Sep 6 00:04:18.054935 kernel: Booting Linux on physical CPU 0x0000000000 [0x410fd083] Sep 6 00:04:18.054975 kernel: Linux version 5.15.190-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Fri Sep 5 23:00:12 -00 2025 Sep 6 00:04:18.054998 kernel: efi: EFI v2.70 by EDK II Sep 6 00:04:18.055014 kernel: efi: SMBIOS=0x7bed0000 SMBIOS 3.0=0x7beb0000 ACPI=0x786e0000 ACPI 2.0=0x786e0014 MEMATTR=0x7affea98 MEMRESERVE=0x716fcf98 Sep 6 00:04:18.055028 kernel: ACPI: Early table checksum verification disabled Sep 6 00:04:18.055042 kernel: ACPI: RSDP 0x00000000786E0014 000024 (v02 AMAZON) Sep 6 00:04:18.055058 kernel: ACPI: XSDT 0x00000000786D00E8 000064 (v01 AMAZON AMZNFACP 00000001 01000013) Sep 6 00:04:18.055073 kernel: ACPI: FACP 0x00000000786B0000 000114 (v06 AMAZON AMZNFACP 00000001 AMZN 00000001) Sep 6 00:04:18.055087 kernel: ACPI: DSDT 0x0000000078640000 00159D (v02 AMAZON AMZNDSDT 00000001 INTL 20160527) Sep 6 00:04:18.055101 kernel: ACPI: APIC 0x00000000786C0000 000108 (v04 AMAZON AMZNAPIC 00000001 AMZN 00000001) Sep 6 00:04:18.062207 kernel: ACPI: SPCR 0x00000000786A0000 000050 (v02 AMAZON AMZNSPCR 00000001 AMZN 00000001) Sep 6 00:04:18.062225 kernel: ACPI: GTDT 0x0000000078690000 000060 (v02 AMAZON AMZNGTDT 00000001 AMZN 00000001) Sep 6 00:04:18.062240 kernel: ACPI: MCFG 0x0000000078680000 00003C (v02 AMAZON AMZNMCFG 00000001 AMZN 00000001) Sep 6 00:04:18.062256 kernel: ACPI: SLIT 0x0000000078670000 00002D (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Sep 6 00:04:18.062273 kernel: ACPI: IORT 0x0000000078660000 000078 (v01 AMAZON AMZNIORT 00000001 AMZN 00000001) Sep 6 00:04:18.062295 kernel: ACPI: PPTT 0x0000000078650000 0000EC (v01 AMAZON AMZNPPTT 00000001 AMZN 00000001) Sep 6 00:04:18.062310 kernel: ACPI: SPCR: console: uart,mmio,0x90a0000,115200 Sep 6 00:04:18.062325 kernel: earlycon: uart0 at MMIO 0x00000000090a0000 (options '115200') Sep 6 00:04:18.062340 kernel: printk: bootconsole [uart0] enabled Sep 6 00:04:18.062355 kernel: NUMA: Failed to initialise from firmware Sep 6 00:04:18.062371 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000004b5ffffff] Sep 6 00:04:18.062387 kernel: NUMA: NODE_DATA [mem 0x4b5843900-0x4b5848fff] Sep 6 00:04:18.062402 kernel: Zone ranges: Sep 6 00:04:18.062418 kernel: DMA [mem 0x0000000040000000-0x00000000ffffffff] Sep 6 00:04:18.062433 kernel: DMA32 empty Sep 6 00:04:18.062448 kernel: Normal [mem 0x0000000100000000-0x00000004b5ffffff] Sep 6 00:04:18.062467 kernel: Movable zone start for each node Sep 6 00:04:18.062482 kernel: Early memory node ranges Sep 6 00:04:18.062497 kernel: node 0: [mem 0x0000000040000000-0x000000007862ffff] Sep 6 00:04:18.062512 kernel: node 0: [mem 0x0000000078630000-0x000000007863ffff] Sep 6 00:04:18.062527 kernel: node 0: [mem 0x0000000078640000-0x00000000786effff] Sep 6 00:04:18.062543 kernel: node 0: [mem 0x00000000786f0000-0x000000007872ffff] Sep 6 00:04:18.062558 kernel: node 0: [mem 0x0000000078730000-0x000000007bbfffff] Sep 6 00:04:18.062573 kernel: node 0: [mem 0x000000007bc00000-0x000000007bfdffff] Sep 6 00:04:18.062588 kernel: node 0: [mem 0x000000007bfe0000-0x000000007fffffff] Sep 6 00:04:18.062603 kernel: node 0: [mem 0x0000000400000000-0x00000004b5ffffff] Sep 6 00:04:18.062617 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000004b5ffffff] Sep 6 00:04:18.062633 kernel: On node 0, zone Normal: 8192 pages in unavailable ranges Sep 6 00:04:18.062653 kernel: psci: probing for conduit method from ACPI. Sep 6 00:04:18.062668 kernel: psci: PSCIv1.0 detected in firmware. Sep 6 00:04:18.062691 kernel: psci: Using standard PSCI v0.2 function IDs Sep 6 00:04:18.062708 kernel: psci: Trusted OS migration not required Sep 6 00:04:18.062724 kernel: psci: SMC Calling Convention v1.1 Sep 6 00:04:18.062745 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000001) Sep 6 00:04:18.062762 kernel: ACPI: SRAT not present Sep 6 00:04:18.062779 kernel: percpu: Embedded 30 pages/cpu s82968 r8192 d31720 u122880 Sep 6 00:04:18.062795 kernel: pcpu-alloc: s82968 r8192 d31720 u122880 alloc=30*4096 Sep 6 00:04:18.062811 kernel: pcpu-alloc: [0] 0 [0] 1 Sep 6 00:04:18.062827 kernel: Detected PIPT I-cache on CPU0 Sep 6 00:04:18.062868 kernel: CPU features: detected: GIC system register CPU interface Sep 6 00:04:18.062887 kernel: CPU features: detected: Spectre-v2 Sep 6 00:04:18.062903 kernel: CPU features: detected: Spectre-v3a Sep 6 00:04:18.062919 kernel: CPU features: detected: Spectre-BHB Sep 6 00:04:18.062935 kernel: CPU features: kernel page table isolation forced ON by KASLR Sep 6 00:04:18.062958 kernel: CPU features: detected: Kernel page table isolation (KPTI) Sep 6 00:04:18.062974 kernel: CPU features: detected: ARM erratum 1742098 Sep 6 00:04:18.062990 kernel: CPU features: detected: ARM errata 1165522, 1319367, or 1530923 Sep 6 00:04:18.063006 kernel: Built 1 zonelists, mobility grouping on. Total pages: 991872 Sep 6 00:04:18.063022 kernel: Policy zone: Normal Sep 6 00:04:18.063040 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=5cb382ab59aa1336098b36da02e2d4491706a6fda80ee56c4ff8582cce9206a4 Sep 6 00:04:18.063058 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Sep 6 00:04:18.063074 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Sep 6 00:04:18.063090 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Sep 6 00:04:18.063165 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Sep 6 00:04:18.063229 kernel: software IO TLB: mapped [mem 0x000000007c000000-0x0000000080000000] (64MB) Sep 6 00:04:18.063251 kernel: Memory: 3824460K/4030464K available (9792K kernel code, 2094K rwdata, 7592K rodata, 36416K init, 777K bss, 206004K reserved, 0K cma-reserved) Sep 6 00:04:18.063268 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Sep 6 00:04:18.063284 kernel: trace event string verifier disabled Sep 6 00:04:18.063300 kernel: rcu: Preemptible hierarchical RCU implementation. Sep 6 00:04:18.063317 kernel: rcu: RCU event tracing is enabled. Sep 6 00:04:18.063334 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Sep 6 00:04:18.063351 kernel: Trampoline variant of Tasks RCU enabled. Sep 6 00:04:18.063367 kernel: Tracing variant of Tasks RCU enabled. Sep 6 00:04:18.063383 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Sep 6 00:04:18.063400 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Sep 6 00:04:18.063415 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Sep 6 00:04:18.063441 kernel: GICv3: 96 SPIs implemented Sep 6 00:04:18.063457 kernel: GICv3: 0 Extended SPIs implemented Sep 6 00:04:18.063473 kernel: GICv3: Distributor has no Range Selector support Sep 6 00:04:18.063489 kernel: Root IRQ handler: gic_handle_irq Sep 6 00:04:18.063504 kernel: GICv3: 16 PPIs implemented Sep 6 00:04:18.063520 kernel: GICv3: CPU0: found redistributor 0 region 0:0x0000000010200000 Sep 6 00:04:18.063536 kernel: ACPI: SRAT not present Sep 6 00:04:18.063551 kernel: ITS [mem 0x10080000-0x1009ffff] Sep 6 00:04:18.063568 kernel: ITS@0x0000000010080000: allocated 8192 Devices @400090000 (indirect, esz 8, psz 64K, shr 1) Sep 6 00:04:18.063584 kernel: ITS@0x0000000010080000: allocated 8192 Interrupt Collections @4000a0000 (flat, esz 8, psz 64K, shr 1) Sep 6 00:04:18.063600 kernel: GICv3: using LPI property table @0x00000004000b0000 Sep 6 00:04:18.063620 kernel: ITS: Using hypervisor restricted LPI range [128] Sep 6 00:04:18.063637 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000004000d0000 Sep 6 00:04:18.063653 kernel: arch_timer: cp15 timer(s) running at 83.33MHz (virt). Sep 6 00:04:18.063669 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x13381ebeec, max_idle_ns: 440795203145 ns Sep 6 00:04:18.063685 kernel: sched_clock: 56 bits at 83MHz, resolution 12ns, wraps every 4398046511100ns Sep 6 00:04:18.063701 kernel: Console: colour dummy device 80x25 Sep 6 00:04:18.063717 kernel: printk: console [tty1] enabled Sep 6 00:04:18.063734 kernel: ACPI: Core revision 20210730 Sep 6 00:04:18.063750 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 166.66 BogoMIPS (lpj=83333) Sep 6 00:04:18.063767 kernel: pid_max: default: 32768 minimum: 301 Sep 6 00:04:18.063787 kernel: LSM: Security Framework initializing Sep 6 00:04:18.063804 kernel: SELinux: Initializing. Sep 6 00:04:18.063820 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Sep 6 00:04:18.063836 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Sep 6 00:04:18.063853 kernel: rcu: Hierarchical SRCU implementation. Sep 6 00:04:18.063869 kernel: Platform MSI: ITS@0x10080000 domain created Sep 6 00:04:18.063886 kernel: PCI/MSI: ITS@0x10080000 domain created Sep 6 00:04:18.063902 kernel: Remapping and enabling EFI services. Sep 6 00:04:18.063918 kernel: smp: Bringing up secondary CPUs ... Sep 6 00:04:18.063934 kernel: Detected PIPT I-cache on CPU1 Sep 6 00:04:18.063956 kernel: GICv3: CPU1: found redistributor 1 region 0:0x0000000010220000 Sep 6 00:04:18.063973 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000004000e0000 Sep 6 00:04:18.063989 kernel: CPU1: Booted secondary processor 0x0000000001 [0x410fd083] Sep 6 00:04:18.064005 kernel: smp: Brought up 1 node, 2 CPUs Sep 6 00:04:18.064021 kernel: SMP: Total of 2 processors activated. Sep 6 00:04:18.064037 kernel: CPU features: detected: 32-bit EL0 Support Sep 6 00:04:18.064053 kernel: CPU features: detected: 32-bit EL1 Support Sep 6 00:04:18.064069 kernel: CPU features: detected: CRC32 instructions Sep 6 00:04:18.064085 kernel: CPU: All CPU(s) started at EL1 Sep 6 00:04:18.064142 kernel: alternatives: patching kernel code Sep 6 00:04:18.064169 kernel: devtmpfs: initialized Sep 6 00:04:18.064198 kernel: KASLR disabled due to lack of seed Sep 6 00:04:18.064220 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Sep 6 00:04:18.064237 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Sep 6 00:04:18.064254 kernel: pinctrl core: initialized pinctrl subsystem Sep 6 00:04:18.064271 kernel: SMBIOS 3.0.0 present. Sep 6 00:04:18.064288 kernel: DMI: Amazon EC2 a1.large/, BIOS 1.0 11/1/2018 Sep 6 00:04:18.064305 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Sep 6 00:04:18.064322 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Sep 6 00:04:18.064339 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Sep 6 00:04:18.064360 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Sep 6 00:04:18.064377 kernel: audit: initializing netlink subsys (disabled) Sep 6 00:04:18.064395 kernel: audit: type=2000 audit(0.293:1): state=initialized audit_enabled=0 res=1 Sep 6 00:04:18.064412 kernel: thermal_sys: Registered thermal governor 'step_wise' Sep 6 00:04:18.064428 kernel: cpuidle: using governor menu Sep 6 00:04:18.064449 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Sep 6 00:04:18.064466 kernel: ASID allocator initialised with 32768 entries Sep 6 00:04:18.064483 kernel: ACPI: bus type PCI registered Sep 6 00:04:18.064499 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Sep 6 00:04:18.064516 kernel: Serial: AMBA PL011 UART driver Sep 6 00:04:18.064533 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Sep 6 00:04:18.064550 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Sep 6 00:04:18.064566 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Sep 6 00:04:18.064583 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Sep 6 00:04:18.064604 kernel: cryptd: max_cpu_qlen set to 1000 Sep 6 00:04:18.064621 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Sep 6 00:04:18.064638 kernel: ACPI: Added _OSI(Module Device) Sep 6 00:04:18.064654 kernel: ACPI: Added _OSI(Processor Device) Sep 6 00:04:18.064671 kernel: ACPI: Added _OSI(Processor Aggregator Device) Sep 6 00:04:18.064688 kernel: ACPI: Added _OSI(Linux-Dell-Video) Sep 6 00:04:18.064704 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Sep 6 00:04:18.064721 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Sep 6 00:04:18.064738 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Sep 6 00:04:18.064754 kernel: ACPI: Interpreter enabled Sep 6 00:04:18.064775 kernel: ACPI: Using GIC for interrupt routing Sep 6 00:04:18.064792 kernel: ACPI: MCFG table detected, 1 entries Sep 6 00:04:18.064808 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-0f]) Sep 6 00:04:18.066223 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Sep 6 00:04:18.066472 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Sep 6 00:04:18.066691 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Sep 6 00:04:18.066939 kernel: acpi PNP0A08:00: ECAM area [mem 0x20000000-0x20ffffff] reserved by PNP0C02:00 Sep 6 00:04:18.067212 kernel: acpi PNP0A08:00: ECAM at [mem 0x20000000-0x20ffffff] for [bus 00-0f] Sep 6 00:04:18.067243 kernel: ACPI: Remapped I/O 0x000000001fff0000 to [io 0x0000-0xffff window] Sep 6 00:04:18.067261 kernel: acpiphp: Slot [1] registered Sep 6 00:04:18.067278 kernel: acpiphp: Slot [2] registered Sep 6 00:04:18.067295 kernel: acpiphp: Slot [3] registered Sep 6 00:04:18.067312 kernel: acpiphp: Slot [4] registered Sep 6 00:04:18.067329 kernel: acpiphp: Slot [5] registered Sep 6 00:04:18.067346 kernel: acpiphp: Slot [6] registered Sep 6 00:04:18.067362 kernel: acpiphp: Slot [7] registered Sep 6 00:04:18.067388 kernel: acpiphp: Slot [8] registered Sep 6 00:04:18.067404 kernel: acpiphp: Slot [9] registered Sep 6 00:04:18.067421 kernel: acpiphp: Slot [10] registered Sep 6 00:04:18.067438 kernel: acpiphp: Slot [11] registered Sep 6 00:04:18.067454 kernel: acpiphp: Slot [12] registered Sep 6 00:04:18.067471 kernel: acpiphp: Slot [13] registered Sep 6 00:04:18.067489 kernel: acpiphp: Slot [14] registered Sep 6 00:04:18.067507 kernel: acpiphp: Slot [15] registered Sep 6 00:04:18.067525 kernel: acpiphp: Slot [16] registered Sep 6 00:04:18.067548 kernel: acpiphp: Slot [17] registered Sep 6 00:04:18.067566 kernel: acpiphp: Slot [18] registered Sep 6 00:04:18.067583 kernel: acpiphp: Slot [19] registered Sep 6 00:04:18.067600 kernel: acpiphp: Slot [20] registered Sep 6 00:04:18.067617 kernel: acpiphp: Slot [21] registered Sep 6 00:04:18.067634 kernel: acpiphp: Slot [22] registered Sep 6 00:04:18.067652 kernel: acpiphp: Slot [23] registered Sep 6 00:04:18.067669 kernel: acpiphp: Slot [24] registered Sep 6 00:04:18.067687 kernel: acpiphp: Slot [25] registered Sep 6 00:04:18.067704 kernel: acpiphp: Slot [26] registered Sep 6 00:04:18.067729 kernel: acpiphp: Slot [27] registered Sep 6 00:04:18.067746 kernel: acpiphp: Slot [28] registered Sep 6 00:04:18.067764 kernel: acpiphp: Slot [29] registered Sep 6 00:04:18.067781 kernel: acpiphp: Slot [30] registered Sep 6 00:04:18.067799 kernel: acpiphp: Slot [31] registered Sep 6 00:04:18.067816 kernel: PCI host bridge to bus 0000:00 Sep 6 00:04:18.068138 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xffffffff window] Sep 6 00:04:18.068373 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Sep 6 00:04:18.068575 kernel: pci_bus 0000:00: root bus resource [mem 0x400000000000-0x407fffffffff window] Sep 6 00:04:18.068775 kernel: pci_bus 0000:00: root bus resource [bus 00-0f] Sep 6 00:04:18.069040 kernel: pci 0000:00:00.0: [1d0f:0200] type 00 class 0x060000 Sep 6 00:04:18.073450 kernel: pci 0000:00:01.0: [1d0f:8250] type 00 class 0x070003 Sep 6 00:04:18.073691 kernel: pci 0000:00:01.0: reg 0x10: [mem 0x80118000-0x80118fff] Sep 6 00:04:18.073946 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Sep 6 00:04:18.074237 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80114000-0x80117fff] Sep 6 00:04:18.074474 kernel: pci 0000:00:04.0: PME# supported from D0 D1 D2 D3hot D3cold Sep 6 00:04:18.074742 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Sep 6 00:04:18.075029 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80110000-0x80113fff] Sep 6 00:04:18.077415 kernel: pci 0000:00:05.0: reg 0x18: [mem 0x80000000-0x800fffff pref] Sep 6 00:04:18.077659 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x80100000-0x8010ffff] Sep 6 00:04:18.077868 kernel: pci 0000:00:05.0: PME# supported from D0 D1 D2 D3hot D3cold Sep 6 00:04:18.078097 kernel: pci 0000:00:05.0: BAR 2: assigned [mem 0x80000000-0x800fffff pref] Sep 6 00:04:18.078418 kernel: pci 0000:00:05.0: BAR 4: assigned [mem 0x80100000-0x8010ffff] Sep 6 00:04:18.078640 kernel: pci 0000:00:04.0: BAR 0: assigned [mem 0x80110000-0x80113fff] Sep 6 00:04:18.078887 kernel: pci 0000:00:05.0: BAR 0: assigned [mem 0x80114000-0x80117fff] Sep 6 00:04:18.079157 kernel: pci 0000:00:01.0: BAR 0: assigned [mem 0x80118000-0x80118fff] Sep 6 00:04:18.079364 kernel: pci_bus 0000:00: resource 4 [mem 0x80000000-0xffffffff window] Sep 6 00:04:18.080246 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Sep 6 00:04:18.080496 kernel: pci_bus 0000:00: resource 6 [mem 0x400000000000-0x407fffffffff window] Sep 6 00:04:18.080526 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Sep 6 00:04:18.080544 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Sep 6 00:04:18.080561 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Sep 6 00:04:18.080578 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Sep 6 00:04:18.080595 kernel: iommu: Default domain type: Translated Sep 6 00:04:18.080612 kernel: iommu: DMA domain TLB invalidation policy: strict mode Sep 6 00:04:18.080629 kernel: vgaarb: loaded Sep 6 00:04:18.080646 kernel: pps_core: LinuxPPS API ver. 1 registered Sep 6 00:04:18.080671 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Sep 6 00:04:18.080688 kernel: PTP clock support registered Sep 6 00:04:18.080704 kernel: Registered efivars operations Sep 6 00:04:18.080721 kernel: clocksource: Switched to clocksource arch_sys_counter Sep 6 00:04:18.080738 kernel: VFS: Disk quotas dquot_6.6.0 Sep 6 00:04:18.080754 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Sep 6 00:04:18.080771 kernel: pnp: PnP ACPI init Sep 6 00:04:18.081020 kernel: system 00:00: [mem 0x20000000-0x2fffffff] could not be reserved Sep 6 00:04:18.081048 kernel: pnp: PnP ACPI: found 1 devices Sep 6 00:04:18.081071 kernel: NET: Registered PF_INET protocol family Sep 6 00:04:18.081088 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Sep 6 00:04:18.081147 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Sep 6 00:04:18.081171 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Sep 6 00:04:18.081189 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Sep 6 00:04:18.081207 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Sep 6 00:04:18.081224 kernel: TCP: Hash tables configured (established 32768 bind 32768) Sep 6 00:04:18.081241 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Sep 6 00:04:18.081264 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Sep 6 00:04:18.081282 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Sep 6 00:04:18.081299 kernel: PCI: CLS 0 bytes, default 64 Sep 6 00:04:18.081316 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 3 counters available Sep 6 00:04:18.081332 kernel: kvm [1]: HYP mode not available Sep 6 00:04:18.081349 kernel: Initialise system trusted keyrings Sep 6 00:04:18.081366 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Sep 6 00:04:18.081383 kernel: Key type asymmetric registered Sep 6 00:04:18.081400 kernel: Asymmetric key parser 'x509' registered Sep 6 00:04:18.081421 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Sep 6 00:04:18.081438 kernel: io scheduler mq-deadline registered Sep 6 00:04:18.081454 kernel: io scheduler kyber registered Sep 6 00:04:18.081471 kernel: io scheduler bfq registered Sep 6 00:04:18.081733 kernel: pl061_gpio ARMH0061:00: PL061 GPIO chip registered Sep 6 00:04:18.081766 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Sep 6 00:04:18.081784 kernel: ACPI: button: Power Button [PWRB] Sep 6 00:04:18.081801 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0E:00/input/input1 Sep 6 00:04:18.081818 kernel: ACPI: button: Sleep Button [SLPB] Sep 6 00:04:18.081843 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Sep 6 00:04:18.081861 kernel: ACPI: \_SB_.PCI0.GSI2: Enabled at IRQ 37 Sep 6 00:04:18.082137 kernel: serial 0000:00:01.0: enabling device (0010 -> 0012) Sep 6 00:04:18.082172 kernel: printk: console [ttyS0] disabled Sep 6 00:04:18.082190 kernel: 0000:00:01.0: ttyS0 at MMIO 0x80118000 (irq = 14, base_baud = 115200) is a 16550A Sep 6 00:04:18.082207 kernel: printk: console [ttyS0] enabled Sep 6 00:04:18.082224 kernel: printk: bootconsole [uart0] disabled Sep 6 00:04:18.082241 kernel: thunder_xcv, ver 1.0 Sep 6 00:04:18.082258 kernel: thunder_bgx, ver 1.0 Sep 6 00:04:18.082282 kernel: nicpf, ver 1.0 Sep 6 00:04:18.082299 kernel: nicvf, ver 1.0 Sep 6 00:04:18.082567 kernel: rtc-efi rtc-efi.0: registered as rtc0 Sep 6 00:04:18.082806 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-09-06T00:04:17 UTC (1757117057) Sep 6 00:04:18.082856 kernel: hid: raw HID events driver (C) Jiri Kosina Sep 6 00:04:18.082879 kernel: NET: Registered PF_INET6 protocol family Sep 6 00:04:18.082896 kernel: Segment Routing with IPv6 Sep 6 00:04:18.082913 kernel: In-situ OAM (IOAM) with IPv6 Sep 6 00:04:18.082938 kernel: NET: Registered PF_PACKET protocol family Sep 6 00:04:18.082954 kernel: Key type dns_resolver registered Sep 6 00:04:18.082971 kernel: registered taskstats version 1 Sep 6 00:04:18.082988 kernel: Loading compiled-in X.509 certificates Sep 6 00:04:18.083005 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.190-flatcar: 72ab5ba99c2368429c7a4d04fccfc5a39dd84386' Sep 6 00:04:18.083022 kernel: Key type .fscrypt registered Sep 6 00:04:18.083038 kernel: Key type fscrypt-provisioning registered Sep 6 00:04:18.083055 kernel: ima: No TPM chip found, activating TPM-bypass! Sep 6 00:04:18.083072 kernel: ima: Allocated hash algorithm: sha1 Sep 6 00:04:18.083093 kernel: ima: No architecture policies found Sep 6 00:04:18.083137 kernel: clk: Disabling unused clocks Sep 6 00:04:18.083158 kernel: Freeing unused kernel memory: 36416K Sep 6 00:04:18.083176 kernel: Run /init as init process Sep 6 00:04:18.083192 kernel: with arguments: Sep 6 00:04:18.083209 kernel: /init Sep 6 00:04:18.083226 kernel: with environment: Sep 6 00:04:18.083242 kernel: HOME=/ Sep 6 00:04:18.083258 kernel: TERM=linux Sep 6 00:04:18.083283 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Sep 6 00:04:18.083306 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 6 00:04:18.083329 systemd[1]: Detected virtualization amazon. Sep 6 00:04:18.083348 systemd[1]: Detected architecture arm64. Sep 6 00:04:18.083366 systemd[1]: Running in initrd. Sep 6 00:04:18.083384 systemd[1]: No hostname configured, using default hostname. Sep 6 00:04:18.083402 systemd[1]: Hostname set to . Sep 6 00:04:18.083426 systemd[1]: Initializing machine ID from VM UUID. Sep 6 00:04:18.083446 systemd[1]: Queued start job for default target initrd.target. Sep 6 