep 6 00:16:58.661737 kernel: audit: type=1104 audit(1757117818.647:1553): pid=5575 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:16:58.647000 audit[5575]: CRED_DISP pid=5575 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:16:58.649000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.22:22-10.0.0.1:45452 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:16:58.664258 systemd-logind[1218]: Session 8 logged out. Waiting for processes to exit. Sep 6 00:16:58.667041 kernel: audit: type=1131 audit(1757117818.649:1554): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.22:22-10.0.0.1:45452 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:16:58.669810 systemd-logind[1218]: Removed session 8. Sep 6 00:16:59.314803 systemd[1]: run-containerd-runc-k8s.io-6622470f48ae5d022e4553e766cb892ffbc6f3ff3329415a6d690180b12b34cf-runc.rBTv5d.mount: Deactivated successfully. Sep 6 00:16:59.579929 kubelet[2030]: I0906 00:16:59.552839 2030 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-pkfnl" podStartSLOduration=33.814660997 podStartE2EDuration="58.552813349s" podCreationTimestamp="2025-09-06 00:16:01 +0000 UTC" firstStartedPulling="2025-09-06 00:16:31.873929211 +0000 UTC m=+51.468153496" lastFinishedPulling="2025-09-06 00:16:56.612081563 +0000 UTC m=+76.206305848" observedRunningTime="2025-09-06 00:16:57.798851974 +0000 UTC m=+77.393076269" watchObservedRunningTime="2025-09-06 00:16:59.552813349 +0000 UTC m=+79.147037634" Sep 6 00:17:03.654751 systemd[1]: Started sshd@8-10.0.0.22:22-10.0.0.1:52922.service. Sep 6 00:17:03.655000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.22:22-10.0.0.1:52922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:03.661792 kernel: audit: type=1130 audit(1757117823.655:1555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.22:22-10.0.0.1:52922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:03.756000 audit[5626]: USER_ACCT pid=5626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:03.759366 sshd[5626]: Accepted publickey for core from 10.0.0.1 port 52922 ssh2: RSA SHA256:mcWI8lWnD23EhgVbwJM01vCNerY3y/CLOw6SIUCzfEA Sep 6 00:17:03.767021 kernel: audit: type=1101 audit(1757117823.756:1556): pid=5626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:03.767000 audit[5626]: CRED_ACQ pid=5626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:03.772474 sshd[5626]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:17:03.781018 kernel: audit: type=1103 audit(1757117823.767:1557): pid=5626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:03.781225 kernel: audit: type=1006 audit(1757117823.767:1558): pid=5626 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Sep 6 00:17:03.767000 audit[5626]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc6a472b30 a2=3 a3=0 items=0 ppid=1 pid=5626 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:17:03.790017 kernel: audit: type=1300 audit(1757117823.767:1558): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc6a472b30 a2=3 a3=0 items=0 ppid=1 pid=5626 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:17:03.791114 systemd-logind[1218]: New session 9 of user core. Sep 6 00:17:03.767000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:17:03.796035 kernel: audit: type=1327 audit(1757117823.767:1558): proctitle=737368643A20636F7265205B707269765D Sep 6 00:17:03.800319 systemd[1]: Started session-9.scope. Sep 6 00:17:03.840000 audit[5626]: USER_START pid=5626 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:03.843000 audit[5629]: CRED_ACQ pid=5629 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:03.854394 kernel: audit: type=1105 audit(1757117823.840:1559): pid=5626 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:03.854578 kernel: audit: type=1103 audit(1757117823.843:1560): pid=5629 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:04.235501 sshd[5626]: pam_unix(sshd:session): session closed for user core Sep 6 00:17:04.236000 audit[5626]: USER_END pid=5626 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:04.240262 systemd[1]: sshd@8-10.0.0.22:22-10.0.0.1:52922.service: Deactivated successfully. Sep 6 00:17:04.242175 systemd[1]: session-9.scope: Deactivated successfully. Sep 6 00:17:04.245034 kernel: audit: type=1106 audit(1757117824.236:1561): pid=5626 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:04.237000 audit[5626]: CRED_DISP pid=5626 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:04.246499 systemd-logind[1218]: Session 9 logged out. Waiting for processes to exit. Sep 6 00:17:04.247620 systemd-logind[1218]: Removed session 9. Sep 6 00:17:04.239000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.22:22-10.0.0.1:52922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:04.252036 kernel: audit: type=1104 audit(1757117824.237:1562): pid=5626 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:05.712746 kubelet[2030]: E0906 00:17:05.712680 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:17:05.713440 kubelet[2030]: E0906 00:17:05.713415 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:17:09.242790 systemd[1]: Started sshd@9-10.0.0.22:22-10.0.0.1:52928.service. Sep 6 00:17:09.242000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.22:22-10.0.0.1:52928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:09.244544 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 00:17:09.244628 kernel: audit: type=1130 audit(1757117829.242:1564): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.22:22-10.0.0.1:52928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:09.334382 sshd[5665]: Accepted publickey for core from 10.0.0.1 port 52928 ssh2: RSA SHA256:mcWI8lWnD23EhgVbwJM01vCNerY3y/CLOw6SIUCzfEA Sep 6 00:17:09.332000 audit[5665]: USER_ACCT pid=5665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:09.339000 audit[5665]: CRED_ACQ pid=5665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:09.344630 sshd[5665]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:17:09.357046 kernel: audit: type=1101 audit(1757117829.332:1565): pid=5665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:09.357277 kernel: audit: type=1103 audit(1757117829.339:1566): pid=5665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:09.357346 kernel: audit: type=1006 audit(1757117829.339:1567): pid=5665 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Sep 6 00:17:09.361498 systemd-logind[1218]: New session 10 of user core. Sep 6 00:17:09.364471 systemd[1]: Started session-10.scope. Sep 6 00:17:09.366120 kernel: audit: type=1300 audit(1757117829.339:1567): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe51752e80 a2=3 a3=0 items=0 ppid=1 pid=5665 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:17:09.339000 audit[5665]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe51752e80 a2=3 a3=0 items=0 ppid=1 pid=5665 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:17:09.339000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:17:09.375664 kernel: audit: type=1327 audit(1757117829.339:1567): proctitle=737368643A20636F7265205B707269765D Sep 6 00:17:09.379000 audit[5665]: USER_START pid=5665 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:09.383000 audit[5667]: CRED_ACQ pid=5667 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:09.394570 kernel: audit: type=1105 audit(1757117829.379:1568): pid=5665 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:09.394854 kernel: audit: type=1103 audit(1757117829.383:1569): pid=5667 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:09.568509 sshd[5665]: pam_unix(sshd:session): session closed for user core Sep 6 00:17:09.568000 audit[5665]: USER_END pid=5665 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:09.577158 systemd[1]: sshd@9-10.0.0.22:22-10.0.0.1:52928.service: Deactivated successfully. Sep 6 00:17:09.568000 audit[5665]: CRED_DISP pid=5665 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:09.581542 systemd[1]: session-10.scope: Deactivated successfully. Sep 6 00:17:09.584051 systemd-logind[1218]: Session 10 logged out. Waiting for processes to exit. Sep 6 00:17:09.587866 systemd-logind[1218]: Removed session 10. Sep 6 00:17:09.591001 kernel: audit: type=1106 audit(1757117829.568:1570): pid=5665 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:09.591122 kernel: audit: type=1104 audit(1757117829.568:1571): pid=5665 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:09.575000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.22:22-10.0.0.1:52928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:14.577092 systemd[1]: Started sshd@10-10.0.0.22:22-10.0.0.1:37788.service. Sep 6 00:17:14.581402 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 00:17:14.581470 kernel: audit: type=1130 audit(1757117834.576:1573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.22:22-10.0.0.1:37788 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:14.576000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.22:22-10.0.0.1:37788 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:14.640000 audit[5685]: USER_ACCT pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:14.646365 sshd[5685]: Accepted publickey for core from 10.0.0.1 port 37788 ssh2: RSA SHA256:mcWI8lWnD23EhgVbwJM01vCNerY3y/CLOw6SIUCzfEA Sep 6 00:17:14.650000 audit[5685]: CRED_ACQ pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:14.651357 sshd[5685]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:17:14.660884 kernel: audit: type=1101 audit(1757117834.640:1574): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:14.661080 kernel: audit: type=1103 audit(1757117834.650:1575): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:14.661142 kernel: audit: type=1006 audit(1757117834.650:1576): pid=5685 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Sep 6 00:17:14.666395 kernel: audit: type=1300 audit(1757117834.650:1576): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe8e20b30 a2=3 a3=0 items=0 ppid=1 pid=5685 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:17:14.650000 audit[5685]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe8e20b30 a2=3 a3=0 items=0 ppid=1 pid=5685 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:17:14.674652 kernel: audit: type=1327 audit(1757117834.650:1576): proctitle=737368643A20636F7265205B707269765D Sep 6 00:17:14.650000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:17:14.682688 systemd-logind[1218]: New session 11 of user core. Sep 6 00:17:14.683402 systemd[1]: Started session-11.scope. Sep 6 00:17:14.732000 audit[5685]: USER_START pid=5685 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:14.741000 audit[5687]: CRED_ACQ pid=5687 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:14.754303 kernel: audit: type=1105 audit(1757117834.732:1577): pid=5685 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:14.754516 kernel: audit: type=1103 audit(1757117834.741:1578): pid=5687 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:14.999815 sshd[5685]: pam_unix(sshd:session): session closed for user core Sep 6 00:17:15.004000 audit[5685]: USER_END pid=5685 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:15.004000 audit[5685]: CRED_DISP pid=5685 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:15.008700 systemd[1]: sshd@10-10.0.0.22:22-10.0.0.1:37788.service: Deactivated successfully. Sep 6 00:17:15.009727 systemd[1]: session-11.scope: Deactivated successfully. Sep 6 00:17:15.014732 systemd-logind[1218]: Session 11 logged out. Waiting for processes to exit. Sep 6 00:17:15.021241 systemd-logind[1218]: Removed session 11. Sep 6 00:17:15.022189 kernel: audit: type=1106 audit(1757117835.004:1579): pid=5685 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:15.022277 kernel: audit: type=1104 audit(1757117835.004:1580): pid=5685 