00:04:18.083464 systemd[1]: Started systemd-ask-password-console.path. Sep 6 00:04:18.083483 systemd[1]: Reached target cryptsetup.target. Sep 6 00:04:18.083501 systemd[1]: Reached target paths.target. Sep 6 00:04:18.083519 systemd[1]: Reached target slices.target. Sep 6 00:04:18.083537 systemd[1]: Reached target swap.target. Sep 6 00:04:18.083555 systemd[1]: Reached target timers.target. Sep 6 00:04:18.083578 systemd[1]: Listening on iscsid.socket. Sep 6 00:04:18.083597 systemd[1]: Listening on iscsiuio.socket. Sep 6 00:04:18.083614 systemd[1]: Listening on systemd-journald-audit.socket. Sep 6 00:04:18.083633 systemd[1]: Listening on systemd-journald-dev-log.socket. Sep 6 00:04:18.083652 systemd[1]: Listening on systemd-journald.socket. Sep 6 00:04:18.083670 systemd[1]: Listening on systemd-networkd.socket. Sep 6 00:04:18.083688 systemd[1]: Listening on systemd-udevd-control.socket. Sep 6 00:04:18.083706 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 6 00:04:18.083724 systemd[1]: Reached target sockets.target. Sep 6 00:04:18.083747 systemd[1]: Starting kmod-static-nodes.service... Sep 6 00:04:18.083765 systemd[1]: Finished network-cleanup.service. Sep 6 00:04:18.083782 systemd[1]: Starting systemd-fsck-usr.service... Sep 6 00:04:18.083800 systemd[1]: Starting systemd-journald.service... Sep 6 00:04:18.083818 systemd[1]: Starting systemd-modules-load.service... Sep 6 00:04:18.083836 systemd[1]: Starting systemd-resolved.service... Sep 6 00:04:18.083854 systemd[1]: Starting systemd-vconsole-setup.service... Sep 6 00:04:18.083872 systemd[1]: Finished kmod-static-nodes.service. Sep 6 00:04:18.083895 systemd[1]: Finished systemd-fsck-usr.service. Sep 6 00:04:18.083914 kernel: audit: type=1130 audit(1757117058.042:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:18.083932 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Sep 6 00:04:18.083955 systemd-journald[310]: Journal started Sep 6 00:04:18.084067 systemd-journald[310]: Runtime Journal (/run/log/journal/ec29b637169973113d33ced61c645a91) is 8.0M, max 75.4M, 67.4M free. Sep 6 00:04:18.088283 systemd[1]: Finished systemd-vconsole-setup.service. Sep 6 00:04:18.042000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:18.016466 systemd-modules-load[311]: Inserted module 'overlay' Sep 6 00:04:18.104565 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Sep 6 00:04:18.108000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:18.122406 systemd-modules-load[311]: Inserted module 'br_netfilter' Sep 6 00:04:18.126768 kernel: audit: type=1130 audit(1757117058.108:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:18.126812 systemd[1]: Started systemd-journald.service. Sep 6 00:04:18.126860 kernel: Bridge firewalling registered Sep 6 00:04:18.134000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:18.143208 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Sep 6 00:04:18.152028 kernel: audit: type=1130 audit(1757117058.134:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:18.150000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:18.166148 kernel: audit: type=1130 audit(1757117058.150:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:18.166220 kernel: SCSI subsystem initialized Sep 6 00:04:18.168368 systemd[1]: Starting dracut-cmdline-ask.service... Sep 6 00:04:18.182788 systemd-resolved[312]: Positive Trust Anchors: Sep 6 00:04:18.182818 systemd-resolved[312]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 6 00:04:18.182895 systemd-resolved[312]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 6 00:04:18.219485 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Sep 6 00:04:18.219564 kernel: device-mapper: uevent: version 1.0.3 Sep 6 00:04:18.223165 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Sep 6 00:04:18.233564 systemd-modules-load[311]: Inserted module 'dm_multipath' Sep 6 00:04:18.236870 systemd[1]: Finished systemd-modules-load.service. Sep 6 00:04:18.245000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:18.247472 systemd[1]: Finished dracut-cmdline-ask.service. Sep 6 00:04:18.270472 kernel: audit: type=1130 audit(1757117058.245:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:18.270513 kernel: audit: type=1130 audit(1757117058.261:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:18.261000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:18.264879 systemd[1]: Starting dracut-cmdline.service... Sep 6 00:04:18.277174 systemd[1]: Starting systemd-sysctl.service... Sep 6 00:04:18.310621 systemd[1]: Finished systemd-sysctl.service. Sep 6 00:04:18.329840 kernel: audit: type=1130 audit(1757117058.317:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:18.317000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:18.333172 dracut-cmdline[329]: dracut-dracut-053 Sep 6 00:04:18.341955 dracut-cmdline[329]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=5cb382ab59aa1336098b36da02e2d4491706a6fda80ee56c4ff8582cce9206a4 Sep 6 00:04:18.475151 kernel: Loading iSCSI transport class v2.0-870. Sep 6 00:04:18.499154 kernel: iscsi: registered transport (tcp) Sep 6 00:04:18.530700 kernel: iscsi: registered transport (qla4xxx) Sep 6 00:04:18.530785 kernel: QLogic iSCSI HBA Driver Sep 6 00:04:18.719652 systemd-resolved[312]: Defaulting to hostname 'linux'. Sep 6 00:04:18.723492 kernel: random: crng init done Sep 6 00:04:18.726918 systemd[1]: Started systemd-resolved.service. Sep 6 00:04:18.732000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:18.733531 systemd[1]: Reached target nss-lookup.target. Sep 6 00:04:18.749032 kernel: audit: type=1130 audit(1757117058.732:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:18.753281 systemd[1]: Finished dracut-cmdline.service. Sep 6 00:04:18.765881 kernel: audit: type=1130 audit(1757117058.752:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:18.752000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:18.767787 systemd[1]: Starting dracut-pre-udev.service... Sep 6 00:04:18.845162 kernel: raid6: neonx8 gen() 6309 MB/s Sep 6 00:04:18.863151 kernel: raid6: neonx8 xor() 4699 MB/s Sep 6 00:04:18.881149 kernel: raid6: neonx4 gen() 6410 MB/s Sep 6 00:04:18.899151 kernel: raid6: neonx4 xor() 4886 MB/s Sep 6 00:04:18.917148 kernel: raid6: neonx2 gen() 5666 MB/s Sep 6 00:04:18.935148 kernel: raid6: neonx2 xor() 4505 MB/s Sep 6 00:04:18.953145 kernel: raid6: neonx1 gen() 4438 MB/s Sep 6 00:04:18.971154 kernel: raid6: neonx1 xor() 3678 MB/s Sep 6 00:04:18.989152 kernel: raid6: int64x8 gen() 3385 MB/s Sep 6 00:04:19.007158 kernel: raid6: int64x8 xor() 2087 MB/s Sep 6 00:04:19.025159 kernel: raid6: int64x4 gen() 3732 MB/s Sep 6 00:04:19.043162 kernel: raid6: int64x4 xor() 2174 MB/s Sep 6 00:04:19.061158 kernel: raid6: int64x2 gen() 3515 MB/s Sep 6 00:04:19.079157 kernel: raid6: int64x2 xor() 1931 MB/s Sep 6 00:04:19.097155 kernel: raid6: int64x1 gen() 2718 MB/s Sep 6 00:04:19.116773 kernel: raid6: int64x1 xor() 1445 MB/s Sep 6 00:04:19.116840 kernel: raid6: using algorithm neonx4 gen() 6410 MB/s Sep 6 00:04:19.116865 kernel: raid6: .... xor() 4886 MB/s, rmw enabled Sep 6 00:04:19.118642 kernel: raid6: using neon recovery algorithm Sep 6 00:04:19.139355 kernel: xor: measuring software checksum speed Sep 6 00:04:19.139422 kernel: 8regs : 9353 MB/sec Sep 6 00:04:19.141307 kernel: 32regs : 10861 MB/sec Sep 6 00:04:19.143266 kernel: arm64_neon : 9581 MB/sec Sep 6 00:04:19.143311 kernel: xor: using function: 32regs (10861 MB/sec) Sep 6 00:04:19.243167 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Sep 6 00:04:19.261309 systemd[1]: Finished dracut-pre-udev.service. Sep 6 00:04:19.262000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:19.263000 audit: BPF prog-id=7 op=LOAD Sep 6 00:04:19.263000 audit: BPF prog-id=8 op=LOAD Sep 6 00:04:19.268405 systemd[1]: Starting systemd-udevd.service... Sep 6 00:04:19.300901 systemd-udevd[508]: Using default interface naming scheme 'v252'. Sep 6 00:04:19.313861 systemd[1]: Started systemd-udevd.service. Sep 6 00:04:19.315000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:19.318099 systemd[1]: Starting dracut-pre-trigger.service... Sep 6 00:04:19.355923 dracut-pre-trigger[512]: rd.md=0: removing MD RAID activation Sep 6 00:04:19.422427 systemd[1]: Finished dracut-pre-trigger.service. Sep 6 00:04:19.421000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:19.424178 systemd[1]: Starting systemd-udev-trigger.service... Sep 6 00:04:19.536104 systemd[1]: Finished systemd-udev-trigger.service. Sep 6 00:04:19.541000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:19.672399 kernel: ACPI: \_SB_.PCI0.GSI0: Enabled at IRQ 35 Sep 6 00:04:19.672470 kernel: nvme nvme0: pci function 0000:00:04.0 Sep 6 00:04:19.687164 kernel: nvme nvme0: 2/0/0 default/read/poll queues Sep 6 00:04:19.697748 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Sep 6 00:04:19.697819 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Sep 6 00:04:19.697844 kernel: ena 0000:00:05.0: enabling device (0010 -> 0012) Sep 6 00:04:19.720803 kernel: GPT:9289727 != 16777215 Sep 6 00:04:19.720834 kernel: GPT:Alternate GPT header not at the end of the disk. Sep 6 00:04:19.720857 kernel: ena 0000:00:05.0: ENA device version: 0.10 Sep 6 00:04:19.721088 kernel: GPT:9289727 != 16777215 Sep 6 00:04:19.721145 kernel: GPT: Use GNU Parted to correct GPT errors. Sep 6 00:04:19.721172 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Sep 6 00:04:19.721195 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Sep 6 00:04:19.721407 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80114000, mac addr 06:fd:6f:a2:62:ff Sep 6 00:04:19.723991 (udev-worker)[550]: Network interface NamePolicy= disabled on kernel command line. Sep 6 00:04:19.791181 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/nvme0n1p6 scanned by (udev-worker) (565) Sep 6 00:04:19.862414 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Sep 6 00:04:19.871815 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Sep 6 00:04:19.902796 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 6 00:04:19.926599 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Sep 6 00:04:19.950596 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Sep 6 00:04:19.956458 systemd[1]: Starting disk-uuid.service... Sep 6 00:04:19.971461 disk-uuid[662]: Primary Header is updated. Sep 6 00:04:19.971461 disk-uuid[662]: Secondary Entries is updated. Sep 6 00:04:19.971461 disk-uuid[662]: Secondary Header is updated. Sep 6 00:04:19.981138 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Sep 6 00:04:21.009161 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Sep 6 00:04:21.011275 disk-uuid[663]: The operation has completed successfully. Sep 6 00:04:21.174579 systemd[1]: disk-uuid.service: Deactivated successfully. Sep 6 00:04:21.174799 systemd[1]: Finished disk-uuid.service. Sep 6 00:04:21.180000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:21.180000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:21.202448 systemd[1]: Starting verity-setup.service... Sep 6 00:04:21.231262 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Sep 6 00:04:21.315050 systemd[1]: Found device dev-mapper-usr.device. Sep 6 00:04:21.321185 systemd[1]: Mounting sysusr-usr.mount... Sep 6 00:04:21.331194 systemd[1]: Finished verity-setup.service. Sep 6 00:04:21.334000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:21.428846 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Sep 6 00:04:21.428697 systemd[1]: Mounted sysusr-usr.mount. Sep 6 00:04:21.430710 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Sep 6 00:04:21.435391 systemd[1]: Starting ignition-setup.service... Sep 6 00:04:21.444166 systemd[1]: Starting parse-ip-for-networkd.service... Sep 6 00:04:21.485387 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Sep 6 00:04:21.485458 kernel: BTRFS info (device nvme0n1p6): using free space tree Sep 6 00:04:21.487672 kernel: BTRFS info (device nvme0n1p6): has skinny extents Sep 6 00:04:21.526136 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Sep 6 00:04:21.545873 systemd[1]: mnt-oem.mount: Deactivated successfully. Sep 6 00:04:21.573358 systemd[1]: Finished ignition-setup.service. Sep 6 00:04:21.574000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:21.577327 systemd[1]: Starting ignition-fetch-offline.service... Sep 6 00:04:21.617244 systemd[1]: Finished parse-ip-for-networkd.service. Sep 6 00:04:21.622000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:21.625000 audit: BPF prog-id=9 op=LOAD Sep 6 00:04:21.628035 systemd[1]: Starting systemd-networkd.service... Sep 6 00:04:21.678456 systemd-networkd[1008]: lo: Link UP Sep 6 00:04:21.678944 systemd-networkd[1008]: lo: Gained carrier Sep 6 00:04:21.680045 systemd-networkd[1008]: Enumeration completed Sep 6 00:04:21.680218 systemd[1]: Started systemd-networkd.service. Sep 6 00:04:21.681010 systemd-networkd[1008]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 6 00:04:21.702936 kernel: kauditd_printk_skb: 12 callbacks suppressed Sep 6 00:04:21.703047 kernel: audit: type=1130 audit(1757117061.690:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:21.690000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:21.691623 systemd[1]: Reached target network.target. Sep 6 00:04:21.706600 systemd[1]: Starting iscsiuio.service... Sep 6 00:04:21.716940 systemd-networkd[1008]: eth0: Link UP Sep 6 00:04:21.719216 systemd-networkd[1008]: eth0: Gained carrier Sep 6 00:04:21.726176 systemd[1]: Started iscsiuio.service. Sep 6 00:04:21.727000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:21.729617 systemd[1]: Starting iscsid.service... Sep 6 00:04:21.745337 iscsid[1013]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Sep 6 00:04:21.745337 iscsid[1013]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Sep 6 00:04:21.745337 iscsid[1013]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Sep 6 00:04:21.745337 iscsid[1013]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Sep 6 00:04:21.745337 iscsid[1013]: If using hardware iscsi like qla4xxx this message can be ignored. Sep 6 00:04:21.745337 iscsid[1013]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Sep 6 00:04:21.745337 iscsid[1013]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Sep 6 00:04:21.797857 kernel: audit: type=1130 audit(1757117061.727:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:21.798028 kernel: audit: type=1130 audit(1757117061.751:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:21.751000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:21.750315 systemd[1]: Started iscsid.service. Sep 6 00:04:21.766268 systemd-networkd[1008]: eth0: DHCPv4 address 172.31.29.17/20, gateway 172.31.16.1 acquired from 172.31.16.1 Sep 6 00:04:21.767833 systemd[1]: Starting dracut-initqueue.service... Sep 6 00:04:21.825185 systemd[1]: Finished dracut-initqueue.service. Sep 6 00:04:21.839293 kernel: audit: type=1130 audit(1757117061.826:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:21.826000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:21.827717 systemd[1]: Reached target remote-fs-pre.target. Sep 6 00:04:21.837254 systemd[1]: Reached target remote-cryptsetup.target. Sep 6 00:04:21.843749 systemd[1]: Reached target remote-fs.target. Sep 6 00:04:21.851471 systemd[1]: Starting dracut-pre-mount.service... Sep 6 00:04:21.873041 systemd[1]: Finished dracut-pre-mount.service. Sep 6 00:04:21.885313 kernel: audit: type=1130 audit(1757117061.872:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:21.872000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:22.167795 ignition[988]: Ignition 2.14.0 Sep 6 00:04:22.167824 ignition[988]: Stage: fetch-offline Sep 6 00:04:22.168532 ignition[988]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 00:04:22.168595 ignition[988]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Sep 6 00:04:22.191393 ignition[988]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Sep 6 00:04:22.193354 ignition[988]: Ignition finished successfully Sep 6 00:04:22.200494 systemd[1]: Finished ignition-fetch-offline.service. Sep 6 00:04:22.201000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:22.214734 systemd[1]: Starting ignition-fetch.service... Sep 6 00:04:22.217051 kernel: audit: type=1130 audit(1757117062.201:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:22.232100 ignition[1032]: Ignition 2.14.0 Sep 6 00:04:22.232199 ignition[1032]: Stage: fetch Sep 6 00:04:22.232500 ignition[1032]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 00:04:22.232561 ignition[1032]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Sep 6 00:04:22.249625 ignition[1032]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Sep 6 00:04:22.253005 ignition[1032]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Sep 6 00:04:22.267195 ignition[1032]: INFO : PUT result: OK Sep 6 00:04:22.272976 ignition[1032]: DEBUG : parsed url from cmdline: "" Sep 6 00:04:22.275369 ignition[1032]: INFO : no config URL provided Sep 6 00:04:22.277599 ignition[1032]: INFO : reading system config file "/usr/lib/ignition/user.ign" Sep 6 00:04:22.280668 ignition[1032]: INFO : no config at "/usr/lib/ignition/user.ign" Sep 6 00:04:22.283358 ignition[1032]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Sep 6 00:04:22.287325 ignition[1032]: INFO : PUT result: OK Sep 6 00:04:22.289476 ignition[1032]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Sep 6 00:04:22.292942 ignition[1032]: INFO : GET result: OK Sep 6 00:04:22.299031 ignition[1032]: DEBUG : parsing config with SHA512: 21b80a4ff816ea48312d2f38814091ccdc54c1d1473664d85253e5579aa524fc564ce0feed58d1006f0bee6b40822363bae95da0d59a2ceadf8495599e0f93f8 Sep 6 00:04:22.305570 ignition[1032]: fetch: fetch complete Sep 6 00:04:22.302761 unknown[1032]: fetched base config from "system" Sep 6 00:04:22.305585 ignition[1032]: fetch: fetch passed Sep 6 00:04:22.326132 kernel: audit: type=1130 audit(1757117062.315:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:22.315000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:22.302790 unknown[1032]: fetched base config from "system" Sep 6 00:04:22.305705 ignition[1032]: Ignition finished successfully Sep 6 00:04:22.302832 unknown[1032]: fetched user config from "aws" Sep 6 00:04:22.312389 systemd[1]: Finished ignition-fetch.service. Sep 6 00:04:22.317947 systemd[1]: Starting ignition-kargs.service... Sep 6 00:04:22.351454 ignition[1038]: Ignition 2.14.0 Sep 6 00:04:22.351482 ignition[1038]: Stage: kargs Sep 6 00:04:22.351793 ignition[1038]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 00:04:22.351851 ignition[1038]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Sep 6 00:04:22.368695 ignition[1038]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Sep 6 00:04:22.371508 ignition[1038]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Sep 6 00:04:22.375343 ignition[1038]: INFO : PUT result: OK Sep 6 00:04:22.385132 ignition[1038]: kargs: kargs passed Sep 6 00:04:22.385491 ignition[1038]: Ignition finished successfully Sep 6 00:04:22.390439 systemd[1]: Finished ignition-kargs.service. Sep 6 00:04:22.403386 kernel: audit: type=1130 audit(1757117062.389:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:22.389000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:22.392223 systemd[1]: Starting ignition-disks.service... Sep 6 00:04:22.412306 ignition[1044]: Ignition 2.14.0 Sep 6 00:04:22.412335 ignition[1044]: Stage: disks Sep 6 00:04:22.412662 ignition[1044]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 00:04:22.412726 ignition[1044]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Sep 6 00:04:22.432964 ignition[1044]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Sep 6 00:04:22.436073 ignition[1044]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Sep 6 00:04:22.439881 ignition[1044]: INFO : PUT result: OK Sep 6 00:04:22.445843 ignition[1044]: disks: disks passed Sep 6 00:04:22.446177 ignition[1044]: Ignition finished successfully Sep 6 00:04:22.451382 systemd[1]: Finished ignition-disks.service. Sep 6 00:04:22.464764 kernel: audit: type=1130 audit(1757117062.454:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:22.454000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:22.455356 systemd[1]: Reached target initrd-root-device.target. Sep 6 00:04:22.464795 systemd[1]: Reached target local-fs-pre.target. Sep 6 00:04:22.467096 systemd[1]: Reached target local-fs.target. Sep 6 00:04:22.469209 systemd[1]: Reached target sysinit.target. Sep 6 00:04:22.474439 systemd[1]: Reached target basic.target. Sep 6 00:04:22.479718 systemd[1]: Starting systemd-fsck-root.service... Sep 6 00:04:22.529761 systemd-fsck[1052]: ROOT: clean, 629/553520 files, 56027/553472 blocks Sep 6 00:04:22.534866 systemd[1]: Finished systemd-fsck-root.service. Sep 6 00:04:22.534000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:22.538660 systemd[1]: Mounting sysroot.mount... Sep 6 00:04:22.555174 kernel: audit: type=1130 audit(1757117062.534:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:22.579153 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Sep 6 00:04:22.581800 systemd[1]: Mounted sysroot.mount. Sep 6 00:04:22.586697 systemd[1]: Reached target initrd-root-fs.target. Sep 6 00:04:22.600126 systemd[1]: Mounting sysroot-usr.mount... Sep 6 00:04:22.604776 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Sep 6 00:04:22.605038 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Sep 6 00:04:22.605105 systemd[1]: Reached target ignition-diskful.target. Sep 6 00:04:22.628756 systemd[1]: Mounted sysroot-usr.mount. Sep 6 00:04:22.649327 systemd[1]: Mounting sysroot-usr-share-oem.mount... Sep 6 00:04:22.655722 systemd[1]: Starting initrd-setup-root.service... Sep 6 00:04:22.676880 initrd-setup-root[1074]: cut: /sysroot/etc/passwd: No such file or directory Sep 6 00:04:22.689157 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/nvme0n1p6 scanned by mount (1069) Sep 6 00:04:22.695764 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Sep 6 00:04:22.695831 kernel: BTRFS info (device nvme0n1p6): using free space tree Sep 6 00:04:22.698229 kernel: BTRFS info (device nvme0n1p6): has skinny extents Sep 6 00:04:22.701159 initrd-setup-root[1085]: cut: /sysroot/etc/group: No such file or directory Sep 6 00:04:22.711974 initrd-setup-root[1106]: cut: /sysroot/etc/shadow: No such file or directory Sep 6 00:04:22.723152 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Sep 6 00:04:22.725358 initrd-setup-root[1116]: cut: /sysroot/etc/gshadow: No such file or directory Sep 6 00:04:22.736261 systemd[1]: Mounted sysroot-usr-share-oem.mount. Sep 6 00:04:22.936437 systemd-networkd[1008]: eth0: Gained IPv6LL Sep 6 00:04:22.953889 systemd[1]: Finished initrd-setup-root.service. Sep 6 00:04:22.961000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:22.964641 systemd[1]: Starting ignition-mount.service... Sep 6 00:04:22.980182 systemd[1]: Starting sysroot-boot.service... Sep 6 00:04:22.984389 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Sep 6 00:04:22.984585 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Sep 6 00:04:23.012409 ignition[1134]: INFO : Ignition 2.14.0 Sep 6 00:04:23.012409 ignition[1134]: INFO : Stage: mount Sep 6 00:04:23.019033 ignition[1134]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 00:04:23.019033 ignition[1134]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Sep 6 00:04:23.034779 ignition[1134]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Sep 6 00:04:23.038747 ignition[1134]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Sep 6 00:04:23.043338 ignition[1134]: INFO : PUT result: OK Sep 6 00:04:23.050912 ignition[1134]: INFO : mount: mount passed Sep 6 00:04:23.057104 ignition[1134]: INFO : Ignition finished successfully Sep 6 00:04:23.052921 systemd[1]: Finished ignition-mount.service. Sep 6 00:04:23.062000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:23.066394 systemd[1]: Starting ignition-files.service... Sep 6 00:04:23.086613 systemd[1]: Mounting sysroot-usr-share-oem.mount... Sep 6 00:04:23.099686 systemd[1]: Finished sysroot-boot.service. Sep 6 00:04:23.103000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:23.121076 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by mount (1144) Sep 6 00:04:23.121171 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Sep 6 00:04:23.123589 kernel: BTRFS info (device nvme0n1p6): using free space tree Sep 6 00:04:23.125976 kernel: BTRFS info (device nvme0n1p6): has skinny extents Sep 6 00:04:23.141143 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Sep 6 00:04:23.147348 systemd[1]: Mounted sysroot-usr-share-oem.mount. Sep 6 00:04:23.166590 ignition[1163]: INFO : Ignition 2.14.0 Sep 6 00:04:23.166590 ignition[1163]: INFO : Stage: files Sep 6 00:04:23.178595 ignition[1163]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 00:04:23.178595 ignition[1163]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Sep 6 00:04:23.201739 ignition[1163]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Sep 6 00:04:23.209001 ignition[1163]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Sep 6 00:04:23.209001 ignition[1163]: INFO : PUT result: OK Sep 6 00:04:23.221499 ignition[1163]: DEBUG : files: compiled without relabeling support, skipping Sep 6 00:04:23.227087 ignition[1163]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Sep 6 00:04:23.227087 ignition[1163]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Sep 6 00:04:23.261405 ignition[1163]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Sep 6 00:04:23.265258 ignition[1163]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Sep 6 00:04:23.270739 unknown[1163]: wrote ssh authorized keys file for user: core Sep 6 00:04:23.273604 ignition[1163]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Sep 6 00:04:23.285729 ignition[1163]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.3-linux-arm64.tar.gz" Sep 6 00:04:23.290780 ignition[1163]: INFO : GET https://get.helm.sh/helm-v3.17.3-linux-arm64.tar.gz: attempt #1 Sep 6 00:04:23.415016 ignition[1163]: INFO : GET result: OK Sep 6 00:04:24.110256 ignition[1163]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.3-linux-arm64.tar.gz" Sep 6 00:04:24.117245 ignition[1163]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Sep 6 00:04:24.121987 ignition[1163]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Sep 6 00:04:24.145071 ignition[1163]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1044199336" Sep 6 00:04:24.149459 ignition[1163]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1044199336": device or resource busy Sep 6 00:04:24.149459 ignition[1163]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1044199336", trying btrfs: device or resource busy Sep 6 00:04:24.149459 ignition[1163]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1044199336" Sep 6 00:04:24.149459 ignition[1163]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1044199336" Sep 6 00:04:24.180489 ignition[1163]: INFO : op(3): [started] unmounting "/mnt/oem1044199336" Sep 6 00:04:24.186936 ignition[1163]: INFO : op(3): [finished] unmounting "/mnt/oem1044199336" Sep 6 00:04:24.190420 ignition[1163]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Sep 6 00:04:24.190420 ignition[1163]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/install.sh" Sep 6 00:04:24.190420 ignition[1163]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/install.sh" Sep 6 00:04:24.190420 ignition[1163]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nginx.yaml" Sep 6 00:04:24.190420 ignition[1163]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nginx.yaml" Sep 6 00:04:24.190420 ignition[1163]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 6 00:04:24.190420 ignition[1163]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 6 00:04:24.190420 ignition[1163]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 6 00:04:24.190420 ignition[1163]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 6 00:04:24.190420 ignition[1163]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/etc/flatcar/update.conf" Sep 6 00:04:24.190420 ignition[1163]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/etc/flatcar/update.conf" Sep 6 00:04:24.190420 ignition[1163]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Sep 6 00:04:24.190420 ignition[1163]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Sep 6 00:04:24.190420 ignition[1163]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Sep 6 00:04:24.257715 ignition[1163]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Sep 6 00:04:24.262761 systemd[1]: mnt-oem1044199336.mount: Deactivated successfully. Sep 6 00:04:24.277487 ignition[1163]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4216460243" Sep 6 00:04:24.277487 ignition[1163]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4216460243": device or resource busy Sep 6 00:04:24.277487 ignition[1163]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem4216460243", trying btrfs: device or resource busy Sep 6 00:04:24.277487 ignition[1163]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4216460243" Sep 6 00:04:24.277487 ignition[1163]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4216460243" Sep 6 00:04:24.277487 ignition[1163]: INFO : op(6): [started] unmounting "/mnt/oem4216460243" Sep 6 00:04:24.301850 ignition[1163]: INFO : op(6): [finished] unmounting "/mnt/oem4216460243" Sep 6 00:04:24.301850 ignition[1163]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Sep 6 00:04:24.301850 ignition[1163]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Sep 6 00:04:24.301850 ignition[1163]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Sep 6 00:04:24.332805 systemd[1]: mnt-oem4216460243.mount: Deactivated successfully. Sep 6 00:04:24.349913 ignition[1163]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1258494013" Sep 6 00:04:24.354188 ignition[1163]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1258494013": device or resource busy Sep 6 00:04:24.354188 ignition[1163]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1258494013", trying btrfs: device or resource busy Sep 6 00:04:24.354188 ignition[1163]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1258494013" Sep 6 00:04:24.354188 ignition[1163]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1258494013" Sep 6 00:04:24.354188 ignition[1163]: INFO : op(9): [started] unmounting "/mnt/oem1258494013" Sep 6 00:04:24.354188 ignition[1163]: INFO : op(9): [finished] unmounting "/mnt/oem1258494013" Sep 6 00:04:24.377233 ignition[1163]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Sep 6 00:04:24.377233 ignition[1163]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Sep 6 00:04:24.377233 ignition[1163]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Sep 6 00:04:24.404922 ignition[1163]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2918093431" Sep 6 00:04:24.408724 ignition[1163]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2918093431": device or resource busy Sep 6 00:04:24.408724 ignition[1163]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2918093431", trying btrfs: device or resource busy Sep 6 00:04:24.408724 ignition[1163]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2918093431" Sep 6 00:04:24.421473 ignition[1163]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2918093431" Sep 6 00:04:24.421473 ignition[1163]: INFO : op(c): [started] unmounting "/mnt/oem2918093431" Sep 6 00:04:24.421473 ignition[1163]: INFO : op(c): [finished] unmounting "/mnt/oem2918093431" Sep 6 00:04:24.421473 ignition[1163]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Sep 6 00:04:24.421473 ignition[1163]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Sep 6 00:04:24.421473 ignition[1163]: INFO : GET https://extensions.flatcar.org/extensions/kubernetes-v1.33.0-arm64.raw: attempt #1 Sep 6 00:04:24.905469 ignition[1163]: INFO : GET result: OK Sep 6 00:04:25.581782 ignition[1163]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Sep 6 00:04:25.581782 ignition[1163]: INFO : files: op(f): [started] processing unit "coreos-metadata-sshkeys@.service" Sep 6 00:04:25.581782 ignition[1163]: INFO : files: op(f): [finished] processing unit "coreos-metadata-sshkeys@.service" Sep 6 00:04:25.601210 ignition[1163]: INFO : files: op(10): [started] processing unit "amazon-ssm-agent.service" Sep 6 00:04:25.601210 ignition[1163]: INFO : files: op(10): op(11): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Sep 6 00:04:25.601210 ignition[1163]: INFO : files: op(10): op(11): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Sep 6 00:04:25.601210 ignition[1163]: INFO : files: op(10): [finished] processing unit "amazon-ssm-agent.service" Sep 6 00:04:25.601210 ignition[1163]: INFO : files: op(12): [started] processing unit "nvidia.service" Sep 6 00:04:25.601210 ignition[1163]: INFO : files: op(12): [finished] processing unit "nvidia.service" Sep 6 00:04:25.601210 ignition[1163]: INFO : files: op(13): [started] processing unit "prepare-helm.service" Sep 6 00:04:25.601210 ignition[1163]: INFO : files: op(13): op(14): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 6 00:04:25.634280 ignition[1163]: INFO : files: op(13): op(14): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 6 00:04:25.634280 ignition[1163]: INFO : files: op(13): [finished] processing unit "prepare-helm.service" Sep 6 00:04:25.634280 ignition[1163]: INFO : files: op(15): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Sep 6 00:04:25.634280 ignition[1163]: INFO : files: op(15): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Sep 6 00:04:25.634280 ignition[1163]: INFO : files: op(16): [started] setting preset to enabled for "amazon-ssm-agent.service" Sep 6 00:04:25.634280 ignition[1163]: INFO : files: op(16): [finished] setting preset to enabled for "amazon-ssm-agent.service" Sep 6 00:04:25.634280 ignition[1163]: INFO : files: op(17): [started] setting preset to enabled for "nvidia.service" Sep 6 00:04:25.634280 ignition[1163]: INFO : files: op(17): [finished] setting preset to enabled for "nvidia.service" Sep 6 00:04:25.634280 ignition[1163]: INFO : files: op(18): [started] setting preset to enabled for "prepare-helm.service" Sep 6 00:04:25.634280 ignition[1163]: INFO : files: op(18): [finished] setting preset to enabled for "prepare-helm.service" Sep 6 00:04:25.679575 ignition[1163]: INFO : files: createResultFile: createFiles: op(19): [started] writing file "/sysroot/etc/.ignition-result.json" Sep 6 00:04:25.679575 ignition[1163]: INFO : files: createResultFile: createFiles: op(19): [finished] writing file "/sysroot/etc/.ignition-result.json" Sep 6 00:04:25.679575 ignition[1163]: INFO : files: files passed Sep 6 00:04:25.679575 ignition[1163]: INFO : Ignition finished successfully Sep 6 00:04:25.695860 systemd[1]: Finished ignition-files.service. Sep 6 00:04:25.694000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:25.711712 systemd[1]: Starting initrd-setup-root-after-ignition.service... Sep 6 00:04:25.717424 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Sep 6 00:04:25.719142 systemd[1]: Starting ignition-quench.service... Sep 6 00:04:25.736417 systemd[1]: ignition-quench.service: Deactivated successfully. Sep 6 00:04:25.739017 systemd[1]: Finished ignition-quench.service. Sep 6 00:04:25.742000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:25.742000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:25.750010 initrd-setup-root-after-ignition[1188]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Sep 6 00:04:25.755694 systemd[1]: Finished initrd-setup-root-after-ignition.service. Sep 6 00:04:25.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:25.758614 systemd[1]: Reached target ignition-complete.target. Sep 6 00:04:25.762374 systemd[1]: Starting initrd-parse-etc.service... Sep 6 00:04:25.799065 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Sep 6 00:04:25.799834 systemd[1]: Finished initrd-parse-etc.service. Sep 6 00:04:25.803000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:25.803000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:25.806623 systemd[1]: Reached target initrd-fs.target. Sep 6 00:04:25.808853 systemd[1]: Reached target initrd.target. Sep 6 00:04:25.813570 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Sep 6 00:04:25.815601 systemd[1]: Starting dracut-pre-pivot.service... Sep 6 00:04:25.845430 systemd[1]: Finished dracut-pre-pivot.service. Sep 6 00:04:25.846000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:25.849356 systemd[1]: Starting initrd-cleanup.service... Sep 6 00:04:25.868040 systemd[1]: Stopped target nss-lookup.target. Sep 6 00:04:25.875124 systemd[1]: Stopped target remote-cryptsetup.target. Sep 6 00:04:25.879542 systemd[1]: Stopped target timers.target. Sep 6 00:04:25.883462 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Sep 6 00:04:25.886176 systemd[1]: Stopped dracut-pre-pivot.service. Sep 6 00:04:25.889000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:25.890512 systemd[1]: Stopped target initrd.target. Sep 6 00:04:25.894432 systemd[1]: Stopped target basic.target. Sep 6 00:04:25.898359 systemd[1]: Stopped target ignition-complete.target. Sep 6 00:04:25.902888 systemd[1]: Stopped target ignition-diskful.target. Sep 6 00:04:25.907409 systemd[1]: Stopped target initrd-root-device.target. Sep 6 00:04:25.912020 systemd[1]: Stopped target remote-fs.target. Sep 6 00:04:25.916073 systemd[1]: Stopped target remote-fs-pre.target. Sep 6 00:04:25.920428 systemd[1]: Stopped target sysinit.target. Sep 6 00:04:25.924355 systemd[1]: Stopped target local-fs.target. Sep 6 00:04:25.928588 systemd[1]: Stopped target local-fs-pre.target. Sep 6 00:04:25.932944 systemd[1]: Stopped target swap.target. Sep 6 00:04:25.936890 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Sep 6 00:04:25.939696 systemd[1]: Stopped dracut-pre-mount.service. Sep 6 00:04:25.942000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:25.944318 systemd[1]: Stopped target cryptsetup.target. Sep 6 00:04:25.949263 systemd[1]: dracut-initqueue.service: Deactivated successfully. Sep 6 00:04:25.952154 systemd[1]: Stopped dracut-initqueue.service. Sep 6 00:04:25.955000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:25.956656 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Sep 6 00:04:25.960088 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Sep 6 00:04:25.964000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:25.965594 systemd[1]: ignition-files.service: Deactivated successfully. Sep 6 00:04:25.965896 systemd[1]: Stopped ignition-files.service. Sep 6 00:04:25.971000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:25.974219 systemd[1]: Stopping ignition-mount.service... Sep 6 00:04:25.989591 ignition[1201]: INFO : Ignition 2.14.0 Sep 6 00:04:25.989591 ignition[1201]: INFO : Stage: umount Sep 6 00:04:25.989591 ignition[1201]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 00:04:25.989591 ignition[1201]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Sep 6 00:04:26.006478 iscsid[1013]: iscsid shutting down. Sep 6 00:04:26.024000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:26.030000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:25.993311 systemd[1]: Stopping iscsid.service... Sep 6 00:04:26.038969 ignition[1201]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Sep 6 00:04:26.038969 ignition[1201]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Sep 6 00:04:26.000512 systemd[1]: Stopping sysroot-boot.service... Sep 6 00:04:26.018718 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Sep 6 00:04:26.019064 systemd[1]: Stopped systemd-udev-trigger.service. Sep 6 00:04:26.025607 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Sep 6 00:04:26.025824 systemd[1]: Stopped dracut-pre-trigger.service. Sep 6 00:04:26.034682 systemd[1]: iscsid.service: Deactivated successfully. Sep 6 00:04:26.039642 systemd[1]: Stopped iscsid.service. Sep 6 00:04:26.061000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:26.063874 systemd[1]: Stopping iscsiuio.service... Sep 6 00:04:26.068322 ignition[1201]: INFO : PUT result: OK Sep 6 00:04:26.073825 systemd[1]: sysroot-boot.mount: Deactivated successfully. Sep 6 00:04:26.078623 systemd[1]: iscsiuio.service: Deactivated successfully. Sep 6 00:04:26.078877 systemd[1]: Stopped iscsiuio.service. Sep 6 00:04:26.085602 ignition[1201]: INFO : umount: umount passed Sep 6 00:04:26.085602 ignition[1201]: INFO : Ignition finished successfully Sep 6 00:04:26.087000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:26.097000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:26.097000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:26.105000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:26.107000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:26.110000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:26.112000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:26.114000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:26.119000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:26.088837 systemd[1]: initrd-cleanup.service: Deactivated successfully. Sep 6 00:04:26.094898 systemd[1]: Finished initrd-cleanup.service. Sep 6 00:04:26.099324 systemd[1]: ignition-mount.service: Deactivated successfully. Sep 6 00:04:26.099503 systemd[1]: Stopped ignition-mount.service. Sep 6 00:04:26.106746 systemd[1]: sysroot-boot.service: Deactivated successfully. Sep 6 00:04:26.106943 systemd[1]: Stopped sysroot-boot.service. Sep 6 00:04:26.109267 systemd[1]: ignition-disks.service: Deactivated successfully. Sep 6 00:04:26.109353 systemd[1]: Stopped ignition-disks.service. Sep 6 00:04:26.111510 systemd[1]: ignition-kargs.service: Deactivated successfully. Sep 6 00:04:26.111589 systemd[1]: Stopped ignition-kargs.service. Sep 6 00:04:26.113652 systemd[1]: ignition-fetch.service: Deactivated successfully. Sep 6 00:04:26.113727 systemd[1]: Stopped ignition-fetch.service. Sep 6 00:04:26.115882 systemd[1]: Stopped target network.target. Sep 6 00:04:26.117938 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Sep 6 00:04:26.118021 systemd[1]: Stopped ignition-fetch-offline.service. Sep 6 00:04:26.120388 systemd[1]: Stopped target paths.target. Sep 6 00:04:26.122294 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Sep 6 00:04:26.125096 systemd[1]: Stopped systemd-ask-password-console.path. Sep 6 00:04:26.127539 systemd[1]: Stopped target slices.target. Sep 6 00:04:26.145000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:26.159000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:26.129514 systemd[1]: Stopped target sockets.target. Sep 6 00:04:26.131697 systemd[1]: iscsid.socket: Deactivated successfully. Sep 6 00:04:26.131770 systemd[1]: Closed iscsid.socket. Sep 6 00:04:26.135705 systemd[1]: iscsiuio.socket: Deactivated successfully. Sep 6 00:04:26.135779 systemd[1]: Closed iscsiuio.socket. Sep 6 00:04:26.139634 systemd[1]: ignition-setup.service: Deactivated successfully. Sep 6 00:04:26.139727 systemd[1]: Stopped ignition-setup.service. Sep 6 00:04:26.147490 systemd[1]: initrd-setup-root.service: Deactivated successfully. Sep 6 00:04:26.148472 systemd[1]: Stopped initrd-setup-root.service. Sep 6 00:04:26.163271 systemd[1]: Stopping systemd-networkd.service... Sep 6 00:04:26.164125 systemd[1]: Stopping systemd-resolved.service... Sep 6 00:04:26.202863 systemd[1]: systemd-resolved.service: Deactivated successfully. Sep 6 00:04:26.205056 systemd[1]: Stopped systemd-resolved.service. Sep 6 00:04:26.205172 systemd-networkd[1008]: eth0: DHCPv6 lease lost Sep 6 00:04:26.209000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:26.214000 audit: BPF prog-id=6 op=UNLOAD Sep 6 00:04:26.216432 systemd[1]: systemd-networkd.service: Deactivated successfully. Sep 6 00:04:26.219346 systemd[1]: Stopped systemd-networkd.service. Sep 6 00:04:26.223585 systemd[1]: systemd-networkd.socket: Deactivated successfully. Sep 6 00:04:26.223691 systemd[1]: Closed systemd-networkd.socket. Sep 6 00:04:26.222000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:26.231210 systemd[1]: Stopping network-cleanup.service... Sep 6 00:04:26.237000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:26.239000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:26.241000 audit: BPF prog-id=9 op=UNLOAD Sep 6 00:04:26.235874 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Sep 6 00:04:26.235995 systemd[1]: Stopped parse-ip-for-networkd.service. Sep 6 00:04:26.238359 systemd[1]: systemd-sysctl.service: Deactivated successfully. Sep 6 00:04:26.238443 systemd[1]: Stopped systemd-sysctl.service. Sep 6 00:04:26.242615 systemd[1]: systemd-modules-load.service: Deactivated successfully. Sep 6 00:04:26.242700 systemd[1]: Stopped systemd-modules-load.service. Sep 6 00:04:26.244000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:26.245736 systemd[1]: Stopping systemd-udevd.service... Sep 6 00:04:26.274000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:26.249683 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Sep 6 00:04:26.270456 systemd[1]: network-cleanup.service: Deactivated successfully. Sep 6 00:04:26.270678 systemd[1]: Stopped network-cleanup.service. Sep 6 00:04:26.291063 systemd[1]: systemd-udevd.service: Deactivated successfully. Sep 6 00:04:26.293617 systemd[1]: Stopped