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:15.008000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.22:22-10.0.0.1:37788 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:18.707019 kubelet[2030]: E0906 00:17:18.704571 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:17:20.026321 systemd[1]: Started sshd@11-10.0.0.22:22-10.0.0.1:60012.service. Sep 6 00:17:20.036033 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 00:17:20.036170 kernel: audit: type=1130 audit(1757117840.029:1582): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.22:22-10.0.0.1:60012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:20.029000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.22:22-10.0.0.1:60012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:20.086000 audit[5701]: USER_ACCT pid=5701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:20.090491 sshd[5701]: Accepted publickey for core from 10.0.0.1 port 60012 ssh2: RSA SHA256:mcWI8lWnD23EhgVbwJM01vCNerY3y/CLOw6SIUCzfEA Sep 6 00:17:20.099103 kernel: audit: type=1101 audit(1757117840.086:1583): pid=5701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:20.099909 kernel: audit: type=1103 audit(1757117840.097:1584): pid=5701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:20.097000 audit[5701]: CRED_ACQ pid=5701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:20.099774 sshd[5701]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:17:20.116480 kernel: audit: type=1006 audit(1757117840.099:1585): pid=5701 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Sep 6 00:17:20.116636 kernel: audit: type=1300 audit(1757117840.099:1585): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe3918b90 a2=3 a3=0 items=0 ppid=1 pid=5701 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:17:20.099000 audit[5701]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe3918b90 a2=3 a3=0 items=0 ppid=1 pid=5701 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:17:20.116083 systemd[1]: Started session-12.scope. Sep 6 00:17:20.117352 systemd-logind[1218]: New session 12 of user core. Sep 6 00:17:20.130522 kernel: audit: type=1327 audit(1757117840.099:1585): proctitle=737368643A20636F7265205B707269765D Sep 6 00:17:20.099000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:17:20.143000 audit[5701]: USER_START pid=5701 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:20.143000 audit[5703]: CRED_ACQ pid=5703 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:20.158944 kernel: audit: type=1105 audit(1757117840.143:1586): pid=5701 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:20.159236 kernel: audit: type=1103 audit(1757117840.143:1587): pid=5703 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:20.378668 sshd[5701]: pam_unix(sshd:session): session closed for user core Sep 6 00:17:20.381000 audit[5701]: USER_END pid=5701 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:20.386124 systemd[1]: sshd@11-10.0.0.22:22-10.0.0.1:60012.service: Deactivated successfully. Sep 6 00:17:20.387236 systemd[1]: session-12.scope: Deactivated successfully. Sep 6 00:17:20.381000 audit[5701]: CRED_DISP pid=5701 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:20.395640 systemd-logind[1218]: Session 12 logged out. Waiting for processes to exit. Sep 6 00:17:20.397299 systemd-logind[1218]: Removed session 12. Sep 6 00:17:20.399672 kernel: audit: type=1106 audit(1757117840.381:1588): pid=5701 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:20.399872 kernel: audit: type=1104 audit(1757117840.381:1589): pid=5701 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:20.385000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.22:22-10.0.0.1:60012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:20.576685 systemd[1]: run-containerd-runc-k8s.io-7bc34d81ce837d56eb1ec0dd63c8a768b41c85afa9b58ca36c0980ee702298fb-runc.Ln410U.mount: Deactivated successfully. Sep 6 00:17:21.063000 audit[5737]: NETFILTER_CFG table=filter:135 family=2 entries=9 op=nft_register_rule pid=5737 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:17:21.063000 audit[5737]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff963d58e0 a2=0 a3=7fff963d58cc items=0 ppid=2180 pid=5737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:17:21.063000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:17:21.081000 audit[5737]: NETFILTER_CFG table=nat:136 family=2 entries=31 op=nft_register_chain pid=5737 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:17:21.081000 audit[5737]: SYSCALL arch=c000003e syscall=46 success=yes exit=10884 a0=3 a1=7fff963d58e0 a2=0 a3=7fff963d58cc items=0 ppid=2180 pid=5737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:17:21.081000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:17:25.409282 systemd[1]: Started sshd@12-10.0.0.22:22-10.0.0.1:60014.service. Sep 6 00:17:25.409000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.22:22-10.0.0.1:60014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:25.413467 kernel: kauditd_printk_skb: 7 callbacks suppressed Sep 6 00:17:25.413551 kernel: audit: type=1130 audit(1757117845.409:1593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.22:22-10.0.0.1:60014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:25.534000 audit[5739]: USER_ACCT pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:25.535846 sshd[5739]: Accepted publickey for core from 10.0.0.1 port 60014 ssh2: RSA SHA256:mcWI8lWnD23EhgVbwJM01vCNerY3y/CLOw6SIUCzfEA Sep 6 00:17:25.540000 audit[5739]: CRED_ACQ pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:25.543184 sshd[5739]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:17:25.546945 kernel: audit: type=1101 audit(1757117845.534:1594): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:25.547064 kernel: audit: type=1103 audit(1757117845.540:1595): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:25.547117 kernel: audit: type=1006 audit(1757117845.540:1596): pid=5739 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Sep 6 00:17:25.551320 systemd-logind[1218]: New session 13 of user core. Sep 6 00:17:25.552070 systemd[1]: Started session-13.scope. Sep 6 00:17:25.552313 kernel: audit: type=1300 audit(1757117845.540:1596): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd9d23e000 a2=3 a3=0 items=0 ppid=1 pid=5739 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:17:25.540000 audit[5739]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd9d23e000 a2=3 a3=0 items=0 ppid=1 pid=5739 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:17:25.540000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:17:25.562502 kernel: audit: type=1327 audit(1757117845.540:1596): proctitle=737368643A20636F7265205B707269765D Sep 6 00:17:25.562590 kernel: audit: type=1105 audit(1757117845.560:1597): pid=5739 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:25.560000 audit[5739]: USER_START pid=5739 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:25.565000 audit[5741]: CRED_ACQ pid=5741 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:25.573147 kernel: audit: type=1103 audit(1757117845.565:1598): pid=5741 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:25.794588 sshd[5739]: pam_unix(sshd:session): session closed for user core Sep 6 00:17:25.801000 audit[5739]: USER_END pid=5739 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:25.801000 audit[5739]: CRED_DISP pid=5739 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:25.828147 kernel: audit: type=1106 audit(1757117845.801:1599): pid=5739 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:25.828232 kernel: audit: type=1104 audit(1757117845.801:1600): pid=5739 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:25.817000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.22:22-10.0.0.1:60026 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:25.820000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.22:22-10.0.0.1:60014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:25.820429 systemd[1]: Started sshd@13-10.0.0.22:22-10.0.0.1:60026.service. Sep 6 00:17:25.821143 systemd[1]: sshd@12-10.0.0.22:22-10.0.0.1:60014.service: Deactivated successfully. Sep 6 00:17:25.822087 systemd[1]: session-13.scope: Deactivated successfully. Sep 6 00:17:25.828885 systemd-logind[1218]: Session 13 logged out. Waiting for processes to exit. Sep 6 00:17:25.835729 systemd-logind[1218]: Removed session 13. Sep 6 00:17:25.891000 audit[5754]: USER_ACCT pid=5754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:25.892959 sshd[5754]: Accepted publickey for core from 10.0.0.1 port 60026 ssh2: RSA SHA256:mcWI8lWnD23EhgVbwJM01vCNerY3y/CLOw6SIUCzfEA Sep 6 00:17:25.894000 audit[5754]: CRED_ACQ pid=5754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:25.894000 audit[5754]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc538b2de0 a2=3 a3=0 items=0 ppid=1 pid=5754 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:17:25.894000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:17:25.895810 sshd[5754]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:17:25.906637 systemd-logind[1218]: New session 14 of user core. Sep 6 00:17:25.909552 systemd[1]: Started session-14.scope. Sep 6 00:17:25.939000 audit[5754]: USER_START pid=5754 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:25.944000 audit[5757]: CRED_ACQ pid=5757 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:26.280852 sshd[5754]: pam_unix(sshd:session): session closed for user core Sep 6 00:17:26.281000 audit[5754]: USER_END pid=5754 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:26.281000 audit[5754]: CRED_DISP pid=5754 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:26.288231 systemd[1]: Started sshd@14-10.0.0.22:22-10.0.0.1:60034.service. Sep 6 00:17:26.287000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.22:22-10.0.0.1:60034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:26.290698 systemd[1]: sshd@13-10.0.0.22:22-10.0.0.1:60026.service: Deactivated successfully. Sep 6 00:17:26.289000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.22:22-10.0.0.1:60026 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:26.292532 systemd[1]: session-14.scope: Deactivated successfully. Sep 6 00:17:26.295014 systemd-logind[1218]: Session 14 logged out. Waiting for processes to exit. Sep 6 00:17:26.298204 systemd-logind[1218]: Removed session 14. Sep 6 00:17:26.371000 audit[5765]: USER_ACCT pid=5765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:26.373171 sshd[5765]: Accepted publickey for core from 10.0.0.1 port 60034 ssh2: RSA SHA256:mcWI8lWnD23EhgVbwJM01vCNerY3y/CLOw6SIUCzfEA Sep 6 00:17:26.373000 audit[5765]: CRED_ACQ pid=5765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:26.373000 audit[5765]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd4b4cb6d0 a2=3 a3=0 items=0 ppid=1 pid=5765 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:17:26.373000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:17:26.375217 sshd[5765]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:17:26.383690 systemd-logind[1218]: New session 15 of user core. Sep 6 00:17:26.385156 systemd[1]: Started session-15.scope. Sep 6 00:17:26.396000 audit[5765]: USER_START pid=5765 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:26.398000 audit[5768]: CRED_ACQ pid=5768 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:26.600475 sshd[5765]: pam_unix(sshd:session): session closed for user core Sep 6 00:17:26.604000 audit[5765]: USER_END pid=5765 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:26.604000 audit[5765]: CRED_DISP pid=5765 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:26.610529 systemd-logind[1218]: Session 15 logged out. Waiting for processes to exit. Sep 6 00:17:26.612737 systemd[1]: sshd@14-10.0.0.22:22-10.0.0.1:60034.service: Deactivated successfully. Sep 6 00:17:26.612000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.22:22-10.0.0.1:60034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:26.618317 systemd[1]: session-15.scope: Deactivated successfully. Sep 6 00:17:26.625213 systemd-logind[1218]: Removed session 15. Sep 6 00:17:28.707226 kubelet[2030]: E0906 00:17:28.707170 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:17:29.295000 audit[1884]: AVC avc: denied { watch } for pid=1884 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:17:29.295000 audit[1884]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0029c6e70 a2=fc6 a3=0 items=0 ppid=1739 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 key=(null) Sep 6 00:17:29.295000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:17:29.296000 audit[1884]: AVC avc: denied { watch } for pid=1884 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:17:29.296000 audit[1884]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00339c8c0 a2=fc6 a3=0 items=0 ppid=1739 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 key=(null) Sep 6 00:17:29.296000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:17:31.620882 systemd[1]: Started sshd@15-10.0.0.22:22-10.0.0.1:52692.service. Sep 6 00:17:31.620000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.22:22-10.0.0.1:52692 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:31.625914 kernel: kauditd_printk_skb: 29 callbacks suppressed Sep 6 00:17:31.626124 kernel: audit: type=1130 audit(1757117851.620:1622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.22:22-10.0.0.1:52692 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:31.782000 audit[5799]: USER_ACCT pid=5799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:31.787475 sshd[5799]: Accepted publickey for core from 10.0.0.1 port 52692 ssh2: RSA SHA256:mcWI8lWnD23EhgVbwJM01vCNerY3y/CLOw6SIUCzfEA Sep 6 00:17:31.789000 audit[5799]: CRED_ACQ pid=5799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:31.795577 sshd[5799]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:17:31.801361 kernel: audit: type=1101 audit(1757117851.782:1623): pid=5799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:31.801478 kernel: audit: type=1103 audit(1757117851.789:1624): pid=5799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:31.801522 kernel: audit: type=1006 audit(1757117851.789:1625): pid=5799 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Sep 6 00:17:31.815959 kernel: audit: type=1300 audit(1757117851.789:1625): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcee8a1bc0 a2=3 a3=0 items=0 ppid=1 pid=5799 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:17:31.789000 audit[5799]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcee8a1bc0 a2=3 a3=0 items=0 ppid=1 pid=5799 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:17:31.789000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:17:31.823570 kernel: audit: type=1327 audit(1757117851.789:1625): proctitle=737368643A20636F7265205B707269765D Sep 6 00:17:31.820840 systemd[1]: Started session-16.scope. Sep 6 00:17:31.825438 systemd-logind[1218]: New session 16 of user core. Sep 6 00:17:31.844000 audit[5799]: USER_START pid=5799 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:31.849000 audit[5801]: CRED_ACQ pid=5801 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:31.860225 kernel: audit: type=1105 audit(1757117851.844:1626): pid=5799 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:31.860396 kernel: audit: type=1103 audit(1757117851.849:1627): pid=5801 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:32.103154 sshd[5799]: pam_unix(sshd:session): session closed for user core Sep 6 00:17:32.107000 audit[5799]: USER_END pid=5799 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:32.110580 systemd[1]: sshd@15-10.0.0.22:22-10.0.0.1:52692.service: Deactivated successfully. Sep 6 00:17:32.111606 systemd[1]: session-16.scope: Deactivated successfully. Sep 6 00:17:32.107000 audit[5799]: CRED_DISP pid=5799 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:32.113797 systemd-logind[1218]: Session 16 logged out. Waiting for processes to exit. Sep 6 00:17:32.117686 kernel: audit: type=1106 audit(1757117852.107:1628): pid=5799 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:32.117769 kernel: audit: type=1104 audit(1757117852.107:1629): pid=5799 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:32.107000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.22:22-10.0.0.1:52692 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:32.119124 systemd-logind[1218]: Removed session 16. Sep 6 00:17:32.659000 audit[1911]: AVC avc: denied { watch } for pid=1911 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:17:32.659000 audit[1911]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7c a1=c013ee1980 a2=fc6 a3=0 items=0 ppid=1734 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 key=(null) Sep 6 00:17:32.659000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 6 00:17:32.660000 audit[1911]: AVC avc: denied { watch } for pid=1911 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:17:32.660000 audit[1911]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7e a1=c013af0ac0 a2=fc6 a3=0 items=0 ppid=1734 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 key=(null) Sep 6 00:17:32.660000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 6 00:17:32.660000 audit[1911]: AVC avc: denied { watch } for pid=1911 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:17:32.660000 audit[1911]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7d a1=c013aa3ad0 a2=fc6 a3=0 items=0 ppid=1734 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 key=(null) Sep 6 00:17:32.660000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 6 00:17:32.666000 audit[1911]: AVC avc: denied { watch } for pid=1911 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:17:32.666000 audit[1911]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7b a1=c013e90390 a2=fc6 a3=0 items=0 ppid=1734 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 key=(null) Sep 6 00:17:32.666000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 6 00:17:32.674000 audit[1911]: AVC avc: denied { watch } for pid=1911 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:17:32.674000 audit[1911]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7c a1=c013d19260 a2=fc6 a3=0 items=0 ppid=1734 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 key=(null) Sep 6 00:17:32.674000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 6 00:17:32.674000 audit[1911]: AVC avc: denied { watch } for pid=1911 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:17:32.674000 audit[1911]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7c a1=c013af0b00 a2=fc6 a3=0 items=0 ppid=1734 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 key=(null) Sep 6 00:17:32.674000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 6 00:17:37.109000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.22:22-10.0.0.1:52708 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:37.110600 systemd[1]: Started sshd@16-10.0.0.22:22-10.0.0.1:52708.service. Sep 6 00:17:37.115029 kernel: kauditd_printk_skb: 19 callbacks suppressed Sep 6 00:17:37.115141 kernel: audit: type=1130 audit(1757117857.109:1637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.22:22-10.0.0.1:52708 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:37.171000 audit[5813]: USER_ACCT pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:37.174618 sshd[5813]: Accepted publickey for core from 10.0.0.1 port 52708 ssh2: RSA SHA256:mcWI8lWnD23EhgVbwJM01vCNerY3y/CLOw6SIUCzfEA Sep 6 00:17:37.179110 sshd[5813]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:17:37.177000 audit[5813]: CRED_ACQ pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:37.188457 kernel: audit: type=1101 audit(1757117857.171:1638): pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:37.188627 kernel: audit: type=1103 audit(1757117857.177:1639): pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:37.188656 kernel: audit: type=1006 audit(1757117857.177:1640): pid=5813 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Sep 6 00:17:37.192025 kernel: audit: type=1300 audit(1757117857.177:1640): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffee58c8a0 a2=3 a3=0 items=0 ppid=1 pid=5813 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:17:37.177000 audit[5813]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffee58c8a0 a2=3 a3=0 items=0 ppid=1 pid=5813 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:17:37.217103 kernel: audit: type=1327 audit(1757117857.177:1640): proctitle=737368643A20636F7265205B707269765D Sep 6 00:17:37.177000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:17:37.196898 systemd-logind[1218]: New session 17 of user core. Sep 6 00:17:37.198568 systemd[1]: Started session-17.scope. Sep 6 00:17:37.268000 audit[5813]: USER_START pid=5813 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:37.276000 audit[5815]: CRED_ACQ pid=5815 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:37.294552 kernel: audit: type=1105 audit(1757117857.268:1641): pid=5813 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:37.294715 kernel: audit: type=1103 audit(1757117857.276:1642): pid=5815 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:37.490688 sshd[5813]: pam_unix(sshd:session): session closed for user core Sep 6 00:17:37.490000 audit[5813]: USER_END pid=5813 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:37.494953 systemd[1]: sshd@16-10.0.0.22:22-10.0.0.1:52708.service: Deactivated successfully. Sep 6 00:17:37.495965 systemd[1]: session-17.scope: Deactivated successfully. Sep 6 00:17:37.497806 systemd-logind[1218]: Session 17 logged out. Waiting for processes to exit. Sep 6 00:17:37.491000 audit[5813]: CRED_DISP pid=5813 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:37.499365 systemd-logind[1218]: Removed session 17. Sep 6 00:17:37.504180 kernel: audit: type=1106 audit(1757117857.490:1643): pid=5813 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:37.504379 kernel: audit: type=1104 audit(1757117857.491:1644): pid=5813 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:37.491000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.22:22-10.0.0.1:52708 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:42.225000 audit[1884]: AVC avc: denied { watch } for pid=1884 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:17:42.229434 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 00:17:42.229601 kernel: audit: type=1400 audit(1757117862.225:1646): avc: denied { watch } for pid=1884 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:17:42.225000 audit[1884]: AVC avc: denied { watch } for pid=1884 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:17:42.239486 kernel: audit: type=1400 audit(1757117862.225:1647): avc: denied { watch } for pid=1884 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:17:42.239723 kernel: audit: type=1300 audit(1757117862.225:1646): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0014beac0 a2=fc6 a3=0 items=0 ppid=1739 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 key=(null) Sep 6 00:17:42.225000 audit[1884]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0014beac0 a2=fc6 a3=0 items=0 ppid=1739 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 key=(null) Sep 6 00:17:42.225000 audit[1884]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00323aa60 a2=fc6 a3=0 items=0 ppid=1739 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 key=(null) Sep 6 00:17:42.253945 kernel: audit: type=1300 audit(1757117862.225:1647): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00323aa60 a2=fc6 a3=0 items=0 ppid=1739 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 