systemd-udevd.service. Sep 6 00:04:26.297660 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Sep 6 00:04:26.296000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:26.303000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:26.305000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:26.297743 systemd[1]: Closed systemd-udevd-control.socket. Sep 6 00:04:26.310000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:26.299849 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Sep 6 00:04:26.299917 systemd[1]: Closed systemd-udevd-kernel.socket. Sep 6 00:04:26.301847 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Sep 6 00:04:26.332000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:26.301925 systemd[1]: Stopped dracut-pre-udev.service. Sep 6 00:04:26.340000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:26.343000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:26.304388 systemd[1]: dracut-cmdline.service: Deactivated successfully. Sep 6 00:04:26.304465 systemd[1]: Stopped dracut-cmdline.service. Sep 6 00:04:26.352000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:26.352000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:26.306585 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Sep 6 00:04:26.306661 systemd[1]: Stopped dracut-cmdline-ask.service. Sep 6 00:04:26.319136 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Sep 6 00:04:26.333598 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Sep 6 00:04:26.333721 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Sep 6 00:04:26.337735 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Sep 6 00:04:26.337824 systemd[1]: Stopped kmod-static-nodes.service. Sep 6 00:04:26.341905 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Sep 6 00:04:26.341984 systemd[1]: Stopped systemd-vconsole-setup.service. Sep 6 00:04:26.346172 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Sep 6 00:04:26.347082 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Sep 6 00:04:26.347298 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Sep 6 00:04:26.353819 systemd[1]: Reached target initrd-switch-root.target. Sep 6 00:04:26.363068 systemd[1]: Starting initrd-switch-root.service... Sep 6 00:04:26.411548 systemd[1]: Switching root. Sep 6 00:04:26.439295 systemd-journald[310]: Journal stopped Sep 6 00:04:32.623719 systemd-journald[310]: Received SIGTERM from PID 1 (systemd). Sep 6 00:04:32.623836 kernel: SELinux: Class mctp_socket not defined in policy. Sep 6 00:04:32.623876 kernel: SELinux: Class anon_inode not defined in policy. Sep 6 00:04:32.623920 kernel: SELinux: the above unknown classes and permissions will be allowed Sep 6 00:04:32.623952 kernel: SELinux: policy capability network_peer_controls=1 Sep 6 00:04:32.623984 kernel: SELinux: policy capability open_perms=1 Sep 6 00:04:32.624015 kernel: SELinux: policy capability extended_socket_class=1 Sep 6 00:04:32.624052 kernel: SELinux: policy capability always_check_network=0 Sep 6 00:04:32.624087 kernel: SELinux: policy capability cgroup_seclabel=1 Sep 6 00:04:32.624138 kernel: SELinux: policy capability nnp_nosuid_transition=1 Sep 6 00:04:32.624172 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Sep 6 00:04:32.624204 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Sep 6 00:04:32.624244 kernel: kauditd_printk_skb: 46 callbacks suppressed Sep 6 00:04:32.624275 kernel: audit: type=1403 audit(1757117067.312:79): auid=4294967295 ses=4294967295 lsm=selinux res=1 Sep 6 00:04:32.624307 systemd[1]: Successfully loaded SELinux policy in 128.911ms. Sep 6 00:04:32.624363 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 20.321ms. Sep 6 00:04:32.624399 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 6 00:04:32.624435 systemd[1]: Detected virtualization amazon. Sep 6 00:04:32.624465 systemd[1]: Detected architecture arm64. Sep 6 00:04:32.624499 systemd[1]: Detected first boot. Sep 6 00:04:32.624531 systemd[1]: Initializing machine ID from VM UUID. Sep 6 00:04:32.624995 kernel: audit: type=1400 audit(1757117067.554:80): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 6 00:04:32.625046 kernel: audit: type=1400 audit(1757117067.555:81): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 6 00:04:32.625079 kernel: audit: type=1334 audit(1757117067.561:82): prog-id=10 op=LOAD Sep 6 00:04:32.625135 kernel: audit: type=1334 audit(1757117067.561:83): prog-id=10 op=UNLOAD Sep 6 00:04:32.625168 kernel: audit: type=1334 audit(1757117067.569:84): prog-id=11 op=LOAD Sep 6 00:04:32.625203 kernel: audit: type=1334 audit(1757117067.569:85): prog-id=11 op=UNLOAD Sep 6 00:04:32.625339 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Sep 6 00:04:32.625382 kernel: audit: type=1400 audit(1757117067.825:86): avc: denied { associate } for pid=1234 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Sep 6 00:04:32.625415 kernel: audit: type=1300 audit(1757117067.825:86): arch=c00000b7 syscall=5 success=yes exit=0 a0=400014589c a1=40000c6de0 a2=40000cd0c0 a3=32 items=0 ppid=1217 pid=1234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:32.625448 kernel: audit: type=1327 audit(1757117067.825:86): proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 6 00:04:32.625488 systemd[1]: Populated /etc with preset unit settings. Sep 6 00:04:32.625521 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 6 00:04:32.625555 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 6 00:04:32.625593 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 6 00:04:32.625625 systemd[1]: initrd-switch-root.service: Deactivated successfully. Sep 6 00:04:32.625658 systemd[1]: Stopped initrd-switch-root.service. Sep 6 00:04:32.625689 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Sep 6 00:04:32.625722 systemd[1]: Created slice system-addon\x2dconfig.slice. Sep 6 00:04:32.625754 systemd[1]: Created slice system-addon\x2drun.slice. Sep 6 00:04:32.625785 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Sep 6 00:04:32.625820 systemd[1]: Created slice system-getty.slice. Sep 6 00:04:32.625852 systemd[1]: Created slice system-modprobe.slice. Sep 6 00:04:32.625892 systemd[1]: Created slice system-serial\x2dgetty.slice. Sep 6 00:04:32.635454 systemd[1]: Created slice system-system\x2dcloudinit.slice. Sep 6 00:04:32.635510 systemd[1]: Created slice system-systemd\x2dfsck.slice. Sep 6 00:04:32.635555 systemd[1]: Created slice user.slice. Sep 6 00:04:32.635589 systemd[1]: Started systemd-ask-password-console.path. Sep 6 00:04:32.635619 systemd[1]: Started systemd-ask-password-wall.path. Sep 6 00:04:32.635657 systemd[1]: Set up automount boot.automount. Sep 6 00:04:32.635688 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Sep 6 00:04:32.635719 systemd[1]: Stopped target initrd-switch-root.target. Sep 6 00:04:32.635749 systemd[1]: Stopped target initrd-fs.target. Sep 6 00:04:32.635779 systemd[1]: Stopped target initrd-root-fs.target. Sep 6 00:04:32.635811 systemd[1]: Reached target integritysetup.target. Sep 6 00:04:32.635843 systemd[1]: Reached target remote-cryptsetup.target. Sep 6 00:04:32.635876 systemd[1]: Reached target remote-fs.target. Sep 6 00:04:32.635908 systemd[1]: Reached target slices.target. Sep 6 00:04:32.635942 systemd[1]: Reached target swap.target. Sep 6 00:04:32.635971 systemd[1]: Reached target torcx.target. Sep 6 00:04:32.636003 systemd[1]: Reached target veritysetup.target. Sep 6 00:04:32.636034 systemd[1]: Listening on systemd-coredump.socket. Sep 6 00:04:32.636064 systemd[1]: Listening on systemd-initctl.socket. Sep 6 00:04:32.636093 systemd[1]: Listening on systemd-networkd.socket. Sep 6 00:04:32.636154 systemd[1]: Listening on systemd-udevd-control.socket. Sep 6 00:04:32.636189 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 6 00:04:32.636220 systemd[1]: Listening on systemd-userdbd.socket. Sep 6 00:04:32.636254 systemd[1]: Mounting dev-hugepages.mount... Sep 6 00:04:32.636285 systemd[1]: Mounting dev-mqueue.mount... Sep 6 00:04:32.636314 systemd[1]: Mounting media.mount... Sep 6 00:04:32.636344 systemd[1]: Mounting sys-kernel-debug.mount... Sep 6 00:04:32.636374 systemd[1]: Mounting sys-kernel-tracing.mount... Sep 6 00:04:32.636405 systemd[1]: Mounting tmp.mount... Sep 6 00:04:32.636439 systemd[1]: Starting flatcar-tmpfiles.service... Sep 6 00:04:32.636472 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 00:04:32.636502 systemd[1]: Starting kmod-static-nodes.service... Sep 6 00:04:32.636534 systemd[1]: Starting modprobe@configfs.service... Sep 6 00:04:32.636569 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 00:04:32.636599 systemd[1]: Starting modprobe@drm.service... Sep 6 00:04:32.636628 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 00:04:32.636659 systemd[1]: Starting modprobe@fuse.service... Sep 6 00:04:32.636689 systemd[1]: Starting modprobe@loop.service... Sep 6 00:04:32.636720 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Sep 6 00:04:32.636752 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Sep 6 00:04:32.636785 systemd[1]: Stopped systemd-fsck-root.service. Sep 6 00:04:32.636818 kernel: kauditd_printk_skb: 28 callbacks suppressed Sep 6 00:04:32.636850 kernel: audit: type=1131 audit(1757117072.433:110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.636880 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Sep 6 00:04:32.636912 systemd[1]: Stopped systemd-fsck-usr.service. Sep 6 00:04:32.636944 systemd[1]: Stopped systemd-journald.service. Sep 6 00:04:32.636974 kernel: audit: type=1131 audit(1757117072.452:111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.637007 kernel: audit: type=1130 audit(1757117072.461:112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.637036 kernel: fuse: init (API version 7.34) Sep 6 00:04:32.637070 kernel: audit: type=1131 audit(1757117072.461:113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.643429 kernel: audit: type=1334 audit(1757117072.472:114): prog-id=21 op=LOAD Sep 6 00:04:32.643501 systemd[1]: Starting systemd-journald.service... Sep 6 00:04:32.643538 kernel: audit: type=1334 audit(1757117072.482:115): prog-id=22 op=LOAD Sep 6 00:04:32.643568 systemd[1]: Starting systemd-modules-load.service... Sep 6 00:04:32.643597 kernel: audit: type=1334 audit(1757117072.482:116): prog-id=23 op=LOAD Sep 6 00:04:32.643625 kernel: audit: type=1334 audit(1757117072.482:117): prog-id=19 op=UNLOAD Sep 6 00:04:32.643652 kernel: audit: type=1334 audit(1757117072.482:118): prog-id=20 op=UNLOAD Sep 6 00:04:32.643687 systemd[1]: Starting systemd-network-generator.service... Sep 6 00:04:32.643722 systemd[1]: Starting systemd-remount-fs.service... Sep 6 00:04:32.643752 systemd[1]: Starting systemd-udev-trigger.service... Sep 6 00:04:32.643782 systemd[1]: verity-setup.service: Deactivated successfully. Sep 6 00:04:32.643814 systemd[1]: Stopped verity-setup.service. Sep 6 00:04:32.643843 systemd[1]: Mounted dev-hugepages.mount. Sep 6 00:04:32.643873 kernel: audit: type=1131 audit(1757117072.552:119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.643902 systemd[1]: Mounted dev-mqueue.mount. Sep 6 00:04:32.643933 systemd[1]: Mounted media.mount. Sep 6 00:04:32.643965 kernel: loop: module loaded Sep 6 00:04:32.643994 systemd[1]: Mounted sys-kernel-debug.mount. Sep 6 00:04:32.644024 systemd[1]: Mounted sys-kernel-tracing.mount. Sep 6 00:04:32.644056 systemd[1]: Mounted tmp.mount. Sep 6 00:04:32.644089 systemd[1]: Finished kmod-static-nodes.service. Sep 6 00:04:32.644138 systemd[1]: modprobe@configfs.service: Deactivated successfully. Sep 6 00:04:32.644173 systemd[1]: Finished modprobe@configfs.service. Sep 6 00:04:32.644205 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 00:04:32.644236 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 00:04:32.644272 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 6 00:04:32.644311 systemd[1]: Finished modprobe@drm.service. Sep 6 00:04:32.644345 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 00:04:32.644375 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 00:04:32.644405 systemd[1]: modprobe@fuse.service: Deactivated successfully. Sep 6 00:04:32.644436 systemd-journald[1316]: Journal started Sep 6 00:04:32.644534 systemd-journald[1316]: Runtime Journal (/run/log/journal/ec29b637169973113d33ced61c645a91) is 8.0M, max 75.4M, 67.4M free. Sep 6 00:04:27.312000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Sep 6 00:04:27.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 6 00:04:27.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 6 00:04:27.561000 audit: BPF prog-id=10 op=LOAD Sep 6 00:04:27.561000 audit: BPF prog-id=10 op=UNLOAD Sep 6 00:04:27.569000 audit: BPF prog-id=11 op=LOAD Sep 6 00:04:27.569000 audit: BPF prog-id=11 op=UNLOAD Sep 6 00:04:27.825000 audit[1234]: AVC avc: denied { associate } for pid=1234 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Sep 6 00:04:27.825000 audit[1234]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=400014589c a1=40000c6de0 a2=40000cd0c0 a3=32 items=0 ppid=1217 pid=1234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:27.825000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 6 00:04:27.829000 audit[1234]: AVC avc: denied { associate } for pid=1234 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Sep 6 00:04:27.829000 audit[1234]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=4000145979 a2=1ed a3=0 items=2 ppid=1217 pid=1234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:27.829000 audit: CWD cwd="/" Sep 6 00:04:27.829000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:04:27.829000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:04:27.829000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 6 00:04:32.114000 audit: BPF prog-id=12 op=LOAD Sep 6 00:04:32.114000 audit: BPF prog-id=3 op=UNLOAD Sep 6 00:04:32.114000 audit: BPF prog-id=13 op=LOAD Sep 6 00:04:32.115000 audit: BPF prog-id=14 op=LOAD Sep 6 00:04:32.115000 audit: BPF prog-id=4 op=UNLOAD Sep 6 00:04:32.115000 audit: BPF prog-id=5 op=UNLOAD Sep 6 00:04:32.116000 audit: BPF prog-id=15 op=LOAD Sep 6 00:04:32.116000 audit: BPF prog-id=12 op=UNLOAD Sep 6 00:04:32.116000 audit: BPF prog-id=16 op=LOAD Sep 6 00:04:32.116000 audit: BPF prog-id=17 op=LOAD Sep 6 00:04:32.116000 audit: BPF prog-id=13 op=UNLOAD Sep 6 00:04:32.116000 audit: BPF prog-id=14 op=UNLOAD Sep 6 00:04:32.119000 audit: BPF prog-id=18 op=LOAD Sep 6 00:04:32.119000 audit: BPF prog-id=15 op=UNLOAD Sep 6 00:04:32.119000 audit: BPF prog-id=19 op=LOAD Sep 6 00:04:32.119000 audit: BPF prog-id=20 op=LOAD Sep 6 00:04:32.119000 audit: BPF prog-id=16 op=UNLOAD Sep 6 00:04:32.119000 audit: BPF prog-id=17 op=UNLOAD Sep 6 00:04:32.121000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.124000 audit: BPF prog-id=18 op=UNLOAD Sep 6 00:04:32.130000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.130000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.433000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.452000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.461000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.461000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.472000 audit: BPF prog-id=21 op=LOAD Sep 6 00:04:32.482000 audit: BPF prog-id=22 op=LOAD Sep 6 00:04:32.482000 audit: BPF prog-id=23 op=LOAD Sep 6 00:04:32.482000 audit: BPF prog-id=19 op=UNLOAD Sep 6 00:04:32.482000 audit: BPF prog-id=20 op=UNLOAD Sep 6 00:04:32.552000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.598000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.608000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.608000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.616000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Sep 6 00:04:32.647418 systemd[1]: Finished modprobe@fuse.service. Sep 6 00:04:32.616000 audit[1316]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=5 a1=fffffc4a53f0 a2=4000 a3=1 items=0 ppid=1 pid=1316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:32.616000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Sep 6 00:04:32.675158 systemd[1]: Started systemd-journald.service. Sep 6 00:04:32.619000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.619000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.629000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.629000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.640000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.640000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.648000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.648000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.653000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.656000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.656000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.658000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.665000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:27.820043 /usr/lib/systemd/system-generators/torcx-generator[1234]: time="2025-09-06T00:04:27Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 6 00:04:32.112774 systemd[1]: Queued start job for default target multi-user.target. Sep 6 00:04:27.821398 /usr/lib/systemd/system-generators/torcx-generator[1234]: time="2025-09-06T00:04:27Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 6 00:04:32.112795 systemd[1]: Unnecessary job was removed for dev-nvme0n1p6.device. Sep 6 00:04:27.821451 /usr/lib/systemd/system-generators/torcx-generator[1234]: time="2025-09-06T00:04:27Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 6 00:04:32.121699 systemd[1]: systemd-journald.service: Deactivated successfully. Sep 6 00:04:27.821520 /usr/lib/systemd/system-generators/torcx-generator[1234]: time="2025-09-06T00:04:27Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Sep 6 00:04:32.654955 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 00:04:27.821546 /usr/lib/systemd/system-generators/torcx-generator[1234]: time="2025-09-06T00:04:27Z" level=debug msg="skipped missing lower profile" missing profile=oem Sep 6 00:04:32.655283 systemd[1]: Finished modprobe@loop.service. Sep 6 00:04:27.821616 /usr/lib/systemd/system-generators/torcx-generator[1234]: time="2025-09-06T00:04:27Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Sep 6 00:04:32.657712 systemd[1]: Finished systemd-modules-load.service. Sep 6 00:04:27.821648 /usr/lib/systemd/system-generators/torcx-generator[1234]: time="2025-09-06T00:04:27Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Sep 6 00:04:32.660475 systemd[1]: Finished systemd-network-generator.service. Sep 6 00:04:27.822069 /usr/lib/systemd/system-generators/torcx-generator[1234]: time="2025-09-06T00:04:27Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Sep 6 00:04:32.663647 systemd[1]: Finished systemd-remount-fs.service. Sep 6 00:04:27.822211 /usr/lib/systemd/system-generators/torcx-generator[1234]: time="2025-09-06T00:04:27Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 6 00:04:32.666978 systemd[1]: Reached target network-pre.target. Sep 6 00:04:27.822249 /usr/lib/systemd/system-generators/torcx-generator[1234]: time="2025-09-06T00:04:27Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 6 00:04:32.671572 systemd[1]: Mounting sys-fs-fuse-connections.mount... Sep 6 00:04:27.825159 /usr/lib/systemd/system-generators/torcx-generator[1234]: time="2025-09-06T00:04:27Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Sep 6 00:04:27.825247 /usr/lib/systemd/system-generators/torcx-generator[1234]: time="2025-09-06T00:04:27Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Sep 6 00:04:32.679783 systemd[1]: Mounting sys-kernel-config.mount... Sep 6 00:04:27.825295 /usr/lib/systemd/system-generators/torcx-generator[1234]: time="2025-09-06T00:04:27Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Sep 6 00:04:32.682020 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Sep 6 00:04:27.825335 /usr/lib/systemd/system-generators/torcx-generator[1234]: time="2025-09-06T00:04:27Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Sep 6 00:04:32.685682 systemd[1]: Starting systemd-hwdb-update.service... Sep 6 00:04:27.825386 /usr/lib/systemd/system-generators/torcx-generator[1234]: time="2025-09-06T00:04:27Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Sep 6 00:04:32.690372 systemd[1]: Starting systemd-journal-flush.service... Sep 6 00:04:27.825424 /usr/lib/systemd/system-generators/torcx-generator[1234]: time="2025-09-06T00:04:27Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Sep 6 00:04:32.692758 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 6 00:04:31.224293 /usr/lib/systemd/system-generators/torcx-generator[1234]: time="2025-09-06T00:04:31Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 6 00:04:32.694996 systemd[1]: Starting systemd-random-seed.service... Sep 6 00:04:31.224824 /usr/lib/systemd/system-generators/torcx-generator[1234]: time="2025-09-06T00:04:31Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 6 00:04:32.696876 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 6 00:04:31.225074 /usr/lib/systemd/system-generators/torcx-generator[1234]: time="2025-09-06T00:04:31Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 6 00:04:32.699458 systemd[1]: Starting systemd-sysctl.service... Sep 6 00:04:31.225554 /usr/lib/systemd/system-generators/torcx-generator[1234]: time="2025-09-06T00:04:31Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 6 00:04:31.225662 /usr/lib/systemd/system-generators/torcx-generator[1234]: time="2025-09-06T00:04:31Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Sep 6 00:04:31.225799 /usr/lib/systemd/system-generators/torcx-generator[1234]: time="2025-09-06T00:04:31Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Sep 6 00:04:32.706507 systemd[1]: Mounted sys-fs-fuse-connections.mount. Sep 6 00:04:32.709455 systemd[1]: Mounted sys-kernel-config.mount. Sep 6 00:04:32.737875 systemd[1]: Finished systemd-random-seed.service. Sep 6 00:04:32.739000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.740751 systemd[1]: Reached target first-boot-complete.target. Sep 6 00:04:32.761104 systemd-journald[1316]: Time spent on flushing to /var/log/journal/ec29b637169973113d33ced61c645a91 is 45.720ms for 1157 entries. Sep 6 00:04:32.761104 systemd-journald[1316]: System Journal (/var/log/journal/ec29b637169973113d33ced61c645a91) is 8.0M, max 195.6M, 187.6M free. Sep 6 00:04:32.832739 systemd-journald[1316]: Received client request to flush runtime journal. Sep 6 00:04:32.773000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.806000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.772581 systemd[1]: Finished flatcar-tmpfiles.service. Sep 6 00:04:32.779010 systemd[1]: Starting systemd-sysusers.service... Sep 6 00:04:32.805599 systemd[1]: Finished systemd-sysctl.service. Sep 6 00:04:32.836000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.835198 systemd[1]: Finished systemd-journal-flush.service. Sep 6 00:04:32.877794 systemd[1]: Finished systemd-udev-trigger.service. Sep 6 00:04:32.880000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.883560 systemd[1]: Starting systemd-udev-settle.service... Sep 6 00:04:32.902443 udevadm[1352]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Sep 6 00:04:32.981883 systemd[1]: Finished systemd-sysusers.service. Sep 6 00:04:32.980000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:32.987695 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Sep 6 00:04:33.124551 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Sep 6 00:04:33.125000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:33.624611 systemd[1]: Finished systemd-hwdb-update.service. Sep 6 00:04:33.