key=(null) Sep 6 00:17:42.254180 kernel: audit: type=1327 audit(1757117862.225:1647): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:17:42.225000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:17:42.261013 kernel: audit: type=1327 audit(1757117862.225:1646): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:17:42.225000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:17:42.225000 audit[1884]: AVC avc: denied { watch } for pid=1884 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:17:42.273568 kernel: audit: type=1400 audit(1757117862.225:1648): avc: denied { watch } for pid=1884 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:17:42.273753 kernel: audit: type=1300 audit(1757117862.225:1648): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00348afc0 a2=fc6 a3=0 items=0 ppid=1739 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 key=(null) Sep 6 00:17:42.225000 audit[1884]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00348afc0 a2=fc6 a3=0 items=0 ppid=1739 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 key=(null) Sep 6 00:17:42.279341 kernel: audit: type=1327 audit(1757117862.225:1648): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:17:42.225000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:17:42.227000 audit[1884]: AVC avc: denied { watch } for pid=1884 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:17:42.227000 audit[1884]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00339cda0 a2=fc6 a3=0 items=0 ppid=1739 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 key=(null) Sep 6 00:17:42.227000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:17:42.293062 kernel: audit: type=1400 audit(1757117862.227:1649): avc: denied { watch } for pid=1884 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:17:42.516966 systemd[1]: Started sshd@17-10.0.0.22:22-10.0.0.1:35432.service. Sep 6 00:17:42.515000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.22:22-10.0.0.1:35432 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:42.617000 audit[5872]: USER_ACCT pid=5872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:42.625847 sshd[5872]: Accepted publickey for core from 10.0.0.1 port 35432 ssh2: RSA SHA256:mcWI8lWnD23EhgVbwJM01vCNerY3y/CLOw6SIUCzfEA Sep 6 00:17:42.628000 audit[5872]: CRED_ACQ pid=5872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:42.628000 audit[5872]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffef3c5db90 a2=3 a3=0 items=0 ppid=1 pid=5872 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:17:42.628000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:17:42.631025 sshd[5872]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:17:42.655399 systemd[1]: Started session-18.scope. Sep 6 00:17:42.657803 systemd-logind[1218]: New session 18 of user core. Sep 6 00:17:42.683000 audit[5872]: USER_START pid=5872 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:42.685000 audit[5874]: CRED_ACQ pid=5874 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:42.949051 sshd[5872]: pam_unix(sshd:session): session closed for user core Sep 6 00:17:42.952000 audit[5872]: USER_END pid=5872 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:42.952000 audit[5872]: CRED_DISP pid=5872 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:42.955639 systemd[1]: sshd@17-10.0.0.22:22-10.0.0.1:35432.service: Deactivated successfully. Sep 6 00:17:42.958000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.22:22-10.0.0.1:35432 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:42.960457 systemd[1]: session-18.scope: Deactivated successfully. Sep 6 00:17:42.961934 systemd-logind[1218]: Session 18 logged out. Waiting for processes to exit. Sep 6 00:17:42.971044 systemd-logind[1218]: Removed session 18. Sep 6 00:17:44.881048 env[1225]: time="2025-09-06T00:17:44.880961433Z" level=info msg="StopPodSandbox for \"9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1\"" Sep 6 00:17:45.443340 env[1225]: 2025-09-06 00:17:45.244 [WARNING][5893] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" WorkloadEndpoint="localhost-k8s-whisker--5697c6c69--p4xxr-eth0" Sep 6 00:17:45.443340 env[1225]: 2025-09-06 00:17:45.248 [INFO][5893] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Sep 6 00:17:45.443340 env[1225]: 2025-09-06 00:17:45.248 [INFO][5893] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" iface="eth0" netns="" Sep 6 00:17:45.443340 env[1225]: 2025-09-06 00:17:45.248 [INFO][5893] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Sep 6 00:17:45.443340 env[1225]: 2025-09-06 00:17:45.248 [INFO][5893] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Sep 6 00:17:45.443340 env[1225]: 2025-09-06 00:17:45.388 [INFO][5901] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" HandleID="k8s-pod-network.9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Workload="localhost-k8s-whisker--5697c6c69--p4xxr-eth0" Sep 6 00:17:45.443340 env[1225]: 2025-09-06 00:17:45.391 [INFO][5901] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:17:45.443340 env[1225]: 2025-09-06 00:17:45.391 [INFO][5901] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:17:45.443340 env[1225]: 2025-09-06 00:17:45.404 [WARNING][5901] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" HandleID="k8s-pod-network.9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Workload="localhost-k8s-whisker--5697c6c69--p4xxr-eth0" Sep 6 00:17:45.443340 env[1225]: 2025-09-06 00:17:45.404 [INFO][5901] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" HandleID="k8s-pod-network.9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Workload="localhost-k8s-whisker--5697c6c69--p4xxr-eth0" Sep 6 00:17:45.443340 env[1225]: 2025-09-06 00:17:45.412 [INFO][5901] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:17:45.443340 env[1225]: 2025-09-06 00:17:45.422 [INFO][5893] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Sep 6 00:17:45.443340 env[1225]: time="2025-09-06T00:17:45.441946649Z" level=info msg="TearDown network for sandbox \"9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1\" successfully" Sep 6 00:17:45.445885 env[1225]: time="2025-09-06T00:17:45.444673826Z" level=info msg="StopPodSandbox for \"9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1\" returns successfully" Sep 6 00:17:45.451371 env[1225]: time="2025-09-06T00:17:45.448424887Z" level=info msg="RemovePodSandbox for \"9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1\"" Sep 6 00:17:45.451371 env[1225]: time="2025-09-06T00:17:45.448489360Z" level=info msg="Forcibly stopping sandbox \"9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1\"" Sep 6 00:17:45.672777 env[1225]: 2025-09-06 00:17:45.584 [WARNING][5919] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" WorkloadEndpoint="localhost-k8s-whisker--5697c6c69--p4xxr-eth0" Sep 6 00:17:45.672777 env[1225]: 2025-09-06 00:17:45.585 [INFO][5919] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Sep 6 00:17:45.672777 env[1225]: 2025-09-06 00:17:45.588 [INFO][5919] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" iface="eth0" netns="" Sep 6 00:17:45.672777 env[1225]: 2025-09-06 00:17:45.588 [INFO][5919] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Sep 6 00:17:45.672777 env[1225]: 2025-09-06 00:17:45.588 [INFO][5919] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Sep 6 00:17:45.672777 env[1225]: 2025-09-06 00:17:45.633 [INFO][5927] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" HandleID="k8s-pod-network.9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Workload="localhost-k8s-whisker--5697c6c69--p4xxr-eth0" Sep 6 00:17:45.672777 env[1225]: 2025-09-06 00:17:45.633 [INFO][5927] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:17:45.672777 env[1225]: 2025-09-06 00:17:45.633 [INFO][5927] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:17:45.672777 env[1225]: 2025-09-06 00:17:45.642 [WARNING][5927] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" HandleID="k8s-pod-network.9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Workload="localhost-k8s-whisker--5697c6c69--p4xxr-eth0" Sep 6 00:17:45.672777 env[1225]: 2025-09-06 00:17:45.642 [INFO][5927] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" HandleID="k8s-pod-network.9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Workload="localhost-k8s-whisker--5697c6c69--p4xxr-eth0" Sep 6 00:17:45.672777 env[1225]: 2025-09-06 00:17:45.652 [INFO][5927] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:17:45.672777 env[1225]: 2025-09-06 00:17:45.662 [INFO][5919] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1" Sep 6 00:17:45.672777 env[1225]: time="2025-09-06T00:17:45.671342024Z" level=info msg="TearDown network for sandbox \"9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1\" successfully" Sep 6 00:17:45.702838 env[1225]: time="2025-09-06T00:17:45.699226250Z" level=info msg="RemovePodSandbox \"9cf4f7815c9db7af9c178da7c843e4b0bb8a295249eceb43c624a2bd6a6021c1\" returns successfully" Sep 6 00:17:47.245038 systemd[1]: run-containerd-runc-k8s.io-954a341ac06695ba147e773491e7cf897d51750ea488cdfbe4c34a542eec2b1e-runc.jT7Q3M.mount: Deactivated successfully. Sep 6 00:17:47.961462 systemd[1]: Started sshd@18-10.0.0.22:22-10.0.0.1:35446.service. Sep 6 00:17:47.961000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.22:22-10.0.0.1:35446 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:47.971185 kernel: kauditd_printk_skb: 13 callbacks suppressed Sep 6 00:17:47.971377 kernel: audit: type=1130 audit(1757117867.961:1659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.22:22-10.0.0.1:35446 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:48.199000 audit[5954]: USER_ACCT pid=5954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:48.201113 sshd[5954]: Accepted publickey for core from 10.0.0.1 port 35446 ssh2: RSA SHA256:mcWI8lWnD23EhgVbwJM01vCNerY3y/CLOw6SIUCzfEA Sep 6 00:17:48.210188 kernel: audit: type=1101 audit(1757117868.199:1660): pid=5954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:48.208000 audit[5954]: CRED_ACQ pid=5954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:48.220440 sshd[5954]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:17:48.223746 kernel: audit: type=1103 audit(1757117868.208:1661): pid=5954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:48.223904 kernel: audit: type=1006 audit(1757117868.209:1662): pid=5954 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Sep 6 00:17:48.223937 kernel: audit: type=1300 audit(1757117868.209:1662): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc6f2f17b0 a2=3 a3=0 items=0 ppid=1 pid=5954 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:17:48.209000 audit[5954]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc6f2f17b0 a2=3 a3=0 items=0 ppid=1 pid=5954 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:17:48.230067 kernel: audit: type=1327 audit(1757117868.209:1662): proctitle=737368643A20636F7265205B707269765D Sep 6 00:17:48.209000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:17:48.236818 systemd-logind[1218]: New session 19 of user core. Sep 6 00:17:48.239395 systemd[1]: Started session-19.scope. Sep 6 00:17:48.256000 audit[5954]: USER_START pid=5954 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:48.268000 audit[5956]: CRED_ACQ pid=5956 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:48.293029 kernel: audit: type=1105 audit(1757117868.256:1663): pid=5954 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:48.293167 kernel: audit: type=1103 audit(1757117868.268:1664): pid=5956 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:48.661319 sshd[5954]: pam_unix(sshd:session): session closed for user core Sep 6 00:17:48.662000 audit[5954]: USER_END pid=5954 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:48.662000 audit[5954]: CRED_DISP pid=5954 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:48.666110 systemd[1]: sshd@18-10.0.0.22:22-10.0.0.1:35446.service: Deactivated successfully. Sep 6 00:17:48.676918 kernel: audit: type=1106 audit(1757117868.662:1665): pid=5954 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:48.677547 kernel: audit: type=1104 audit(1757117868.662:1666): pid=5954 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:48.667000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.22:22-10.0.0.1:35446 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:48.674917 systemd[1]: session-19.scope: Deactivated successfully. Sep 6 00:17:48.678709 systemd-logind[1218]: Session 19 logged out. Waiting for processes to exit. Sep 6 00:17:48.681775 systemd-logind[1218]: Removed session 19. Sep 6 00:17:50.709048 kubelet[2030]: E0906 00:17:50.708963 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:17:53.674523 systemd[1]: Started sshd@19-10.0.0.22:22-10.0.0.1:47620.service. Sep 6 00:17:53.673000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.22:22-10.0.0.1:47620 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:53.675801 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 00:17:53.675907 kernel: audit: type=1130 audit(1757117873.673:1668): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.22:22-10.0.0.1:47620 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:53.730000 audit[5999]: USER_ACCT pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:53.731775 sshd[5999]: Accepted publickey for core from 10.0.0.1 port 47620 ssh2: RSA SHA256:mcWI8lWnD23EhgVbwJM01vCNerY3y/CLOw6SIUCzfEA Sep 6 00:17:53.734313 sshd[5999]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:17:53.732000 audit[5999]: CRED_ACQ pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:53.741465 kernel: audit: type=1101 audit(1757117873.730:1669): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:53.741653 kernel: audit: type=1103 audit(1757117873.732:1670): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:53.741701 kernel: audit: type=1006 audit(1757117873.732:1671): pid=5999 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Sep 6 00:17:53.743072 systemd-logind[1218]: New session 20 of user core. Sep 6 00:17:53.744564 kernel: audit: type=1300 audit(1757117873.732:1671): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe07834160 a2=3 a3=0 items=0 ppid=1 pid=5999 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:17:53.732000 audit[5999]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe07834160 a2=3 a3=0 items=0 ppid=1 pid=5999 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:17:53.744921 systemd[1]: Started session-20.scope. Sep 6 00:17:53.749273 kernel: audit: type=1327 audit(1757117873.732:1671): proctitle=737368643A20636F7265205B707269765D Sep 6 00:17:53.732000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:17:53.755000 audit[5999]: USER_START pid=5999 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:53.757000 audit[6001]: CRED_ACQ pid=6001 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:53.765633 kernel: audit: type=1105 audit(1757117873.755:1672): pid=5999 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:53.765843 kernel: audit: type=1103 audit(1757117873.757:1673): pid=6001 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:53.934804 sshd[5999]: pam_unix(sshd:session): session closed for user core Sep 6 00:17:53.940000 audit[5999]: USER_END pid=5999 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:53.945343 systemd[1]: sshd@19-10.0.0.22:22-10.0.0.1:47620.service: Deactivated successfully. Sep 6 00:17:53.947171 systemd[1]: session-20.scope: Deactivated successfully. Sep 6 00:17:53.953067 kernel: audit: type=1106 audit(1757117873.940:1674): pid=5999 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:53.954478 kernel: audit: type=1104 audit(1757117873.942:1675): pid=5999 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:53.942000 audit[5999]: CRED_DISP pid=5999 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:53.951374 systemd-logind[1218]: Session 20 logged out. Waiting for processes to exit. Sep 6 00:17:53.946000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.22:22-10.0.0.1:47620 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:53.954958 systemd-logind[1218]: Removed session 20. Sep 6 00:17:57.315000 audit[5508]: AVC avc: denied { watch } for pid=5508 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_00_16_18.3632861691/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c183,c273 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c183,c273 tclass=file permissive=0 Sep 6 00:17:57.315000 audit[5508]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001c9ea60 a2=fc6 a3=0 items=0 ppid=4404 pid=5508 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c183,c273 key=(null) Sep 6 00:17:57.315000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 00:17:57.380000 audit[5469]: AVC avc: denied { watch } for pid=5469 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_00_16_18.604940523/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c35,c200 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c35,c200 tclass=file permissive=0 Sep 6 00:17:57.380000 audit[5469]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001f8cb20 a2=fc6 a3=0 items=0 ppid=4350 pid=5469 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c35,c200 key=(null) Sep 6 00:17:57.380000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 00:17:57.704167 kubelet[2030]: E0906 00:17:57.704020 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:17:58.953000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.22:22-10.0.0.1:47624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:58.954413 systemd[1]: Started sshd@20-10.0.0.22:22-10.0.0.1:47624.service. Sep 6 00:17:58.957949 kernel: kauditd_printk_skb: 7 callbacks suppressed Sep 6 00:17:58.958058 kernel: audit: type=1130 audit(1757117878.953:1679): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.22:22-10.0.0.1:47624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:59.029000 audit[6012]: USER_ACCT pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:59.038728 sshd[6012]: Accepted publickey for core from 10.0.0.1 port 47624 ssh2: RSA SHA256:mcWI8lWnD23EhgVbwJM01vCNerY3y/CLOw6SIUCzfEA Sep 6 00:17:59.044162 sshd[6012]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:17:59.043000 audit[6012]: CRED_ACQ pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:59.052613 kernel: audit: type=1101 audit(1757117879.029:1680): pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:59.053437 kernel: audit: type=1103 audit(1757117879.043:1681): pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:59.053482 kernel: audit: type=1006 audit(1757117879.043:1682): pid=6012 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Sep 6 00:17:59.059024 kernel: audit: type=1300 audit(1757117879.043:1682): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe78f66de0 a2=3 a3=0 items=0 ppid=1 pid=6012 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:17:59.043000 audit[6012]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe78f66de0 a2=3 a3=0 items=0 ppid=1 pid=6012 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:17:59.069178 kernel: audit: type=1327 audit(1757117879.043:1682): proctitle=737368643A20636F7265205B707269765D Sep 6 00:17:59.043000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:17:59.069799 systemd[1]: Started session-21.scope. Sep 6 00:17:59.070452 systemd-logind[1218]: New session 21 of user core. Sep 6 00:17:59.119000 audit[6012]: USER_START pid=6012 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:59.125000 audit[6014]: CRED_ACQ pid=6014 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:59.134500 kernel: audit: type=1105 audit(1757117879.119:1683): pid=6012 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:59.134677 kernel: audit: type=1103 audit(1757117879.125:1684): pid=6014 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:59.380002 sshd[6012]: pam_unix(sshd:session): session closed for user core Sep 6 00:17:59.381000 audit[6012]: USER_END pid=6012 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:59.384848 systemd[1]: sshd@20-10.0.0.22:22-10.0.0.1:47624.service: Deactivated successfully. Sep 6 00:17:59.386151 systemd[1]: session-21.scope: Deactivated successfully. Sep 6 00:17:59.381000 audit[6012]: CRED_DISP pid=6012 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:59.392721 kernel: audit: type=1106 audit(1757117879.381:1685): pid=6012 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:59.392926 kernel: audit: type=1104 audit(1757117879.381:1686): pid=6012 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:17:59.384000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.22:22-10.0.0.1:47624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:17:59.393884 systemd-logind[1218]: Session 21 logged out. Waiting for processes to exit. Sep 6 00:17:59.395420 systemd-logind[1218]: Removed session 21. Sep 6 00:18:04.393856 systemd[1]: Started sshd@21-10.0.0.22:22-10.0.0.1:38480.service. Sep 6 00:18:04.394000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.22:22-10.0.0.1:38480 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:18:04.403259 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 00:18:04.404793 kernel: audit: type=1130 audit(1757117884.394:1688): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.22:22-10.0.0.1:38480 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:18:04.463000 audit[6046]: USER_ACCT pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:04.465022 sshd[6046]: Accepted publickey for core from 10.0.0.1 port 38480 ssh2: RSA SHA256:mcWI8lWnD23EhgVbwJM01vCNerY3y/CLOw6SIUCzfEA Sep 6 00:18:04.477030 kernel: audit: type=1101 audit(1757117884.463:1689): pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:04.477000 audit[6046]: CRED_ACQ pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:04.478629 sshd[6046]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:18:04.491067 kernel: audit: type=1103 audit(1757117884.477:1690): pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:04.491235 kernel: audit: type=1006 audit(1757117884.477:1691): pid=6046 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Sep 6 00:18:04.491267 kernel: audit: type=1300 audit(1757117884.477:1691): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd417510c0 a2=3 a3=0 items=0 ppid=1 pid=6046 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:18:04.477000 audit[6046]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd417510c0 a2=3 a3=0 items=0 ppid=1 pid=6046 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:18:04.492401 systemd[1]: Started session-22.scope. Sep 6 00:18:04.492894 systemd-logind[1218]: New session 22 of user core. Sep 6 00:18:04.504036 kernel: audit: type=1327 audit(1757117884.477:1691): proctitle=737368643A20636F7265205B707269765D Sep 6 00:18:04.477000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:18:04.501000 audit[6046]: USER_START pid=6046 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:04.512809 kernel: audit: type=1105 audit(1757117884.501:1692): pid=6046 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:04.513026 kernel: audit: type=1103 audit(1757117884.504:1693): pid=6048 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:04.504000 audit[6048]: CRED_ACQ pid=6048 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:04.703259 sshd[6046]: pam_unix(sshd:session): session closed for user core Sep 6 00:18:04.703000 audit[6046]: USER_END pid=6046 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:04.709365 systemd[1]: sshd@21-10.0.0.22:22-10.0.0.1:38480.service: Deactivated successfully. Sep 6 00:18:04.710513 systemd[1]: session-22.scope: Deactivated successfully. Sep 6 00:18:04.712007 kubelet[2030]: E0906 00:18:04.711440 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:18:04.713555 systemd-logind[1218]: Session 22 logged out. Waiting for processes to exit. Sep 6 00:18:04.714881 systemd-logind[1218]: Removed session 22. Sep 6 00:18:04.703000 audit[6046]: CRED_DISP pid=6046 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:04.726458 kernel: audit: type=1106 audit(1757117884.703:1694): pid=6046 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:04.726685 kernel: audit: type=1104 audit(1757117884.703:1695): pid=6046 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:04.709000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.22:22-10.0.0.1:38480 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:18:09.725570 systemd[1]: Started sshd@22-10.0.0.22:22-10.0.0.1:38494.service. Sep 6 00:18:09.722000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.22:22-10.0.0.1:38494 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:18:09.730611 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 00:18:09.734913 kernel: audit: type=1130 audit(1757117889.722:1697): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.22:22-10.0.0.1:38494 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:18:09.847000 audit[6101]: USER_ACCT pid=6101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:09.849504 sshd[6101]: Accepted publickey for core from 10.0.0.1 port 38494 ssh2: RSA SHA256:mcWI8lWnD23EhgVbwJM01vCNerY3y/CLOw6SIUCzfEA Sep 6 00:18:09.850000 audit[6101]: CRED_ACQ pid=6101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:09.860285 sshd[6101]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:18:09.866342 kernel: audit: type=1101 audit(1757117889.847:1698): pid=6101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:09.866544 kernel: audit: type=1103 audit(1757117889.850:1699): pid=6101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:09.866590 kernel: audit: type=1006 audit(1757117889.850:1700): pid=6101 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Sep 6 00:18:09.850000 audit[6101]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd36bbed80 a2=3 a3=0 items=0 ppid=1 pid=6101 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:18:09.878227 kernel: audit: type=1300 audit(1757117889.850:1700): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd36bbed80 a2=3 a3=0 items=0 ppid=1 pid=6101 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:18:09.878461 kernel: audit: type=1327 audit(1757117889.850:1700): proctitle=737368643A20636F7265205B707269765D Sep 6 00:18:09.850000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:18:09.884433 systemd-logind[1218]: New session 23 of user core. Sep 6 00:18:09.889707 systemd[1]: Started session-23.scope. Sep 6 00:18:09.924000 audit[6101]: USER_START pid=6101 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:09.940378 kernel: audit: type=1105 audit(1757117889.924:1701): pid=6101 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:09.940608 kernel: audit: type=1103 audit(1757117889.933:1702): pid=6103 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:09.933000 audit[6103]: CRED_ACQ pid=6103 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:10.201768 sshd[6101]: pam_unix(sshd:session): session closed for user core Sep 6 00:18:10.204000 audit[6101]: USER_END pid=6101 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:10.204000 audit[6101]: CRED_DISP pid=6101 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:10.209503 systemd[1]: Started sshd@23-10.0.0.22:22-10.0.0.1:53046.service. Sep 6 00:18:10.211447 systemd[1]: sshd@22-10.0.0.22:22-10.0.0.1:38494.service: Deactivated successfully. Sep 6 00:18:10.216741 systemd[1]: session-23.scope: Deactivated successfully. Sep 6 00:18:10.218296 systemd-logind[1218]: Session 23 logged out. Waiting for processes to exit. Sep 6 00:18:10.220854 kernel: audit: type=1106 audit(1757117890.204:1703): pid=6101 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:10.220956 kernel: audit: type=1104 audit(1757117890.204:1704): pid=6101 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:10.208000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.22:22-10.0.0.1:53046 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:18:10.210000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.22:22-10.0.0.1:38494 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:18:10.222109 systemd-logind[1218]: Removed session 23. Sep 6 00:18:10.260000 audit[6113]: USER_ACCT pid=6113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:10.262249 sshd[6113]: Accepted publickey for core from 10.0.0.1 port 53046 ssh2: RSA SHA256:mcWI8lWnD23EhgVbwJM01vCNerY3y/CLOw6SIUCzfEA Sep 6 00:18:10.266659 sshd[6113]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:18:10.263000 audit[6113]: CRED_ACQ pid=6113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:10.265000 audit[6113]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdfe27bcf0 a2=3 a3=0 items=0 ppid=1 pid=6113 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:18:10.265000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:18:10.292918 systemd-logind[1218]: New session 24 of user core. Sep 6 00:18:10.295264 systemd[1]: Started session-24.scope. Sep 6 00:18:10.309000 audit[6113]: USER_START pid=6113 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:10.311000 audit[6116]: CRED_ACQ pid=6116 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:11.114408 sshd[6113]: pam_unix(sshd:session): session closed for user core Sep 6 00:18:11.114000 audit[6113]: USER_END pid=6113 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:11.115000 audit[6113]: CRED_DISP pid=6113 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:11.124000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.22:22-10.0.0.1:53056 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:18:11.124752 systemd[1]: Started sshd@24-10.0.0.22:22-10.0.0.1:53056.service. Sep 6 00:18:11.127203 systemd[1]: sshd@23-10.0.0.22:22-10.0.0.1:53046.service: Deactivated successfully. Sep 6 00:18:11.126000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.22:22-10.0.0.1:53046 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:18:11.128553 systemd[1]: session-24.scope: Deactivated successfully. Sep 6 00:18:11.134701 systemd-logind[1218]: Session 24 logged out. Waiting for processes to exit. Sep 6 00:18:11.140914 systemd-logind[1218]: Removed session 24. Sep 6 00:18:11.211000 audit[6125]: USER_ACCT pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:11.213643 sshd[6125]: Accepted publickey for core from 10.0.0.1 port 53056 ssh2: RSA SHA256:mcWI8lWnD23EhgVbwJM01vCNerY3y/CLOw6SIUCzfEA Sep 6 00:18:11.213000 audit[6125]: CRED_ACQ pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:11.215000 audit[6125]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd1fb5f110 a2=3 a3=0 items=0 ppid=1 pid=6125 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:18:11.220734 sshd[6125]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:18:11.215000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:18:11.234572 systemd-logind[1218]: New session 25 of user core. Sep 6 00:18:11.234866 systemd[1]: Started session-25.scope. Sep 6 00:18:11.253000 audit[6125]: USER_START pid=6125 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:11.257000 audit[6128]: CRED_ACQ pid=6128 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:12.603000 audit[6149]: NETFILTER_CFG table=filter:137 family=2 entries=20 op=nft_register_rule pid=6149 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:18:12.603000 audit[6149]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffe6a19f5f0 a2=0 a3=7ffe6a19f5dc items=0 ppid=2180 pid=6149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:18:12.603000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:18:12.617000 audit[6149]: NETFILTER_CFG table=nat:138 family=2 entries=26 op=nft_register_rule pid=6149 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:18:12.617000 audit[6149]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffe6a19f5f0 a2=0 a3=0 items=0 ppid=2180 pid=6149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:18:12.617000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:18:12.647164 sshd[6125]: pam_unix(sshd:session): session closed for user core Sep 6 00:18:12.652000 audit[6125]: USER_END pid=6125 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:12.652000 audit[6125]: CRED_DISP pid=6125 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:12.654000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.22:22-10.0.0.1:53066 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:18:12.655000 audit[6152]: NETFILTER_CFG table=filter:139 family=2 entries=32 op=nft_register_rule pid=6152 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:18:12.655000 audit[6152]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7fff2d7aaf10 a2=0 a3=7fff2d7aaefc items=0 ppid=2180 pid=6152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:18:12.655000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:18:12.654924 systemd[1]: Started sshd@25-10.0.0.22:22-10.0.0.1:53066.service. Sep 6 00:18:12.655906 systemd[1]: sshd@24-10.0.0.22:22-10.0.0.1:53056.service: Deactivated successfully. Sep 6 00:18:12.658000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.22:22-10.0.0.1:53056 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:18:12.661643 systemd[1]: session-25.scope: Deactivated successfully. Sep 6 00:18:12.667134 systemd-logind[1218]: Session 25 logged out. Waiting for processes to exit. Sep 6 00:18:12.669749 systemd-logind[1218]: Removed session 25. Sep 6 00:18:12.669000 audit[6152]: NETFILTER_CFG table=nat:140 family=2 entries=26 op=nft_register_rule pid=6152 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:18:12.669000 audit[6152]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7fff2d7aaf10 a2=0 a3=0 items=0 ppid=2180 pid=6152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:18:12.669000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:18:12.804476 sshd[6153]: Accepted publickey for core from 10.0.0.1 port 53066 ssh2: RSA SHA256:mcWI8lWnD23EhgVbwJM01vCNerY3y/CLOw6SIUCzfEA Sep 6 00:18:12.803000 audit[6153]: USER_ACCT pid=6153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:12.803000 audit[6153]: CRED_ACQ pid=6153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:12.803000 audit[6153]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff8675b580 a2=3 a3=0 items=0 ppid=1 pid=6153 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:18:12.803000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:18:12.808606 sshd[6153]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:18:12.831175 systemd-logind[1218]: New session 26 of user core. Sep 6 00:18:12.831535 systemd[1]: Started session-26.scope. Sep 6 00:18:12.845000 audit[6153]: USER_START pid=6153 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:12.849000 audit[6156]: CRED_ACQ pid=6156 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:13.559969 sshd[6153]: pam_unix(sshd:session): session closed for user core Sep 6 00:18:13.575000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.22:22-10.0.0.1:53080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:18:13.575870 systemd[1]: Started sshd@26-10.0.0.22:22-10.0.0.1:53080.service. Sep 6 00:18:13.577000 audit[6153]: USER_END pid=6153 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:13.577000 audit[6153]: CRED_DISP pid=6153 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:13.582836 systemd[1]: sshd@25-10.0.0.22:22-10.0.0.1:53066.service: Deactivated successfully. Sep 6 00:18:13.579000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.22:22-10.0.0.1:53066 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:18:13.588678 