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:33.629000 audit: BPF prog-id=24 op=LOAD Sep 6 00:04:33.629000 audit: BPF prog-id=25 op=LOAD Sep 6 00:04:33.629000 audit: BPF prog-id=7 op=UNLOAD Sep 6 00:04:33.629000 audit: BPF prog-id=8 op=UNLOAD Sep 6 00:04:33.631808 systemd[1]: Starting systemd-udevd.service... Sep 6 00:04:33.668671 systemd-udevd[1355]: Using default interface naming scheme 'v252'. Sep 6 00:04:33.738965 systemd[1]: Started systemd-udevd.service. Sep 6 00:04:33.740000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:33.742000 audit: BPF prog-id=26 op=LOAD Sep 6 00:04:33.744456 systemd[1]: Starting systemd-networkd.service... Sep 6 00:04:33.757000 audit: BPF prog-id=27 op=LOAD Sep 6 00:04:33.758000 audit: BPF prog-id=28 op=LOAD Sep 6 00:04:33.758000 audit: BPF prog-id=29 op=LOAD Sep 6 00:04:33.760639 systemd[1]: Starting systemd-userdbd.service... Sep 6 00:04:33.844650 systemd[1]: Started systemd-userdbd.service. Sep 6 00:04:33.846000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:33.853915 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Sep 6 00:04:33.874137 (udev-worker)[1365]: Network interface NamePolicy= disabled on kernel command line. Sep 6 00:04:34.056404 systemd-networkd[1361]: lo: Link UP Sep 6 00:04:34.056428 systemd-networkd[1361]: lo: Gained carrier Sep 6 00:04:34.057405 systemd-networkd[1361]: Enumeration completed Sep 6 00:04:34.057583 systemd[1]: Started systemd-networkd.service. Sep 6 00:04:34.057620 systemd-networkd[1361]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 6 00:04:34.060000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:34.063884 systemd[1]: Starting systemd-networkd-wait-online.service... Sep 6 00:04:34.076167 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 6 00:04:34.076290 systemd-networkd[1361]: eth0: Link UP Sep 6 00:04:34.076621 systemd-networkd[1361]: eth0: Gained carrier Sep 6 00:04:34.106420 systemd-networkd[1361]: eth0: DHCPv4 address 172.31.29.17/20, gateway 172.31.16.1 acquired from 172.31.16.1 Sep 6 00:04:34.206043 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 6 00:04:34.209428 systemd[1]: Finished systemd-udev-settle.service. Sep 6 00:04:34.210000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:34.215784 systemd[1]: Starting lvm2-activation-early.service... Sep 6 00:04:34.267460 lvm[1474]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 6 00:04:34.302820 systemd[1]: Finished lvm2-activation-early.service. Sep 6 00:04:34.304000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:34.305448 systemd[1]: Reached target cryptsetup.target. Sep 6 00:04:34.309684 systemd[1]: Starting lvm2-activation.service... Sep 6 00:04:34.317188 lvm[1475]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 6 00:04:34.350822 systemd[1]: Finished lvm2-activation.service. Sep 6 00:04:34.351000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:34.353165 systemd[1]: Reached target local-fs-pre.target. Sep 6 00:04:34.355330 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Sep 6 00:04:34.355369 systemd[1]: Reached target local-fs.target. Sep 6 00:04:34.357300 systemd[1]: Reached target machines.target. Sep 6 00:04:34.361450 systemd[1]: Starting ldconfig.service... Sep 6 00:04:34.364133 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 00:04:34.364276 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 00:04:34.366381 systemd[1]: Starting systemd-boot-update.service... Sep 6 00:04:34.375345 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Sep 6 00:04:34.383992 systemd[1]: Starting systemd-machine-id-commit.service... Sep 6 00:04:34.390607 systemd[1]: Starting systemd-sysext.service... Sep 6 00:04:34.394872 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1477 (bootctl) Sep 6 00:04:34.397276 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Sep 6 00:04:34.426962 systemd[1]: Unmounting usr-share-oem.mount... Sep 6 00:04:34.448701 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Sep 6 00:04:34.449000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:34.451958 systemd[1]: usr-share-oem.mount: Deactivated successfully. Sep 6 00:04:34.452348 systemd[1]: Unmounted usr-share-oem.mount. Sep 6 00:04:34.475421 kernel: loop0: detected capacity change from 0 to 211168 Sep 6 00:04:34.549443 systemd-fsck[1488]: fsck.fat 4.2 (2021-01-31) Sep 6 00:04:34.549443 systemd-fsck[1488]: /dev/nvme0n1p1: 236 files, 117310/258078 clusters Sep 6 00:04:34.553632 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Sep 6 00:04:34.555000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:34.558992 systemd[1]: Mounting boot.mount... Sep 6 00:04:34.587140 systemd[1]: Mounted boot.mount. Sep 6 00:04:34.616181 systemd[1]: Finished systemd-boot-update.service. Sep 6 00:04:34.615000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:34.742141 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Sep 6 00:04:34.779568 kernel: loop1: detected capacity change from 0 to 211168 Sep 6 00:04:34.778274 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Sep 6 00:04:34.779343 systemd[1]: Finished systemd-machine-id-commit.service. Sep 6 00:04:34.778000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:34.805729 (sd-sysext)[1503]: Using extensions 'kubernetes'. Sep 6 00:04:34.807180 (sd-sysext)[1503]: Merged extensions into '/usr'. Sep 6 00:04:34.851057 systemd[1]: Mounting usr-share-oem.mount... Sep 6 00:04:34.854600 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 00:04:34.863405 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 00:04:34.868690 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 00:04:34.879663 systemd[1]: Starting modprobe@loop.service... Sep 6 00:04:34.882170 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 00:04:34.882884 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 00:04:34.892209 systemd[1]: Mounted usr-share-oem.mount. Sep 6 00:04:34.895581 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 00:04:34.896136 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 00:04:34.897000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:34.897000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:34.900586 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 00:04:34.901324 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 00:04:34.902000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:34.903000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:34.905268 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 00:04:34.905737 systemd[1]: Finished modprobe@loop.service. Sep 6 00:04:34.907000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:34.908000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:34.913582 systemd[1]: Finished systemd-sysext.service. Sep 6 00:04:34.914000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:34.920242 systemd[1]: Starting ensure-sysext.service... Sep 6 00:04:34.922766 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 6 00:04:34.923138 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 6 00:04:34.925622 systemd[1]: Starting systemd-tmpfiles-setup.service... Sep 6 00:04:34.942568 systemd[1]: Reloading. Sep 6 00:04:34.959215 systemd-tmpfiles[1510]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Sep 6 00:04:34.962500 systemd-tmpfiles[1510]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Sep 6 00:04:34.982237 systemd-tmpfiles[1510]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Sep 6 00:04:35.050445 /usr/lib/systemd/system-generators/torcx-generator[1530]: time="2025-09-06T00:04:35Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 6 00:04:35.050515 /usr/lib/systemd/system-generators/torcx-generator[1530]: time="2025-09-06T00:04:35Z" level=info msg="torcx already run" Sep 6 00:04:35.317281 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 6 00:04:35.317578 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 6 00:04:35.358155 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 6 00:04:35.503000 audit: BPF prog-id=30 op=LOAD Sep 6 00:04:35.503000 audit: BPF prog-id=26 op=UNLOAD Sep 6 00:04:35.504000 audit: BPF prog-id=31 op=LOAD Sep 6 00:04:35.505000 audit: BPF prog-id=27 op=UNLOAD Sep 6 00:04:35.505000 audit: BPF prog-id=32 op=LOAD Sep 6 00:04:35.505000 audit: BPF prog-id=33 op=LOAD Sep 6 00:04:35.506000 audit: BPF prog-id=28 op=UNLOAD Sep 6 00:04:35.506000 audit: BPF prog-id=29 op=UNLOAD Sep 6 00:04:35.508000 audit: BPF prog-id=34 op=LOAD Sep 6 00:04:35.508000 audit: BPF prog-id=21 op=UNLOAD Sep 6 00:04:35.508000 audit: BPF prog-id=35 op=LOAD Sep 6 00:04:35.509000 audit: BPF prog-id=36 op=LOAD Sep 6 00:04:35.509000 audit: BPF prog-id=22 op=UNLOAD Sep 6 00:04:35.509000 audit: BPF prog-id=23 op=UNLOAD Sep 6 00:04:35.516000 audit: BPF prog-id=37 op=LOAD Sep 6 00:04:35.516000 audit: BPF prog-id=38 op=LOAD Sep 6 00:04:35.516000 audit: BPF prog-id=24 op=UNLOAD Sep 6 00:04:35.517000 audit: BPF prog-id=25 op=UNLOAD Sep 6 00:04:35.529638 systemd[1]: Finished systemd-tmpfiles-setup.service. Sep 6 00:04:35.531000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:35.540513 systemd[1]: Starting audit-rules.service... Sep 6 00:04:35.547386 systemd[1]: Starting clean-ca-certificates.service... Sep 6 00:04:35.553599 systemd[1]: Starting systemd-journal-catalog-update.service... Sep 6 00:04:35.561000 audit: BPF prog-id=39 op=LOAD Sep 6 00:04:35.566466 systemd[1]: Starting systemd-resolved.service... Sep 6 00:04:35.570000 audit: BPF prog-id=40 op=LOAD Sep 6 00:04:35.574001 systemd[1]: Starting systemd-timesyncd.service... Sep 6 00:04:35.581199 systemd[1]: Starting systemd-update-utmp.service... Sep 6 00:04:35.597406 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 00:04:35.600220 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 00:04:35.605843 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 00:04:35.611205 systemd[1]: Starting modprobe@loop.service... Sep 6 00:04:35.614824 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 00:04:35.615136 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 00:04:35.617187 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 00:04:35.617542 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 00:04:35.622547 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 00:04:35.620000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:35.620000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:35.625000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:35.625000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:35.622881 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 00:04:35.626929 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 6 00:04:35.630216 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 00:04:35.632909 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 00:04:35.639325 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 00:04:35.642429 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 00:04:35.642775 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 00:04:35.644526 systemd[1]: Finished clean-ca-certificates.service. Sep 6 00:04:35.649846 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 00:04:35.647000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:35.652000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:35.652000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:35.650197 systemd[1]: Finished modprobe@loop.service. Sep 6 00:04:35.653871 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 6 00:04:35.656000 audit[1593]: SYSTEM_BOOT pid=1593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Sep 6 00:04:35.662223 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 00:04:35.669093 systemd[1]: Starting modprobe@drm.service... Sep 6 00:04:35.675331 systemd[1]: Starting modprobe@loop.service... Sep 6 00:04:35.678914 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 00:04:35.679540 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 00:04:35.680001 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 6 00:04:35.682877 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 00:04:35.683235 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 00:04:35.687335 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 00:04:35.685000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:35.685000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:35.691000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:35.691000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:35.695000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:35.695000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:35.704000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:35.707000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:35.718000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:35.718000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:35.687645 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 00:04:35.693268 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 6 00:04:35.693541 systemd[1]: Finished modprobe@drm.service. Sep 6 00:04:35.697179 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 6 00:04:35.703548 systemd[1]: Finished systemd-update-utmp.service. Sep 6 00:04:35.706637 systemd[1]: Finished ensure-sysext.service. Sep 6 00:04:35.717041 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 00:04:35.717392 systemd[1]: Finished modprobe@loop.service. Sep 6 00:04:35.719901 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 6 00:04:35.749768 systemd[1]: Finished systemd-journal-catalog-update.service. Sep 6 00:04:35.751000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:35.818000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Sep 6 00:04:35.818000 audit[1616]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffec407d30 a2=420 a3=0 items=0 ppid=1587 pid=1616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:35.818000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Sep 6 00:04:35.819634 augenrules[1616]: No rules Sep 6 00:04:35.821261 systemd[1]: Finished audit-rules.service. Sep 6 00:04:35.856974 systemd-resolved[1590]: Positive Trust Anchors: Sep 6 00:04:35.858059 systemd[1]: Started systemd-timesyncd.service. Sep 6 00:04:35.858682 systemd-resolved[1590]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 6 00:04:35.858866 systemd-resolved[1590]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 6 00:04:35.862318 systemd[1]: Reached target time-set.target. Sep 6 00:04:35.927512 systemd-resolved[1590]: Defaulting to hostname 'linux'. Sep 6 00:04:35.932206 systemd[1]: Started systemd-resolved.service. Sep 6 00:04:35.934403 systemd[1]: Reached target network.target. Sep 6 00:04:35.936348 systemd[1]: Reached target nss-lookup.target. Sep 6 00:04:35.959919 systemd-timesyncd[1592]: Contacted time server 198.12.95.197:123 (0.flatcar.pool.ntp.org). Sep 6 00:04:35.960150 systemd-timesyncd[1592]: Initial clock synchronization to Sat 2025-09-06 00:04:35.674991 UTC. Sep 6 00:04:35.980481 ldconfig[1476]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Sep 6 00:04:35.987415 systemd[1]: Finished ldconfig.service. Sep 6 00:04:35.991865 systemd[1]: Starting systemd-update-done.service... Sep 6 00:04:36.010244 systemd[1]: Finished systemd-update-done.service. Sep 6 00:04:36.012896 systemd[1]: Reached target sysinit.target. Sep 6 00:04:36.015306 systemd[1]: Started motdgen.path. Sep 6 00:04:36.017265 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Sep 6 00:04:36.020354 systemd[1]: Started logrotate.timer. Sep 6 00:04:36.022589 systemd[1]: Started mdadm.timer. Sep 6 00:04:36.024537 systemd[1]: Started systemd-tmpfiles-clean.timer. Sep 6 00:04:36.026691 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Sep 6 00:04:36.026745 systemd[1]: Reached target paths.target. Sep 6 00:04:36.028568 systemd[1]: Reached target timers.target. Sep 6 00:04:36.030984 systemd[1]: Listening on dbus.socket. Sep 6 00:04:36.034685 systemd[1]: Starting docker.socket... Sep 6 00:04:36.041642 systemd[1]: Listening on sshd.socket. Sep 6 00:04:36.043856 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 00:04:36.044760 systemd[1]: Listening on docker.socket. Sep 6 00:04:36.046841 systemd[1]: Reached target sockets.target. Sep 6 00:04:36.048872 systemd[1]: Reached target basic.target. Sep 6 00:04:36.050920 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 6 00:04:36.050970 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 6 00:04:36.052975 systemd[1]: Starting containerd.service... Sep 6 00:04:36.058069 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Sep 6 00:04:36.062909 systemd[1]: Starting dbus.service... Sep 6 00:04:36.067165 systemd[1]: Starting enable-oem-cloudinit.service... Sep 6 00:04:36.073241 systemd[1]: Starting extend-filesystems.service... Sep 6 00:04:36.075996 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Sep 6 00:04:36.078585 systemd[1]: Starting motdgen.service... Sep 6 00:04:36.084402 systemd[1]: Starting prepare-helm.service... Sep 6 00:04:36.088851 systemd[1]: Starting ssh-key-proc-cmdline.service... Sep 6 00:04:36.094043 systemd[1]: Starting sshd-keygen.service... Sep 6 00:04:36.104710 systemd[1]: Starting systemd-logind.service... Sep 6 00:04:36.109278 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 00:04:36.109436 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Sep 6 00:04:36.110498 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Sep 6 00:04:36.114563 systemd[1]: Starting update-engine.service... Sep 6 00:04:36.121016 systemd[1]: Starting update-ssh-keys-after-ignition.service... Sep 6 00:04:36.126866 jq[1628]: false Sep 6 00:04:36.131383 systemd-networkd[1361]: eth0: Gained IPv6LL Sep 6 00:04:36.139919 systemd[1]: Finished systemd-networkd-wait-online.service. Sep 6 00:04:36.142972 systemd[1]: Reached target network-online.target. Sep 6 00:04:36.148541 systemd[1]: Started amazon-ssm-agent.service. Sep 6 00:04:36.156589 systemd[1]: Starting kubelet.service... Sep 6 00:04:36.160839 systemd[1]: Started nvidia.service. Sep 6 00:04:36.166209 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Sep 6 00:04:36.167713 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Sep 6 00:04:36.201252 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Sep 6 00:04:36.201644 systemd[1]: Finished ssh-key-proc-cmdline.service. Sep 6 00:04:36.288039 jq[1636]: true Sep 6 00:04:36.375886 tar[1639]: linux-arm64/LICENSE Sep 6 00:04:36.379621 tar[1639]: linux-arm64/helm Sep 6 00:04:36.383831 dbus-daemon[1627]: [system] SELinux support is enabled Sep 6 00:04:36.384765 systemd[1]: Started dbus.service. Sep 6 00:04:36.385617 extend-filesystems[1629]: Found loop1 Sep 6 00:04:36.392137 extend-filesystems[1629]: Found nvme0n1 Sep 6 00:04:36.392137 extend-filesystems[1629]: Found nvme0n1p1 Sep 6 00:04:36.392137 extend-filesystems[1629]: Found nvme0n1p2 Sep 6 00:04:36.392137 extend-filesystems[1629]: Found nvme0n1p3 Sep 6 00:04:36.392137 extend-filesystems[1629]: Found usr Sep 6 00:04:36.392137 extend-filesystems[1629]: Found nvme0n1p4 Sep 6 00:04:36.392137 extend-filesystems[1629]: Found nvme0n1p6 Sep 6 00:04:36.392137 extend-filesystems[1629]: Found nvme0n1p7 Sep 6 00:04:36.392137 extend-filesystems[1629]: Found nvme0n1p9 Sep 6 00:04:36.392137 extend-filesystems[1629]: Checking size of /dev/nvme0n1p9 Sep 6 00:04:36.422269 systemd[1]: motdgen.service: Deactivated successfully. Sep 6 00:04:36.422611 systemd[1]: Finished motdgen.service. Sep 6 00:04:36.432156 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Sep 6 00:04:36.432219 systemd[1]: Reached target system-config.target. Sep 6 00:04:36.442982 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Sep 6 00:04:36.443022 systemd[1]: Reached target user-config.target. Sep 6 00:04:36.453319 dbus-daemon[1627]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.3' (uid=244 pid=1361 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Sep 6 00:04:36.462928 systemd[1]: Starting systemd-hostnamed.service... Sep 6 00:04:36.491131 jq[1662]: true Sep 6 00:04:36.526267 extend-filesystems[1629]: Resized partition /dev/nvme0n1p9 Sep 6 00:04:36.556629 extend-filesystems[1677]: resize2fs 1.46.5 (30-Dec-2021) Sep 6 00:04:36.604185 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Sep 6 00:04:36.613120 update_engine[1635]: I0906 00:04:36.608518 1635 main.cc:92] Flatcar Update Engine starting Sep 6 00:04:36.638445 systemd[1]: Started update-engine.service. Sep 6 00:04:36.673369 update_engine[1635]: I0906 00:04:36.638715 1635 update_check_scheduler.cc:74] Next update check in 9m10s Sep 6 00:04:36.645852 systemd[1]: Started locksmithd.service. Sep 6 00:04:36.681145 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Sep 6 00:04:36.690761 amazon-ssm-agent[1640]: 2025/09/06 00:04:36 Failed to load instance info from vault. RegistrationKey does not exist. Sep 6 00:04:36.694141 extend-filesystems[1677]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Sep 6 00:04:36.694141 extend-filesystems[1677]: old_desc_blocks = 1, new_desc_blocks = 1 Sep 6 00:04:36.694141 extend-filesystems[1677]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Sep 6 00:04:36.718084 extend-filesystems[1629]: Resized filesystem in /dev/nvme0n1p9 Sep 6 00:04:36.700909 systemd[1]: extend-filesystems.service: Deactivated successfully. Sep 6 00:04:36.701313 systemd[1]: Finished extend-filesystems.service. Sep 6 00:04:36.722397 bash[1695]: Updated "/home/core/.ssh/authorized_keys" Sep 6 00:04:36.724033 systemd[1]: Finished update-ssh-keys-after-ignition.service. Sep 6 00:04:36.740743 amazon-ssm-agent[1640]: Initializing new seelog logger Sep 6 00:04:36.740961 amazon-ssm-agent[1640]: New Seelog Logger Creation Complete Sep 6 00:04:36.741083 amazon-ssm-agent[1640]: 2025/09/06 00:04:36 