systemd[1]: session-26.scope: Deactivated successfully. Sep 6 00:18:13.593322 systemd-logind[1218]: Session 26 logged out. Waiting for processes to exit. Sep 6 00:18:13.598543 systemd-logind[1218]: Removed session 26. Sep 6 00:18:13.669000 audit[6166]: USER_ACCT pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:13.672066 sshd[6166]: Accepted publickey for core from 10.0.0.1 port 53080 ssh2: RSA SHA256:mcWI8lWnD23EhgVbwJM01vCNerY3y/CLOw6SIUCzfEA Sep 6 00:18:13.672000 audit[6166]: CRED_ACQ pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:13.672000 audit[6166]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc8ceac410 a2=3 a3=0 items=0 ppid=1 pid=6166 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:18:13.672000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:18:13.674405 sshd[6166]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:18:13.692062 systemd[1]: Started session-27.scope. Sep 6 00:18:13.693230 systemd-logind[1218]: New session 27 of user core. Sep 6 00:18:13.718000 audit[6166]: USER_START pid=6166 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:13.723000 audit[6170]: CRED_ACQ pid=6170 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:13.895064 sshd[6166]: pam_unix(sshd:session): session closed for user core Sep 6 00:18:13.897000 audit[6166]: USER_END pid=6166 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:13.897000 audit[6166]: CRED_DISP pid=6166 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:13.902650 systemd[1]: sshd@26-10.0.0.22:22-10.0.0.1:53080.service: Deactivated successfully. Sep 6 00:18:13.904018 systemd[1]: session-27.scope: Deactivated successfully. Sep 6 00:18:13.902000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.22:22-10.0.0.1:53080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:18:13.917122 systemd-logind[1218]: Session 27 logged out. Waiting for processes to exit. Sep 6 00:18:13.918692 systemd-logind[1218]: Removed session 27. Sep 6 00:18:18.706758 kubelet[2030]: E0906 00:18:18.705425 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:18:18.912132 systemd[1]: Started sshd@27-10.0.0.22:22-10.0.0.1:53082.service. Sep 6 00:18:18.910000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.22:22-10.0.0.1:53082 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:18:18.916902 kernel: kauditd_printk_skb: 57 callbacks suppressed Sep 6 00:18:18.917004 kernel: audit: type=1130 audit(1757117898.910:1746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.22:22-10.0.0.1:53082 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:18:18.980000 audit[6183]: USER_ACCT pid=6183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:18.986824 sshd[6183]: Accepted publickey for core from 10.0.0.1 port 53082 ssh2: RSA SHA256:mcWI8lWnD23EhgVbwJM01vCNerY3y/CLOw6SIUCzfEA Sep 6 00:18:18.992156 kernel: audit: type=1101 audit(1757117898.980:1747): pid=6183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:18.992334 kernel: audit: type=1103 audit(1757117898.989:1748): pid=6183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:18.989000 audit[6183]: CRED_ACQ pid=6183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:18.990720 sshd[6183]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:18:19.003373 kernel: audit: type=1006 audit(1757117898.989:1749): pid=6183 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Sep 6 00:18:18.989000 audit[6183]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd2f893410 a2=3 a3=0 items=0 ppid=1 pid=6183 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:18:19.011386 kernel: audit: type=1300 audit(1757117898.989:1749): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd2f893410 a2=3 a3=0 items=0 ppid=1 pid=6183 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:18:19.011914 kernel: audit: type=1327 audit(1757117898.989:1749): proctitle=737368643A20636F7265205B707269765D Sep 6 00:18:18.989000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:18:19.012569 systemd-logind[1218]: New session 28 of user core. Sep 6 00:18:19.014253 systemd[1]: Started session-28.scope. Sep 6 00:18:19.035000 audit[6183]: USER_START pid=6183 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:19.038000 audit[6185]: CRED_ACQ pid=6185 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:19.054165 kernel: audit: type=1105 audit(1757117899.035:1750): pid=6183 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:19.054349 kernel: audit: type=1103 audit(1757117899.038:1751): pid=6185 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:19.259354 sshd[6183]: pam_unix(sshd:session): session closed for user core Sep 6 00:18:19.263000 audit[6183]: USER_END pid=6183 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:19.267034 systemd[1]: sshd@27-10.0.0.22:22-10.0.0.1:53082.service: Deactivated successfully. Sep 6 00:18:19.270330 systemd[1]: session-28.scope: Deactivated successfully. Sep 6 00:18:19.263000 audit[6183]: CRED_DISP pid=6183 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:19.271579 systemd-logind[1218]: Session 28 logged out. Waiting for processes to exit. Sep 6 00:18:19.272736 systemd-logind[1218]: Removed session 28. Sep 6 00:18:19.279815 kernel: audit: type=1106 audit(1757117899.263:1752): pid=6183 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:19.280064 kernel: audit: type=1104 audit(1757117899.263:1753): pid=6183 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:19.266000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.22:22-10.0.0.1:53082 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:18:20.605042 systemd[1]: run-containerd-runc-k8s.io-7bc34d81ce837d56eb1ec0dd63c8a768b41c85afa9b58ca36c0980ee702298fb-runc.1VfppO.mount: Deactivated successfully. Sep 6 00:18:20.707141 kubelet[2030]: E0906 00:18:20.707018 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:18:21.663000 audit[6220]: NETFILTER_CFG table=filter:141 family=2 entries=20 op=nft_register_rule pid=6220 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:18:21.663000 audit[6220]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc23d2b210 a2=0 a3=7ffc23d2b1fc items=0 ppid=2180 pid=6220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:18:21.663000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:18:21.677000 audit[6220]: NETFILTER_CFG table=nat:142 family=2 entries=110 op=nft_register_chain pid=6220 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:18:21.677000 audit[6220]: SYSCALL arch=c000003e syscall=46 success=yes exit=50988 a0=3 a1=7ffc23d2b210 a2=0 a3=7ffc23d2b1fc items=0 ppid=2180 pid=6220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:18:21.677000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:18:24.275000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.22:22-10.0.0.1:49242 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:18:24.275773 systemd[1]: Started sshd@28-10.0.0.22:22-10.0.0.1:49242.service. Sep 6 00:18:24.282140 kernel: kauditd_printk_skb: 7 callbacks suppressed Sep 6 00:18:24.282305 kernel: audit: type=1130 audit(1757117904.275:1757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.22:22-10.0.0.1:49242 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:18:24.428000 audit[6222]: USER_ACCT pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:24.434888 sshd[6222]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:18:24.435928 sshd[6222]: Accepted publickey for core from 10.0.0.1 port 49242 ssh2: RSA SHA256:mcWI8lWnD23EhgVbwJM01vCNerY3y/CLOw6SIUCzfEA Sep 6 00:18:24.452148 kernel: audit: type=1101 audit(1757117904.428:1758): pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:24.452326 kernel: audit: type=1103 audit(1757117904.428:1759): pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:24.452372 kernel: audit: type=1006 audit(1757117904.428:1760): pid=6222 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 Sep 6 00:18:24.428000 audit[6222]: CRED_ACQ pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:24.447777 systemd[1]: Started session-29.scope. Sep 6 00:18:24.449739 systemd-logind[1218]: New session 29 of user core. Sep 6 00:18:24.428000 audit[6222]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff1f9e8d60 a2=3 a3=0 items=0 ppid=1 pid=6222 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:18:24.470719 kernel: audit: type=1300 audit(1757117904.428:1760): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff1f9e8d60 a2=3 a3=0 items=0 ppid=1 pid=6222 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:18:24.470890 kernel: audit: type=1327 audit(1757117904.428:1760): proctitle=737368643A20636F7265205B707269765D Sep 6 00:18:24.470929 kernel: audit: type=1105 audit(1757117904.462:1761): pid=6222 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:24.428000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:18:24.462000 audit[6222]: USER_START pid=6222 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:24.469000 audit[6224]: CRED_ACQ pid=6224 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:24.487872 kernel: audit: type=1103 audit(1757117904.469:1762): pid=6224 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:24.874297 sshd[6222]: pam_unix(sshd:session): session closed for user core Sep 6 00:18:24.874000 audit[6222]: USER_END pid=6222 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:24.874000 audit[6222]: CRED_DISP pid=6222 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:24.893093 kernel: audit: type=1106 audit(1757117904.874:1763): pid=6222 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:24.893254 kernel: audit: type=1104 audit(1757117904.874:1764): pid=6222 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:24.891000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.22:22-10.0.0.1:49242 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:18:24.891844 systemd[1]: sshd@28-10.0.0.22:22-10.0.0.1:49242.service: Deactivated successfully. Sep 6 00:18:24.893108 systemd[1]: session-29.scope: Deactivated successfully. Sep 6 00:18:24.895224 systemd-logind[1218]: Session 29 logged out. Waiting for processes to exit. Sep 6 00:18:24.900444 systemd-logind[1218]: Removed session 29. Sep 6 00:18:25.254618 update_engine[1220]: I0906 00:18:25.254030 1220 prefs.cc:52] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Sep 6 00:18:25.254618 update_engine[1220]: I0906 00:18:25.254544 1220 prefs.cc:52] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Sep 6 00:18:25.258375 update_engine[1220]: I0906 00:18:25.258153 1220 prefs.cc:52] aleph-version not present in /var/lib/update_engine/prefs Sep 6 00:18:25.260793 update_engine[1220]: I0906 00:18:25.259509 1220 omaha_request_params.cc:62] Current group set to lts Sep 6 00:18:25.272126 update_engine[1220]: I0906 00:18:25.272066 1220 update_attempter.cc:499] Already updated boot flags. Skipping. Sep 6 00:18:25.272126 update_engine[1220]: I0906 00:18:25.272105 1220 update_attempter.cc:643] Scheduling an action processor start. Sep 6 00:18:25.274927 update_engine[1220]: I0906 00:18:25.274866 1220 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Sep 6 00:18:25.276266 update_engine[1220]: I0906 00:18:25.275946 1220 prefs.cc:52] previous-version not present in /var/lib/update_engine/prefs Sep 6 00:18:25.276266 update_engine[1220]: I0906 00:18:25.276121 1220 omaha_request_action.cc:270] Posting an Omaha request to disabled Sep 6 00:18:25.276266 update_engine[1220]: I0906 00:18:25.276129 1220 omaha_request_action.cc:271] Request: Sep 6 00:18:25.276266 update_engine[1220]: Sep 6 00:18:25.276266 update_engine[1220]: Sep 6 00:18:25.276266 update_engine[1220]: Sep 6 00:18:25.276266 update_engine[1220]: Sep 6 00:18:25.276266 update_engine[1220]: Sep 6 00:18:25.276266 update_engine[1220]: Sep 6 00:18:25.276266 update_engine[1220]: Sep 6 00:18:25.276266 update_engine[1220]: Sep 6 00:18:25.276266 update_engine[1220]: I0906 00:18:25.276135 1220 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Sep 6 00:18:25.284595 update_engine[1220]: I0906 00:18:25.284191 1220 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Sep 6 00:18:25.285239 update_engine[1220]: I0906 00:18:25.285176 1220 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Sep 6 00:18:25.293300 update_engine[1220]: E0906 00:18:25.292860 1220 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Sep 6 00:18:25.293300 update_engine[1220]: I0906 00:18:25.293073 1220 libcurl_http_fetcher.cc:283] No HTTP response, retry 1 Sep 6 00:18:25.298794 locksmithd[1260]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Sep 6 00:18:29.300473 systemd[1]: run-containerd-runc-k8s.io-6622470f48ae5d022e4553e766cb892ffbc6f3ff3329415a6d690180b12b34cf-runc.VvpGnt.mount: Deactivated successfully. Sep 6 00:18:29.327266 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 00:18:29.328768 kernel: audit: type=1400 audit(1757117909.305:1766): avc: denied { watch } for pid=1884 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:18:29.328890 kernel: audit: type=1300 audit(1757117909.305:1766): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000419120 a2=fc6 a3=0 items=0 ppid=1739 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 key=(null) Sep 6 00:18:29.328940 kernel: audit: type=1327 audit(1757117909.305:1766): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:18:29.305000 audit[1884]: AVC avc: denied { watch } for pid=1884 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:18:29.305000 audit[1884]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000419120 a2=fc6 a3=0 items=0 ppid=1739 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 key=(null) Sep 6 00:18:29.305000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:18:29.337586 kernel: audit: type=1400 audit(1757117909.311:1767): avc: denied { watch } for pid=1884 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:18:29.311000 audit[1884]: AVC avc: denied { watch } for pid=1884 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:18:29.311000 audit[1884]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002d2b110 a2=fc6 a3=0 items=0 ppid=1739 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 key=(null) Sep 6 00:18:29.311000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:18:29.361568 kernel: audit: type=1300 audit(1757117909.311:1767): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002d2b110 a2=fc6 a3=0 items=0 ppid=1739 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c654,c832 key=(null) Sep 6 00:18:29.362859 kernel: audit: type=1327 audit(1757117909.311:1767): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:18:29.708557 kubelet[2030]: E0906 00:18:29.708341 2030 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 6 00:18:29.877555 systemd[1]: Started sshd@29-10.0.0.22:22-10.0.0.1:49244.service. Sep 6 00:18:29.876000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.22:22-10.0.0.1:49244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:18:29.888013 kernel: audit: type=1130 audit(1757117909.876:1768): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.22:22-10.0.0.1:49244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:18:29.941000 audit[6257]: USER_ACCT pid=6257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:29.952098 sshd[6257]: Accepted publickey for core from 10.0.0.1 port 49244 ssh2: RSA SHA256:mcWI8lWnD23EhgVbwJM01vCNerY3y/CLOw6SIUCzfEA Sep 6 00:18:29.967748 kernel: audit: type=1101 audit(1757117909.941:1769): pid=6257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:29.967943 kernel: audit: type=1103 audit(1757117909.947:1770): pid=6257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:29.947000 audit[6257]: CRED_ACQ pid=6257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:29.962589 sshd[6257]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:18:29.976596 kernel: audit: type=1006 audit(1757117909.947:1771): pid=6257 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 Sep 6 00:18:29.947000 audit[6257]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffebafa7650 a2=3 a3=0 items=0 ppid=1 pid=6257 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:18:29.947000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:18:29.979641 systemd-logind[1218]: New session 30 of user core. Sep 6 00:18:29.982843 systemd[1]: Started session-30.scope. Sep 6 00:18:29.992000 audit[6257]: USER_START pid=6257 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:30.002000 audit[6259]: CRED_ACQ pid=6259 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:30.284347 sshd[6257]: pam_unix(sshd:session): session closed for user core Sep 6 00:18:30.290000 audit[6257]: USER_END pid=6257 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:30.291000 audit[6257]: CRED_DISP pid=6257 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:30.296471 systemd[1]: sshd@29-10.0.0.22:22-10.0.0.1:49244.service: Deactivated successfully. Sep 6 00:18:30.295000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.22:22-10.0.0.1:49244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:18:30.297531 systemd[1]: session-30.scope: Deactivated successfully. Sep 6 00:18:30.299886 systemd-logind[1218]: Session 30 logged out. Waiting for processes to exit. Sep 6 00:18:30.306382 systemd-logind[1218]: Removed session 30. Sep 6 00:18:32.674000 audit[1911]: AVC avc: denied { watch } for pid=1911 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:18:32.674000 audit[1911]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c00ae73800 a2=fc6 a3=0 items=0 ppid=1734 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 key=(null) Sep 6 00:18:32.674000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 6 00:18:32.674000 audit[1911]: AVC avc: denied { watch } for pid=1911 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:18:32.674000 audit[1911]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c0064565a0 a2=fc6 a3=0 items=0 ppid=1734 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 key=(null) Sep 6 00:18:32.674000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 6 00:18:32.674000 audit[1911]: AVC avc: denied { watch } for pid=1911 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:18:32.674000 audit[1911]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c0075f1cb0 a2=fc6 a3=0 items=0 ppid=1734 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 key=(null) Sep 6 00:18:32.674000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 6 00:18:32.674000 audit[1911]: AVC avc: denied { watch } for pid=1911 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:18:32.674000 audit[1911]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c014afbf20 a2=fc6 a3=0 items=0 ppid=1734 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 key=(null) Sep 6 00:18:32.674000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 6 00:18:32.676000 audit[1911]: AVC avc: denied { watch } for pid=1911 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:18:32.676000 audit[1911]: AVC avc: denied { watch } for pid=1911 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:18:32.676000 audit[1911]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c00b959b00 a2=fc6 a3=0 items=0 ppid=1734 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 key=(null) Sep 6 00:18:32.676000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 6 00:18:32.676000 audit[1911]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c0149f6000 a2=fc6 a3=0 items=0 ppid=1734 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c625 key=(null) Sep 6 00:18:32.676000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 6 00:18:35.239124 update_engine[1220]: I0906 00:18:35.238364 1220 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Sep 6 00:18:35.239124 update_engine[1220]: I0906 00:18:35.238665 1220 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Sep 6 00:18:35.239124 update_engine[1220]: I0906 00:18:35.238850 1220 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Sep 6 00:18:35.255927 update_engine[1220]: E0906 00:18:35.255725 1220 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Sep 6 00:18:35.255927 update_engine[1220]: I0906 00:18:35.255858 1220 libcurl_http_fetcher.cc:283] No HTTP response, retry 2 Sep 6 00:18:35.293014 systemd[1]: Started sshd@30-10.0.0.22:22-10.0.0.1:43186.service. Sep 6 00:18:35.304345 kernel: kauditd_printk_skb: 25 callbacks suppressed Sep 6 00:18:35.304593 kernel: audit: type=1130 audit(1757117915.293:1783): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-10.0.0.22:22-10.0.0.1:43186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:18:35.293000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-10.0.0.22:22-10.0.0.1:43186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:18:35.432000 audit[6271]: USER_ACCT pid=6271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:35.441183 kernel: audit: type=1101 audit(1757117915.432:1784): pid=6271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:35.441272 sshd[6271]: Accepted publickey for core from 10.0.0.1 port 43186 ssh2: RSA SHA256:mcWI8lWnD23EhgVbwJM01vCNerY3y/CLOw6SIUCzfEA Sep 6 00:18:35.443141 sshd[6271]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:18:35.434000 audit[6271]: CRED_ACQ pid=6271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:35.465928 kernel: audit: type=1103 audit(1757117915.434:1785): pid=6271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:35.466188 kernel: audit: type=1006 audit(1757117915.434:1786): pid=6271 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=31 res=1 Sep 6 00:18:35.461918 systemd[1]: Started session-31.scope. Sep 6 00:18:35.464098 systemd-logind[1218]: New session 31 of user core. Sep 6 00:18:35.434000 audit[6271]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff49c583a0 a2=3 a3=0 items=0 ppid=1 pid=6271 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:18:35.480618 kernel: audit: type=1300 audit(1757117915.434:1786): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff49c583a0 a2=3 a3=0 items=0 ppid=1 pid=6271 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:18:35.480835 kernel: audit: type=1327 audit(1757117915.434:1786): proctitle=737368643A20636F7265205B707269765D Sep 6 00:18:35.434000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:18:35.488000 audit[6271]: USER_START pid=6271 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:35.497593 kernel: audit: type=1105 audit(1757117915.488:1787): pid=6271 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:35.497780 kernel: audit: type=1103 audit(1757117915.492:1788): pid=6273 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:35.492000 audit[6273]: CRED_ACQ pid=6273 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:35.796419 sshd[6271]: pam_unix(sshd:session): session closed for user core Sep 6 00:18:35.799000 audit[6271]: USER_END pid=6271 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:35.804699 systemd[1]: sshd@30-10.0.0.22:22-10.0.0.1:43186.service: Deactivated successfully. Sep 6 00:18:35.805845 systemd[1]: session-31.scope: Deactivated successfully. Sep 6 00:18:35.807846 systemd-logind[1218]: Session 31 logged out. Waiting for processes to exit. Sep 6 00:18:35.808953 systemd-logind[1218]: Removed session 31. Sep 6 00:18:35.799000 audit[6271]: CRED_DISP pid=6271 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:35.814455 kernel: audit: type=1106 audit(1757117915.799:1789): pid=6271 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:35.814620 kernel: audit: type=1104 audit(1757117915.799:1790): pid=6271 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 6 00:18:35.804000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-10.0.0.22:22-10.0.0.1:43186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'