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Sep 6 00:04:36.741083 amazon-ssm-agent[1640]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Sep 6 00:04:36.741519 amazon-ssm-agent[1640]: 2025/09/06 00:04:36 processing appconfig overrides Sep 6 00:04:36.783638 systemd-logind[1634]: Watching system buttons on /dev/input/event0 (Power Button) Sep 6 00:04:36.788216 systemd-logind[1634]: Watching system buttons on /dev/input/event1 (Sleep Button) Sep 6 00:04:36.789658 systemd-logind[1634]: New seat seat0. Sep 6 00:04:36.799557 env[1646]: time="2025-09-06T00:04:36.799481259Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Sep 6 00:04:36.811360 systemd[1]: Started systemd-logind.service. Sep 6 00:04:36.828212 systemd[1]: nvidia.service: Deactivated successfully. Sep 6 00:04:37.026340 env[1646]: time="2025-09-06T00:04:37.026251738Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Sep 6 00:04:37.026735 env[1646]: time="2025-09-06T00:04:37.026622981Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Sep 6 00:04:37.042032 env[1646]: time="2025-09-06T00:04:37.041914387Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.190-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Sep 6 00:04:37.042032 env[1646]: time="2025-09-06T00:04:37.042014712Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Sep 6 00:04:37.042715 env[1646]: time="2025-09-06T00:04:37.042651549Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 6 00:04:37.042846 env[1646]: time="2025-09-06T00:04:37.042708844Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Sep 6 00:04:37.042846 env[1646]: time="2025-09-06T00:04:37.042766570Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Sep 6 00:04:37.042846 env[1646]: time="2025-09-06T00:04:37.042792066Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Sep 6 00:04:37.043248 env[1646]: time="2025-09-06T00:04:37.043164066Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Sep 6 00:04:37.046254 env[1646]: time="2025-09-06T00:04:37.046169509Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Sep 6 00:04:37.046725 env[1646]: time="2025-09-06T00:04:37.046649425Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 6 00:04:37.046907 env[1646]: time="2025-09-06T00:04:37.046737088Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Sep 6 00:04:37.047020 env[1646]: time="2025-09-06T00:04:37.046948410Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Sep 6 00:04:37.047131 env[1646]: time="2025-09-06T00:04:37.047013786Z" level=info msg="metadata content store policy set" policy=shared Sep 6 00:04:37.053950 dbus-daemon[1627]: [system] Successfully activated service 'org.freedesktop.hostname1' Sep 6 00:04:37.054319 systemd[1]: Started systemd-hostnamed.service. Sep 6 00:04:37.055231 dbus-daemon[1627]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1669 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Sep 6 00:04:37.064237 systemd[1]: Starting polkit.service... Sep 6 00:04:37.076772 env[1646]: time="2025-09-06T00:04:37.076645416Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Sep 6 00:04:37.076963 env[1646]: time="2025-09-06T00:04:37.076799129Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Sep 6 00:04:37.076963 env[1646]: time="2025-09-06T00:04:37.076885072Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Sep 6 00:04:37.077157 env[1646]: time="2025-09-06T00:04:37.076999569Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Sep 6 00:04:37.077157 env[1646]: time="2025-09-06T00:04:37.077065863Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Sep 6 00:04:37.077157 env[1646]: time="2025-09-06T00:04:37.077134284Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Sep 6 00:04:37.077330 env[1646]: time="2025-09-06T00:04:37.077176453Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Sep 6 00:04:37.078172 env[1646]: time="2025-09-06T00:04:37.078063573Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Sep 6 00:04:37.078335 env[1646]: time="2025-09-06T00:04:37.078176954Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Sep 6 00:04:37.078335 env[1646]: time="2025-09-06T00:04:37.078241597Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Sep 6 00:04:37.078335 env[1646]: time="2025-09-06T00:04:37.078277906Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Sep 6 00:04:37.078492 env[1646]: time="2025-09-06T00:04:37.078340329Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Sep 6 00:04:37.078782 env[1646]: time="2025-09-06T00:04:37.078696388Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Sep 6 00:04:37.079057 env[1646]: time="2025-09-06T00:04:37.078997245Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Sep 6 00:04:37.079620 env[1646]: time="2025-09-06T00:04:37.079545083Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Sep 6 00:04:37.088089 env[1646]: time="2025-09-06T00:04:37.088002264Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Sep 6 00:04:37.088089 env[1646]: time="2025-09-06T00:04:37.088091880Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Sep 6 00:04:37.088392 env[1646]: time="2025-09-06T00:04:37.088348987Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Sep 6 00:04:37.088480 env[1646]: time="2025-09-06T00:04:37.088397144Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Sep 6 00:04:37.088480 env[1646]: time="2025-09-06T00:04:37.088430233Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Sep 6 00:04:37.088480 env[1646]: time="2025-09-06T00:04:37.088458962Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Sep 6 00:04:37.088662 env[1646]: time="2025-09-06T00:04:37.088490028Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Sep 6 00:04:37.088662 env[1646]: time="2025-09-06T00:04:37.088538068Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Sep 6 00:04:37.088662 env[1646]: time="2025-09-06T00:04:37.088574459Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Sep 6 00:04:37.088662 env[1646]: time="2025-09-06T00:04:37.088604990Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Sep 6 00:04:37.088662 env[1646]: time="2025-09-06T00:04:37.088645264Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Sep 6 00:04:37.089050 env[1646]: time="2025-09-06T00:04:37.088961479Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Sep 6 00:04:37.089050 env[1646]: time="2025-09-06T00:04:37.089034296Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Sep 6 00:04:37.089239 env[1646]: time="2025-09-06T00:04:37.089073256Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Sep 6 00:04:37.089239 env[1646]: time="2025-09-06T00:04:37.089142759Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Sep 6 00:04:37.089239 env[1646]: time="2025-09-06T00:04:37.089179173Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Sep 6 00:04:37.089239 env[1646]: time="2025-09-06T00:04:37.089207274Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Sep 6 00:04:37.089471 env[1646]: time="2025-09-06T00:04:37.089244048Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Sep 6 00:04:37.089471 env[1646]: time="2025-09-06T00:04:37.089342966Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Sep 6 00:04:37.091471 env[1646]: time="2025-09-06T00:04:37.089688910Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Sep 6 00:04:37.091471 env[1646]: time="2025-09-06T00:04:37.091461999Z" level=info msg="Connect containerd service" Sep 6 00:04:37.093672 env[1646]: time="2025-09-06T00:04:37.091535385Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Sep 6 00:04:37.093672 env[1646]: time="2025-09-06T00:04:37.092862763Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 6 00:04:37.095783 env[1646]: time="2025-09-06T00:04:37.095699205Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Sep 6 00:04:37.095927 env[1646]: time="2025-09-06T00:04:37.095849709Z" level=info msg=serving... address=/run/containerd/containerd.sock Sep 6 00:04:37.096091 systemd[1]: Started containerd.service. Sep 6 00:04:37.105390 env[1646]: time="2025-09-06T00:04:37.105277999Z" level=info msg="Start subscribing containerd event" Sep 6 00:04:37.105570 env[1646]: time="2025-09-06T00:04:37.105392717Z" level=info msg="Start recovering state" Sep 6 00:04:37.105570 env[1646]: time="2025-09-06T00:04:37.105523956Z" level=info msg="Start event monitor" Sep 6 00:04:37.105570 env[1646]: time="2025-09-06T00:04:37.105562289Z" level=info msg="Start snapshots syncer" Sep 6 00:04:37.105729 env[1646]: time="2025-09-06T00:04:37.105587658Z" level=info msg="Start cni network conf syncer for default" Sep 6 00:04:37.105729 env[1646]: time="2025-09-06T00:04:37.105607481Z" level=info msg="Start streaming server" Sep 6 00:04:37.127580 polkitd[1725]: Started polkitd version 121 Sep 6 00:04:37.132781 env[1646]: time="2025-09-06T00:04:37.132711351Z" level=info msg="containerd successfully booted in 0.338295s" Sep 6 00:04:37.179783 polkitd[1725]: Loading rules from directory /etc/polkit-1/rules.d Sep 6 00:04:37.181382 polkitd[1725]: Loading rules from directory /usr/share/polkit-1/rules.d Sep 6 00:04:37.193842 polkitd[1725]: Finished loading, compiling and executing 2 rules Sep 6 00:04:37.194897 dbus-daemon[1627]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Sep 6 00:04:37.195185 systemd[1]: Started polkit.service. Sep 6 00:04:37.197271 polkitd[1725]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Sep 6 00:04:37.244364 systemd-hostnamed[1669]: Hostname set to (transient) Sep 6 00:04:37.244537 systemd-resolved[1590]: System hostname changed to 'ip-172-31-29-17'. Sep 6 00:04:37.380288 coreos-metadata[1626]: Sep 06 00:04:37.377 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Sep 6 00:04:37.383507 coreos-metadata[1626]: Sep 06 00:04:37.383 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Sep 6 00:04:37.384802 coreos-metadata[1626]: Sep 06 00:04:37.384 INFO Fetch successful Sep 6 00:04:37.385151 coreos-metadata[1626]: Sep 06 00:04:37.384 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Sep 6 00:04:37.389456 coreos-metadata[1626]: Sep 06 00:04:37.389 INFO Fetch successful Sep 6 00:04:37.392523 unknown[1626]: wrote ssh authorized keys file for user: core Sep 6 00:04:37.417570 update-ssh-keys[1758]: Updated "/home/core/.ssh/authorized_keys" Sep 6 00:04:37.418909 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Sep 6 00:04:37.705522 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO Create new startup processor Sep 6 00:04:37.707131 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [LongRunningPluginsManager] registered plugins: {} Sep 6 00:04:37.708027 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO Initializing bookkeeping folders Sep 6 00:04:37.708259 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO removing the completed state files Sep 6 00:04:37.708728 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO Initializing bookkeeping folders for long running plugins Sep 6 00:04:37.712314 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO Initializing replies folder for MDS reply requests that couldn't reach the service Sep 6 00:04:37.712684 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO Initializing healthcheck folders for long running plugins Sep 6 00:04:37.712810 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO Initializing locations for inventory plugin Sep 6 00:04:37.712948 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO Initializing default location for custom inventory Sep 6 00:04:37.713060 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO Initializing default location for file inventory Sep 6 00:04:37.713229 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO Initializing default location for role inventory Sep 6 00:04:37.713594 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO Init the cloudwatchlogs publisher Sep 6 00:04:37.713733 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [instanceID=i-0eadc2bb077e63af9] Successfully loaded platform independent plugin aws:downloadContent Sep 6 00:04:37.713842 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [instanceID=i-0eadc2bb077e63af9] Successfully loaded platform independent plugin aws:softwareInventory Sep 6 00:04:37.713955 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [instanceID=i-0eadc2bb077e63af9] Successfully loaded platform independent plugin aws:runPowerShellScript Sep 6 00:04:37.714066 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [instanceID=i-0eadc2bb077e63af9] Successfully loaded platform independent plugin aws:updateSsmAgent Sep 6 00:04:37.714529 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [instanceID=i-0eadc2bb077e63af9] Successfully loaded platform independent plugin aws:runDockerAction Sep 6 00:04:37.714646 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [instanceID=i-0eadc2bb077e63af9] Successfully loaded platform independent plugin aws:configurePackage Sep 6 00:04:37.715042 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [instanceID=i-0eadc2bb077e63af9] Successfully loaded platform independent plugin aws:configureDocker Sep 6 00:04:37.715208 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [instanceID=i-0eadc2bb077e63af9] Successfully loaded platform independent plugin aws:refreshAssociation Sep 6 00:04:37.715323 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [instanceID=i-0eadc2bb077e63af9] Successfully loaded platform independent plugin aws:runDocument Sep 6 00:04:37.715432 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [instanceID=i-0eadc2bb077e63af9] Successfully loaded platform dependent plugin aws:runShellScript Sep 6 00:04:37.715540 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO Starting Agent: amazon-ssm-agent - v2.3.1319.0 Sep 6 00:04:37.715648 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO OS: linux, Arch: arm64 Sep 6 00:04:37.716597 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [MessagingDeliveryService] Starting document processing engine... Sep 6 00:04:37.722271 amazon-ssm-agent[1640]: datastore file /var/lib/amazon/ssm/i-0eadc2bb077e63af9/longrunningplugins/datastore/store doesn't exist - no long running plugins to execute Sep 6 00:04:37.815425 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [MessagingDeliveryService] [EngineProcessor] Starting Sep 6 00:04:37.910659 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [MessagingDeliveryService] [EngineProcessor] Initial processing Sep 6 00:04:38.005281 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [MessagingDeliveryService] Starting message polling Sep 6 00:04:38.099917 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [MessagingDeliveryService] Starting send replies to MDS Sep 6 00:04:38.194837 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [instanceID=i-0eadc2bb077e63af9] Starting association polling Sep 6 00:04:38.289982 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Starting Sep 6 00:04:38.385244 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [MessagingDeliveryService] [Association] Launching response handler Sep 6 00:04:38.480782 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Initial processing Sep 6 00:04:38.548058 tar[1639]: linux-arm64/README.md Sep 6 00:04:38.559223 systemd[1]: Finished prepare-helm.service. Sep 6 00:04:38.576458 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [MessagingDeliveryService] [Association] Initializing association scheduling service Sep 6 00:04:38.672452 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [MessagingDeliveryService] [Association] Association scheduling service initialized Sep 6 00:04:38.679575 locksmithd[1701]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Sep 6 00:04:38.768449 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [HealthCheck] HealthCheck reporting agent health. Sep 6 00:04:38.787316 sshd_keygen[1672]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Sep 6 00:04:38.831431 systemd[1]: Finished sshd-keygen.service. Sep 6 00:04:38.836326 systemd[1]: Starting issuegen.service... Sep 6 00:04:38.849277 systemd[1]: issuegen.service: Deactivated successfully. Sep 6 00:04:38.849614 systemd[1]: Finished issuegen.service. Sep 6 00:04:38.854797 systemd[1]: Starting systemd-user-sessions.service... Sep 6 00:04:38.864712 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [MessageGatewayService] Starting session document processing engine... Sep 6 00:04:38.869486 systemd[1]: Finished systemd-user-sessions.service. Sep 6 00:04:38.875053 systemd[1]: Started getty@tty1.service. Sep 6 00:04:38.880166 systemd[1]: Started serial-getty@ttyS0.service. Sep 6 00:04:38.883069 systemd[1]: Reached target getty.target. Sep 6 00:04:38.961239 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [MessageGatewayService] [EngineProcessor] Starting Sep 6 00:04:39.057893 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [MessageGatewayService] SSM Agent is trying to setup control channel for Session Manager module. Sep 6 00:04:39.154824 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [MessageGatewayService] Setting up websocket for controlchannel for instance: i-0eadc2bb077e63af9, requestId: 347ede42-f323-4065-8930-7ad07f606689 Sep 6 00:04:39.251788 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [OfflineService] Starting document processing engine... Sep 6 00:04:39.349039 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [OfflineService] [EngineProcessor] Starting Sep 6 00:04:39.391742 systemd[1]: Started kubelet.service. Sep 6 00:04:39.395307 systemd[1]: Reached target multi-user.target. Sep 6 00:04:39.400244 systemd[1]: Starting systemd-update-utmp-runlevel.service... Sep 6 00:04:39.416007 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Sep 6 00:04:39.416449 systemd[1]: Finished systemd-update-utmp-runlevel.service. Sep 6 00:04:39.418955 systemd[1]: Startup finished in 1.228s (kernel) + 9.561s (initrd) + 12.251s (userspace) = 23.041s. Sep 6 00:04:39.446553 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [OfflineService] [EngineProcessor] Initial processing Sep 6 00:04:39.544265 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [OfflineService] Starting message polling Sep 6 00:04:39.642165 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [OfflineService] Starting send replies to MDS Sep 6 00:04:39.740297 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [LongRunningPluginsManager] starting long running plugin manager Sep 6 00:04:39.838472 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [MessageGatewayService] listening reply. Sep 6 00:04:39.936958 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [LongRunningPluginsManager] there aren't any long running plugin to execute Sep 6 00:04:40.035728 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [LongRunningPluginsManager] There are no long running plugins currently getting executed - skipping their healthcheck Sep 6 00:04:40.134518 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [StartupProcessor] Executing startup processor tasks Sep 6 00:04:40.233604 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [StartupProcessor] Write to serial port: Amazon SSM Agent v2.3.1319.0 is running Sep 6 00:04:40.332882 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [StartupProcessor] Write to serial port: OsProductName: Flatcar Container Linux by Kinvolk Sep 6 00:04:40.432335 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [StartupProcessor] Write to serial port: OsVersion: 3510.3.8 Sep 6 00:04:40.531973 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [MessageGatewayService] Opening websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-0eadc2bb077e63af9?role=subscribe&stream=input Sep 6 00:04:40.632085 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [MessageGatewayService] Successfully opened websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-0eadc2bb077e63af9?role=subscribe&stream=input Sep 6 00:04:40.664855 kubelet[1852]: E0906 00:04:40.664730 1852 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 00:04:40.668958 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 00:04:40.669353 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 00:04:40.669802 systemd[1]: kubelet.service: Consumed 1.656s CPU time. Sep 6 00:04:40.732072 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [MessageGatewayService] Starting receiving message from control channel Sep 6 00:04:40.832339 amazon-ssm-agent[1640]: 2025-09-06 00:04:37 INFO [MessageGatewayService] [EngineProcessor] Initial processing Sep 6 00:04:44.882469 systemd[1]: Created slice system-sshd.slice. Sep 6 00:04:44.884836 systemd[1]: Started sshd@0-172.31.29.17:22-147.75.109.163:47850.service. Sep 6 00:04:45.133431 sshd[1861]: Accepted publickey for core from 147.75.109.163 port 47850 ssh2: RSA SHA256:CT8P9x8s4J0T70k8+LLVTP4XjE3e1SNW15vyou+QijI Sep 6 00:04:45.139246 sshd[1861]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:04:45.160002 systemd[1]: Created slice user-500.slice. Sep 6 00:04:45.162323 systemd[1]: Starting user-runtime-dir@500.service... Sep 6 00:04:45.168838 systemd-logind[1634]: New session 1 of user core. Sep 6 00:04:45.181526 systemd[1]: Finished user-runtime-dir@500.service. Sep 6 00:04:45.185284 systemd[1]: Starting user@500.service... Sep 6 00:04:45.193004 (systemd)[1864]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:04:45.379946 systemd[1864]: Queued start job for default target default.target. Sep 6 00:04:45.382149 systemd[1864]: Reached target paths.target. Sep 6 00:04:45.382435 systemd[1864]: Reached target sockets.target. Sep 6 00:04:45.382617 systemd[1864]: Reached target timers.target. Sep 6 00:04:45.382766 systemd[1864]: Reached target basic.target. Sep 6 00:04:45.383057 systemd[1]: Started user@500.service. Sep 6 00:04:45.384823 systemd[1]: Started session-1.scope. Sep 6 00:04:45.386596 systemd[1864]: Reached target default.target. Sep 6 00:04:45.386704 systemd[1864]: Startup finished in 182ms. Sep 6 00:04:45.533915 systemd[1]: Started sshd@1-172.31.29.17:22-147.75.109.163:47856.service. Sep 6 00:04:45.719315 sshd[1873]: Accepted publickey for core from 147.75.109.163 port 47856 ssh2: RSA SHA256:CT8P9x8s4J0T70k8+LLVTP4XjE3e1SNW15vyou+QijI Sep 6 00:04:45.723904 sshd[1873]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:04:45.735334 systemd-logind[1634]: New session 2 of user core. Sep 6 00:04:45.737698 systemd[1]: Started session-2.scope. Sep 6 00:04:45.872398 sshd[1873]: pam_unix(sshd:session): session closed for user core Sep 6 00:04:45.878441 systemd[1]: sshd@1-172.31.29.17:22-147.75.109.163:47856.service: Deactivated successfully. Sep 6 00:04:45.879639 systemd-logind[1634]: Session 2 logged out. Waiting for processes to exit. Sep 6 00:04:45.879848 systemd[1]: session-2.scope: Deactivated successfully. Sep 6 00:04:45.881907 systemd-logind[1634]: Removed session 2. Sep 6 00:04:45.900529 systemd[1]: Started sshd@2-172.31.29.17:22-147.75.109.163:47860.service. Sep 6 00:04:46.078350 sshd[1879]: Accepted publickey for core from 147.75.109.163 port 47860 ssh2: RSA SHA256:CT8P9x8s4J0T70k8+LLVTP4XjE3e1SNW15vyou+QijI Sep 6 00:04:46.081491 sshd[1879]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:04:46.089270 systemd-logind[1634]: New session 3 of user core. Sep 6 00:04:46.090075 systemd[1]: Started session-3.scope. Sep 6 00:04:46.211900 sshd[1879]: pam_unix(sshd:session): session closed for user core Sep 6 00:04:46.216395 systemd[1]: session-3.scope: Deactivated successfully. Sep 6 00:04:46.217721 systemd-logind[1634]: Session 3 logged out. Waiting for processes to exit. Sep 6 00:04:46.218007 systemd[1]: sshd@2-172.31.29.17:22-147.75.109.163:47860.service: Deactivated successfully. Sep 6 00:04:46.220676 systemd-logind[1634]: Removed session 3. Sep 6 00:04:46.242167 systemd[1]: Started sshd@3-172.31.29.17:22-147.75.109.163:47868.service. Sep 6 00:04:46.417725 sshd[1885]: Accepted publickey for core from 147.75.109.163 port 47868 ssh2: RSA SHA256:CT8P9x8s4J0T70k8+LLVTP4XjE3e1SNW15vyou+QijI Sep 6 00:04:46.420726 sshd[1885]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:04:46.428872 systemd[1]: Started session-4.scope. Sep 6 00:04:46.429838 systemd-logind[1634]: New session 4 of user core. Sep 6 00:04:46.560385 sshd[1885]: pam_unix(sshd:session): session closed for user core Sep 6 00:04:46.566371 systemd[1]: sshd@3-172.31.29.17:22-147.75.109.163:47868.service: Deactivated successfully. Sep 6 00:04:46.567605 systemd[1]: session-4.scope: Deactivated successfully. Sep 6 00:04:46.569884 systemd-logind[1634]: Session 4 logged out. Waiting for processes to exit. Sep 6 00:04:46.572569 systemd-logind[1634]: Removed session 4. Sep 6 00:04:46.588007 systemd[1]: Started sshd@4-172.31.29.17:22-147.75.109.163:47880.service. Sep 6 00:04:46.759932 sshd[1891]: Accepted publickey for core from 147.75.109.163 port 47880 ssh2: RSA SHA256:CT8P9x8s4J0T70k8+LLVTP4XjE3e1SNW15vyou+QijI Sep 6 00:04:46.762886 sshd[1891]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:04:46.769415 systemd-logind[1634]: New session 5 of user core. Sep 6 00:04:46.771272 systemd[1]: Started session-5.scope. Sep 6 00:04:46.926988 sudo[1894]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Sep 6 00:04:46.927618 sudo[1894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 6 00:04:46.950450 dbus-daemon[1627]: avc: received setenforce notice (enforcing=1) Sep 6 00:04:46.953183 sudo[1894]: pam_unix(sudo:session): session closed for user root Sep 6 00:04:46.977735 sshd[1891]: pam_unix(sshd:session): session closed for user core Sep 6 00:04:46.982588 systemd[1]: session-5.scope: Deactivated successfully. Sep 6 00:04:46.983722 systemd[1]: sshd@4-172.31.29.17:22-147.75.109.163:47880.service: Deactivated successfully. Sep 6 00:04:46.985493 systemd-logind[1634]: Session 5 logged out. Waiting for processes to exit. Sep 6 00:04:46.988506 systemd-logind[1634]: Removed session 5. Sep 6 00:04:47.007478 systemd[1]: Started sshd@5-172.31.29.17:22-147.75.109.163:47888.service. Sep 6 00:04:47.180490 sshd[1898]: Accepted publickey for core from 147.75.109.163 port 47888 ssh2: RSA SHA256:CT8P9x8s4J0T70k8+LLVTP4XjE3e1SNW15vyou+QijI Sep 6 00:04:47.183584 sshd[1898]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:04:47.191780 systemd[1]: Started session-6.scope. Sep 6 00:04:47.192754 systemd-logind[1634]: New session 6 of user core. Sep 6 00:04:47.298439 sudo[1902]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Sep 6 00:04:47.299461 sudo[1902]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 6 00:04:47.304884 sudo[1902]: pam_unix(sudo:session): session closed for user root Sep 6 00:04:47.314204 sudo[1901]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Sep 6 00:04:47.315274 sudo[1901]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 6 00:04:47.333372 systemd[1]: Stopping audit-rules.service... Sep 6 00:04:47.335000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 6 00:04:47.338475 kernel: kauditd_printk_skb: 96 callbacks suppressed Sep 6 00:04:47.338570 kernel: audit: type=1305 audit(1757117087.335:212): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 6 00:04:47.338947 auditctl[1905]: No rules Sep 6 00:04:47.339897 systemd[1]: audit-rules.service: Deactivated successfully. Sep 6 00:04:47.340276 systemd[1]: Stopped audit-rules.service. Sep 6 00:04:47.345288 systemd[1]: Starting audit-rules.service... Sep 6 00:04:47.335000 audit[1905]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffffdd28190 a2=420 a3=0 items=0 ppid=1 pid=1905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:47.335000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Sep 6 00:04:47.364435 kernel: audit: type=1300 audit(1757117087.335:212): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffffdd28190 a2=420 a3=0 items=0 ppid=1 pid=1905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:47.364544 kernel: audit: type=1327 audit(1757117087.335:212): proctitle=2F7362696E2F617564697463746C002D44 Sep 6 00:04:47.337000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:47.376140 kernel: audit: type=1131 audit(1757117087.337:213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:47.390589 augenrules[1922]: No rules Sep 6 00:04:47.392090 systemd[1]: Finished audit-rules.service. Sep 6 00:04:47.391000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:47.393947 sudo[1901]: pam_unix(sudo:session): session closed for user root Sep 6 00:04:47.392000 audit[1901]: USER_END pid=1901 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:04:47.410316 kernel: audit: type=1130 audit(1757117087.391:214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:47.410385 kernel: audit: type=1106 audit(1757117087.392:215): pid=1901 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:04:47.410427 kernel: audit: type=1104 audit(1757117087.392:216): pid=1901 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:04:47.392000 audit[1901]: CRED_DISP pid=1901 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:04:47.422499 sshd[1898]: pam_unix(sshd:session): session closed for user core Sep 6 00:04:47.423000 audit[1898]: USER_END pid=1898 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:04:47.426715 systemd[1]: session-6.scope: Deactivated successfully. Sep 6 00:04:47.427845 systemd[1]: sshd@5-172.31.29.17:22-147.75.109.163:47888.service: Deactivated successfully. Sep 6 00:04:47.431712 systemd-logind[1634]: Session 6 logged out. Waiting for processes to exit. Sep 6 00:04:47.435159 systemd-logind[1634]: Removed session 6. Sep 6 00:04:47.423000 audit[1898]: CRED_DISP pid=1898 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:04:47.454904 kernel: audit: type=1106 audit(1757117087.423:217): pid=1898 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:04:47.455011 kernel: audit: type=1104 audit(1757117087.423:218): pid=1898 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:04:47.455078 kernel: audit: type=1131 audit(1757117087.423:219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.29.17:22-147.75.109.163:47888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:47.423000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.29.17:22-147.75.109.163:47888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:47.456096 systemd[1]: Started sshd@6-172.31.29.17:22-147.75.109.163:47894.service. Sep 6 00:04:47.455000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.29.17:22-147.75.109.163:47894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:47.627000 audit[1928]: USER_ACCT pid=1928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:04:47.628965 sshd[1928]: Accepted publickey for core from 147.75.109.163 port 47894 ssh2: RSA SHA256:CT8P9x8s4J0T70k8+LLVTP4XjE3e1SNW15vyou+QijI Sep 6 00:04:47.629000 audit[1928]: CRED_ACQ pid=1928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:04:47.629000 audit[1928]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd95f8df0 a2=3 a3=1 items=0 ppid=1 pid=1928 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:47.629000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:04:47.631992 sshd[1928]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:04:47.640469 systemd[1]: Started session-7.scope. Sep 6 00:04:47.641441 systemd-logind[1634]: New session 7 of user core. Sep 6 00:04:47.649000 audit[1928]: USER_START pid=1928 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:04:47.652000 audit[1930]: CRED_ACQ pid=1930 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:04:47.744000 audit[1931]: USER_ACCT pid=1931 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:04:47.746501 sudo[1931]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Sep 6 00:04:47.746000 audit[1931]: CRED_REFR pid=1931 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:04:47.747632 sudo[1931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 6 00:04:47.749000 audit[1931]: USER_START pid=1931 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:04:47.829773 systemd[1]: Starting docker.service... Sep 6 00:04:47.950862 env[1941]: time="2025-09-06T00:04:47.950771565Z" level=info msg="Starting up" Sep 6 00:04:47.953820 env[1941]: time="2025-09-06T00:04:47.953772263Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 6 00:04:47.954012 env[1941]: time="2025-09-06T00:04:47.953982292Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 6 00:04:47.954259 env[1941]: time="2025-09-06T00:04:47.954209925Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 6 00:04:47.954372 env[1941]: time="2025-09-06T00:04:47.954344581Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 6 00:04:47.958949 env[1941]: time="2025-09-06T00:04:47.958880089Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 6 00:04:47.958949 env[1941]: time="2025-09-06T00:04:47.958924221Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 6 00:04:47.959155 env[1941]: time="2025-09-06T00:04:47.958960271Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 6 00:04:47.959155 env[1941]: time="2025-09-06T00:04:47.958986503Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 6 00:04:47.971325 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport3534746668-merged.mount: Deactivated successfully. Sep 6 00:04:48.003401 env[1941]: time="2025-09-06T00:04:48.003265348Z" level=info msg="Loading containers: start." Sep 6 00:04:48.149000 audit[1972]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1972 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:04:48.149000 audit[1972]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffcdc68e70 a2=0 a3=1 items=0 ppid=1941 pid=1972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:48.149000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Sep 6 00:04:48.154000 audit[1974]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1974 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:04:48.154000 audit[1974]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=fffff1328f40 a2=0 a3=1 items=0 ppid=1941 pid=1974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:48.154000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Sep 6 00:04:48.159000 audit[1976]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1976 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:04:48.159000 audit[1976]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffc2450c20 a2=0 a3=1 items=0 ppid=1941 pid=1976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:48.159000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 6 00:04:48.163000 audit[1978]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1978 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:04:48.163000 audit[1978]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffdb229a80 a2=0 a3=1 items=0 ppid=1941 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:48.163000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 6 00:04:48.183000 audit[1980]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1980 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:04:48.183000 audit[1980]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd596a430 a2=0 a3=1 items=0 ppid=1941 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:48.183000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Sep 6 00:04:48.213000 audit[1985]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1985 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:04:48.213000 audit[1985]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffffd015800 a2=0 a3=1 items=0 ppid=1941 pid=1985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:48.213000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Sep 6 00:04:48.224000 audit[1987]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1987 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:04:48.224000 audit[1987]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd7ac8680 a2=0 a3=1 items=0 ppid=1941 pid=1987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:48.224000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Sep 6 00:04:48.228000 audit[1989]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1989 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:04:48.228000 audit[1989]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffd4e29660 a2=0 a3=1 items=0 ppid=1941 pid=1989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:48.228000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Sep 6 00:04:48.231000 audit[1991]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1991 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:04:48.231000 audit[1991]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffe5b225e0 a2=0 a3=1 items=0 ppid=1941 pid=1991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:48.231000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 6 00:04:48.247000 audit[1995]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1995 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:04:48.247000 audit[1995]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffff9676db0 a2=0 a3=1 items=0 ppid=1941 pid=1995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:48.247000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 6 00:04:48.256000 audit[1996]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1996 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:04:48.256000 audit[1996]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffdfe25c30 a2=0 a3=1 items=0 ppid=1941 pid=1996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:48.256000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 6 00:04:48.286179 kernel: Initializing XFRM netlink socket Sep 6 00:04:48.343544 env[1941]: time="2025-09-06T00:04:48.343497449Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Sep 6 00:04:48.346443 (udev-worker)[1952]: Network interface NamePolicy= disabled on kernel command line. Sep 6 00:04:48.397000 audit[2004]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=2004 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:04:48.397000 audit[2004]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffc246e030 a2=0 a3=1 items=0 ppid=1941 pid=2004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:48.397000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Sep 6 00:04:48.411000 audit[2007]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=2007 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:04:48.411000 audit[2007]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffc51f2e60 a2=0 a3=1 items=0 ppid=1941 pid=2007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:48.411000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Sep 6 00:04:48.420000 audit[2010]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=2010 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:04:48.420000 audit[2010]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffd1f73630 a2=0 a3=1 items=0 ppid=1941 pid=2010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:48.420000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Sep 6 00:04:48.424000 audit[2012]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=2012 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:04:48.424000 audit[2012]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffd00c3230 a2=0 a3=1 items=0 ppid=1941 pid=2012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:48.424000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Sep 6 00:04:48.428000 audit[2014]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=2014 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:04:48.428000 audit[2014]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffff607f20 a2=0 a3=1 items=0 ppid=1941 pid=2014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:48.428000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Sep 6 00:04:48.432000 audit[2016]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=2016 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:04:48.432000 audit[2016]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=fffff8900d00 a2=0 a3=1 items=0 ppid=1941 pid=2016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:48.432000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Sep 6 00:04:48.435000 audit[2018]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=2018 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:04:48.435000 audit[2018]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffc542f6c0 a2=0 a3=1 items=0 ppid=1941 pid=2018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:48.435000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Sep 6 00:04:48.456000 audit[2021]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=2021 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:04:48.456000 audit[2021]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffe3118a30 a2=0 a3=1 items=0 ppid=1941 pid=2021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:48.456000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Sep 6 00:04:48.460000 audit[2023]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=2023 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:04:48.460000 audit[2023]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffe9f46630 a2=0 a3=1 items=0 ppid=1941 pid=2023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:48.460000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 6 00:04:48.464000 audit[2025]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=2025 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:04:48.464000 audit[2025]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffd38a15f0 a2=0 a3=1 items=0 ppid=1941 pid=2025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:48.464000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 6 00:04:48.468000 audit[2027]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=2027 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:04:48.468000 audit[2027]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffca50b270 a2=0 a3=1 items=0 ppid=1941 pid=2027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:48.468000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Sep 6 00:04:48.470720 systemd-networkd[1361]: docker0: Link UP Sep 6 00:04:48.485000 audit[2031]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2031 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:04:48.485000 audit[2031]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffec042bd0 a2=0 a3=1 items=0 ppid=1941 pid=2031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:48.485000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 6 00:04:48.489000 audit[2032]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2032 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:04:48.489000 audit[2032]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffee915f20 a2=0 a3=1 items=0 ppid=1941 pid=2032 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:04:48.489000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 6 00:04:48.491204 env[1941]: time="2025-09-06T00:04:48.491164101Z" level=info msg="Loading containers: done." Sep 6 00:04:48.522855 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck3761408034-merged.mount: Deactivated successfully. Sep 6 00:04:48.540743 env[1941]: time="2025-09-06T00:04:48.540646477Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Sep 6 00:04:48.541153 env[1941]: time="2025-09-06T00:04:48.541067804Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Sep 6 00:04:48.541441 env[1941]: time="2025-09-06T00:04:48.541394022Z" level=info msg="Daemon has completed initialization" Sep 6 00:04:48.578433 systemd[1]: Started docker.service. Sep 6 00:04:48.577000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:48.593684 env[1941]: time="2025-09-06T00:04:48.593563602Z" level=info msg="API listen on /run/docker.sock" Sep 6 00:04:50.000777 env[1646]: time="2025-09-06T00:04:50.000701049Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.4\"" Sep 6 00:04:50.608436 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1146594264.mount: Deactivated successfully. Sep 6 00:04:50.920682 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Sep 6 00:04:50.919000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:50.920000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:50.921041 systemd[1]: Stopped kubelet.service. Sep 6 00:04:50.921187 systemd[1]: kubelet.service: Consumed 1.656s CPU time. Sep 6 00:04:50.924217 systemd[1]: Starting kubelet.service... Sep 6 00:04:51.391167 systemd[1]: Started kubelet.service. Sep 6 00:04:51.390000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:04:51.473666 kubelet[2070]: E0906 00:04:51.473611 2070 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 00:04:51.481775 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 00:04:51.481000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 00:04:51.482120 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 00:04:52.645309 env[1646]: time="2025-09-06T00:04:52.645237304Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:04:52.648485 env[1646]: time="2025-09-06T00:04:52.648410291Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8dd08b7ae4433dd43482755f08ee0afd6de00c6ece25a8dc5814ebb4b7978e98,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:04:52.652566 env[1646]: time="2025-09-06T00:04:52.652497733Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:04:52.658048 env[1646]: time="2025-09-06T00:04:52.657993494Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.4\" returns image reference \"sha256:8dd08b7ae4433dd43482755f08ee0afd6de00c6ece25a8dc5814ebb4b7978e98\"" Sep 6 00:04:52.658702 env[1646]: time="2025-09-06T00:04:52.658645954Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:0d441d0d347145b3f02f20cb313239cdae86067643d7f70803fab8bac2d28876,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:04:52.660758 env[1646]: time="2025-09-06T00:04:52.660692549Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.4\"" Sep 6 00:04:54.658896 env[1646]: time="2025-09-06T00:04:54.658835551Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:04:54.661408 env[1646]: time="2025-09-06T00:04:54.661357601Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4e90c11ce4b770c38b26b3401b39c25e9871474a71ecb5eaea72082e21ba587d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:04:54.664850 env[1646]: time="2025-09-06T00:04:54.664800393Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:04:54.668251 env[1646]: time="2025-09-06T00:04:54.668184347Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:bd22c2af2f30a8f818568b4d5fe131098fdd38267e9e07872cfc33e8f5876bc3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:04:54.670087 env[1646]: time="2025-09-06T00:04:54.670038736Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.4\" returns image reference \"sha256:4e90c11ce4b770c38b26b3401b39c25e9871474a71ecb5eaea72082e21ba587d\"" Sep 6 00:04:54.670928 env[1646]: time="2025-09-06T00:04:54.670883797Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.4\"" Sep 6 00:04:56.289104 env[1646]: time="2025-09-06T00:04:56.289016135Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:04:56.294412 env[1646]: time="2025-09-06T00:04:56.294346913Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:10c245abf58045f1a856bebca4ed8e0abfabe4c0256d5a3f0c475fed70c8ce59,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:04:56.298825 env[1646]: time="2025-09-06T00:04:56.298760993Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:04:56.302944 env[1646]: time="2025-09-06T00:04:56.302890225Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:71533e5a960e2955a54164905e92dac516ec874a23e0bf31304db82650101a4a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:04:56.304487 env[1646]: time="2025-09-06T00:04:56.304441559Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.4\" returns image reference \"sha256:10c245abf58045f1a856bebca4ed8e0abfabe4c0256d5a3f0c475fed70c8ce59\"" Sep 6 00:04:56.305478 env[1646]: time="2025-09-06T00:04:56.305431624Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.4\"" Sep 6 00:04:57.778770 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3865506473.mount: Deactivated successfully. Sep 6 00:04:58.699181 env[1646]: time="2025-09-06T00:04:58.699120201Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:04:58.701214 env[1646]: time="2025-09-06T00:04:58.701167710Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e19c0cda155dad39120317830ddb8b2bc22070f2c6a97973e96fb09ef504ee64,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:04:58.703230 env[1646]: time="2025-09-06T00:04:58.703184868Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:04:58.706146 env[1646]: time="2025-09-06T00:04:58.706050252Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:bb04e9247da3aaeb96406b4d530a79fc865695b6807353dd1a28871df0d7f837,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:04:58.707283 env[1646]: time="2025-09-06T00:04:58.707215818Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.4\" returns image reference \"sha256:e19c0cda155dad39120317830ddb8b2bc22070f2c6a97973e96fb09ef504ee64\"" Sep 6 00:04:58.709058 env[1646]: time="2025-09-06T00:04:58.708982793Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\"" Sep 6 00:04:59.312032 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount731364119.mount: Deactivated successfully. Sep 6 00:05:00.858125 env[1646]: time="2025-09-06T00:05:00.858037351Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:05:00.860920 env[1646]: time="2025-09-06T00:05:00.860857535Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f72407be9e08c3a1b29a88318cbfee87b9f2da489f84015a5090b1e386e4dbc1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:05:00.865615 env[1646]: time="2025-09-06T00:05:00.865555201Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:05:00.871419 env[1646]: time="2025-09-06T00:05:00.871334195Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:40384aa1f5ea6bfdc77997d243aec73da05f27aed0c5e9d65bfa98933c519d97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:05:00.880208 env[1646]: time="2025-09-06T00:05:00.880133616Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\" returns image reference \"sha256:f72407be9e08c3a1b29a88318cbfee87b9f2da489f84015a5090b1e386e4dbc1\"" Sep 6 00:05:00.880856 env[1646]: time="2025-09-06T00:05:00.880800237Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Sep 6 00:05:01.356776 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1992669187.mount: Deactivated successfully. Sep 6 00:05:01.365984 env[1646]: time="2025-09-06T00:05:01.365908916Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:05:01.369533 env[1646]: time="2025-09-06T00:05:01.369470968Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:05:01.371999 env[1646]: time="2025-09-06T00:05:01.371941823Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:05:01.374613 env[1646]: time="2025-09-06T00:05:01.374562693Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:05:01.375798 env[1646]: time="2025-09-06T00:05:01.375756491Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Sep 6 00:05:01.376671 env[1646]: time="2025-09-06T00:05:01.376624506Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\"" Sep 6 00:05:01.743985 kernel: kauditd_printk_skb: 88 callbacks suppressed Sep 6 00:05:01.744147 kernel: audit: type=1130 audit(1757117101.732:258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:05:01.732000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:05:01.733426 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Sep 6 00:05:01.733748 systemd[1]: Stopped kubelet.service. Sep 6 00:05:01.736252 systemd[1]: Starting kubelet.service... Sep 6 00:05:01.752821 kernel: audit: type=1131 audit(1757117101.732:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:05:01.732000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:05:01.977854 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2001280295.mount: Deactivated successfully. Sep 6 00:05:02.127017 systemd[1]: Started kubelet.service. Sep 6 00:05:02.126000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:05:02.138149 kernel: audit: type=1130 audit(1757117102.126:260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:05:02.238385 kubelet[2079]: E0906 00:05:02.238237 2079 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 00:05:02.245620 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 00:05:02.245941 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 00:05:02.246000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 00:05:02.255145 kernel: audit: type=1131 audit(1757117102.246:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 00:05:06.021159 env[1646]: time="2025-09-06T00:05:06.021082196Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:05:06.025368 env[1646]: time="2025-09-06T00:05:06.025316363Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:31747a36ce712f0bf61b50a0c06e99768522025e7b8daedd6dc63d1ae84837b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:05:06.029244 env[1646]: time="2025-09-06T00:05:06.029195465Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:05:06.034217 env[1646]: time="2025-09-06T00:05:06.034147235Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:d58c035df557080a27387d687092e3fc2b64c6d0e3162dc51453a115f847d121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:05:06.034956 env[1646]: time="2025-09-06T00:05:06.034879768Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\" returns image reference \"sha256:31747a36ce712f0bf61b50a0c06e99768522025e7b8daedd6dc63d1ae84837b5\"" Sep 6 00:05:06.464720 amazon-ssm-agent[1640]: 2025-09-06 00:05:06 INFO [MessagingDeliveryService] [Association] No associations on boot. Requerying for associations after 30 seconds. Sep 6 00:05:07.276000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:05:07.277014 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Sep 6 00:05:07.289385 kernel: audit: type=1131 audit(1757117107.276:262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:05:07.307000 audit: BPF prog-id=46 op=UNLOAD Sep 6 00:05:07.307000 audit: BPF prog-id=45 op=UNLOAD Sep 6 00:05:07.313432 kernel: audit: type=1334 audit(1757117107.307:263): prog-id=46 op=UNLOAD Sep 6 00:05:07.313529 kernel: audit: type=1334 audit(1757117107.307:264): prog-id=45 op=UNLOAD Sep 6 00:05:07.313588 kernel: audit: type=1334 audit(1757117107.307:265): prog-id=44 op=UNLOAD Sep 6 00:05:07.307000 audit: BPF prog-id=44 op=UNLOAD Sep 6 00:05:12.351000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:05:12.352453 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Sep 6 00:05:12.352765 systemd[1]: Stopped kubelet.service. Sep 6 00:05:12.358510 systemd[1]: Starting kubelet.service... Sep 6 00:05:12.351000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:05:12.370958 kernel: audit: type=1130 audit(1757117112.351:266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:05:12.371097 kernel: audit: type=1131 audit(1757117112.351:267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:05:12.742000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:05:12.743554 systemd[1]: Started kubelet.service. Sep 6 00:05:12.754228 kernel: audit: type=1130 audit(1757117112.742:268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:05:12.835565 kubelet[2111]: E0906 00:05:12.835509 2111 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 00:05:12.839000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 00:05:12.839833 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 00:05:12.840172 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 00:05:12.850157 kernel: audit: type=1131 audit(1757117112.839:269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 00:05:14.393717 systemd[1]: Stopped kubelet.service. Sep 6 00:05:14.393000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:05:14.403392 systemd[1]: Starting kubelet.service... Sep 6 00:05:14.396000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:05:14.414770 kernel: audit: type=1130 audit(1757117114.393:270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:05:14.414901 kernel: audit: type=1131 audit(1757117114.396:271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:05:14.469974 systemd[1]: Reloading. Sep 6 00:05:14.665494 /usr/lib/systemd/system-generators/torcx-generator[2146]: time="2025-09-06T00:05:14Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 6 00:05:14.666173 /usr/lib/systemd/system-generators/torcx-generator[2146]: time="2025-09-06T00:05:14Z" level=info msg="torcx already run" Sep 6 00:05:14.853148 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 6 00:05:14.853382 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 6 00:05:14.892022 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 6 00:05:15.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.069794 kernel: audit: type=1400 audit(1757117115.053:272): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.069927 kernel: audit: type=1400 audit(1757117115.059:273): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.069978 kernel: audit: type=1400 audit(1757117115.059:274): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.084729 kernel: audit: type=1400 audit(1757117115.059:275): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.061000 audit: BPF prog-id=49 op=LOAD Sep 6 00:05:15.061000 audit: BPF prog-id=40 op=UNLOAD Sep 6 00:05:15.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.068000 audit: BPF prog-id=50 op=LOAD Sep 6 00:05:15.068000 audit: BPF prog-id=30 op=UNLOAD Sep 6 00:05:15.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.076000 audit: BPF prog-id=51 op=LOAD Sep 6 00:05:15.076000 audit: BPF prog-id=41 op=UNLOAD Sep 6 00:05:15.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.083000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.083000 audit: BPF prog-id=52 op=LOAD Sep 6 00:05:15.083000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.085000 audit: BPF prog-id=53 op=LOAD Sep 6 00:05:15.085000 audit: BPF prog-id=42 op=UNLOAD Sep 6 00:05:15.085000 audit: BPF prog-id=43 op=UNLOAD Sep 6 00:05:15.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.086000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.086000 audit: BPF prog-id=54 op=LOAD Sep 6 00:05:15.086000 audit: BPF prog-id=31 op=UNLOAD Sep 6 00:05:15.086000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.086000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.086000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.086000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.086000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.086000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.086000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.086000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.086000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.086000 audit: BPF prog-id=55 op=LOAD Sep 6 00:05:15.086000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.086000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.086000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.086000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.086000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.086000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.086000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.086000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.086000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.086000 audit: BPF prog-id=56 op=LOAD Sep 6 00:05:15.086000 audit: BPF prog-id=32 op=UNLOAD Sep 6 00:05:15.086000 audit: BPF prog-id=33 op=UNLOAD Sep 6 00:05:15.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.088000 audit: BPF prog-id=57 op=LOAD Sep 6 00:05:15.088000 audit: BPF prog-id=47 op=UNLOAD Sep 6 00:05:15.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.089000 audit: BPF prog-id=58 op=LOAD Sep 6 00:05:15.089000 audit: BPF prog-id=34 op=UNLOAD Sep 6 00:05:15.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.090000 audit: BPF prog-id=59 op=LOAD Sep 6 00:05:15.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.090000 audit: BPF prog-id=60 op=LOAD Sep 6 00:05:15.090000 audit: BPF prog-id=35 op=UNLOAD Sep 6 00:05:15.090000 audit: BPF prog-id=36 op=UNLOAD Sep 6 00:05:15.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.100000 audit: BPF prog-id=61 op=LOAD Sep 6 00:05:15.100000 audit: BPF prog-id=39 op=UNLOAD Sep 6 00:05:15.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.101000 audit: BPF prog-id=62 op=LOAD Sep 6 00:05:15.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:15.101000 audit: BPF prog-id=63 op=LOAD Sep 6 00:05:15.101000 audit: BPF prog-id=37 op=UNLOAD Sep 6 00:05:15.101000 audit: BPF prog-id=38 op=UNLOAD Sep 6 00:05:15.144558 systemd[1]: Started kubelet.service. Sep 6 00:05:15.143000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:05:15.152256 systemd[1]: Stopping kubelet.service... Sep 6 00:05:15.154217 systemd[1]: kubelet.service: Deactivated successfully. Sep 6 00:05:15.154609 systemd[1]: Stopped kubelet.service. Sep 6 00:05:15.153000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:05:15.157943 systemd[1]: Starting kubelet.service... Sep 6 00:05:15.472582 systemd[1]: Started kubelet.service. Sep 6 00:05:15.473000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:05:15.554097 kubelet[2206]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 6 00:05:15.554598 kubelet[2206]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Sep 6 00:05:15.554598 kubelet[2206]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 6 00:05:15.554598 kubelet[2206]: I0906 00:05:15.554246 2206 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 6 00:05:16.243793 kubelet[2206]: I0906 00:05:16.243747 2206 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Sep 6 00:05:16.243989 kubelet[2206]: I0906 00:05:16.243966 2206 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 6 00:05:16.244563 kubelet[2206]: I0906 00:05:16.244534 2206 server.go:956] "Client rotation is on, will bootstrap in background" Sep 6 00:05:16.356975 kubelet[2206]: I0906 00:05:16.356922 2206 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 6 00:05:16.358790 kubelet[2206]: E0906 00:05:16.358731 2206 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://172.31.29.17:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 172.31.29.17:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Sep 6 00:05:16.369633 kubelet[2206]: E0906 00:05:16.369571 2206 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 6 00:05:16.369633 kubelet[2206]: I0906 00:05:16.369628 2206 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 6 00:05:16.377213 kubelet[2206]: I0906 00:05:16.377094 2206 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 6 00:05:16.380003 kubelet[2206]: I0906 00:05:16.379932 2206 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 6 00:05:16.380350 kubelet[2206]: I0906 00:05:16.379997 2206 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-29-17","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 6 00:05:16.380545 kubelet[2206]: I0906 00:05:16.380477 2206 topology_manager.go:138] "Creating topology manager with none policy" Sep 6 00:05:16.380545 kubelet[2206]: I0906 00:05:16.380499 2206 container_manager_linux.go:303] "Creating device plugin manager" Sep 6 00:05:16.380881 kubelet[2206]: I0906 00:05:16.380839 2206 state_mem.go:36] "Initialized new in-memory state store" Sep 6 00:05:16.387761 kubelet[2206]: I0906 00:05:16.387698 2206 kubelet.go:480] "Attempting to sync node with API server" Sep 6 00:05:16.387761 kubelet[2206]: I0906 00:05:16.387745 2206 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 6 00:05:16.387997 kubelet[2206]: I0906 00:05:16.387787 2206 kubelet.go:386] "Adding apiserver pod source" Sep 6 00:05:16.396332 kubelet[2206]: I0906 00:05:16.396290 2206 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 6 00:05:16.400564 kubelet[2206]: E0906 00:05:16.400516 2206 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://172.31.29.17:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-29-17&limit=500&resourceVersion=0\": dial tcp 172.31.29.17:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Sep 6 00:05:16.400907 kubelet[2206]: I0906 00:05:16.400877 2206 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 6 00:05:16.402293 kubelet[2206]: I0906 00:05:16.402256 2206 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Sep 6 00:05:16.402720 kubelet[2206]: W0906 00:05:16.402699 2206 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Sep 6 00:05:16.407614 kubelet[2206]: I0906 00:05:16.407585 2206 watchdog_linux.go:99] "Systemd watchdog is not enabled" Sep 6 00:05:16.407857 kubelet[2206]: I0906 00:05:16.407835 2206 server.go:1289] "Started kubelet" Sep 6 00:05:16.415865 kubelet[2206]: E0906 00:05:16.415792 2206 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://172.31.29.17:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.29.17:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Sep 6 00:05:16.420631 kubelet[2206]: I0906 00:05:16.420572 2206 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Sep 6 00:05:16.427000 audit[2206]: AVC avc: denied { mac_admin } for pid=2206 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:16.427000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 00:05:16.427000 audit[2206]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b2c9c0 a1=4000b68438 a2=4000b2c990 a3=25 items=0 ppid=1 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:16.430030 kubelet[2206]: I0906 00:05:16.420813 2206 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 6 00:05:16.430607 kubelet[2206]: I0906 00:05:16.430579 2206 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 6 00:05:16.427000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 00:05:16.431617 kubelet[2206]: E0906 00:05:16.421619 2206 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://172.31.29.17:6443/api/v1/namespaces/default/events\": dial tcp 172.31.29.17:6443: connect: connection refused" event="&Event{ObjectMeta:{ip-172-31-29-17.186288b5303e8af6 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ip-172-31-29-17,UID:ip-172-31-29-17,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ip-172-31-29-17,},FirstTimestamp:2025-09-06 00:05:16.407778038 +0000 UTC m=+0.925368847,LastTimestamp:2025-09-06 00:05:16.407778038 +0000 UTC m=+0.925368847,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ip-172-31-29-17,}" Sep 6 00:05:16.433525 kubelet[2206]: E0906 00:05:16.433484 2206 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Sep 6 00:05:16.433813 kubelet[2206]: I0906 00:05:16.433509 2206 server.go:317] "Adding debug handlers to kubelet server" Sep 6 00:05:16.434396 kubelet[2206]: I0906 00:05:16.433519 2206 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Sep 6 00:05:16.433000 audit[2206]: AVC avc: denied { mac_admin } for pid=2206 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:16.433000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 00:05:16.433000 audit[2206]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a52060 a1=4000b68588 a2=4000a1e090 a3=25 items=0 ppid=1 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:16.433000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 00:05:16.435212 kubelet[2206]: I0906 00:05:16.435175 2206 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Sep 6 00:05:16.435530 kubelet[2206]: I0906 00:05:16.435504 2206 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 6 00:05:16.436626 kubelet[2206]: I0906 00:05:16.436554 2206 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 6 00:05:16.436863 kubelet[2206]: I0906 00:05:16.436837 2206 volume_manager.go:297] "Starting Kubelet Volume Manager" Sep 6 00:05:16.438169 kubelet[2206]: I0906 00:05:16.437002 2206 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Sep 6 00:05:16.438372 kubelet[2206]: E0906 00:05:16.437052 2206 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-29-17\" not found" Sep 6 00:05:16.438595 kubelet[2206]: I0906 00:05:16.438573 2206 reconciler.go:26] "Reconciler: start to sync state" Sep 6 00:05:16.438950 kubelet[2206]: E0906 00:05:16.438914 2206 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://172.31.29.17:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.29.17:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Sep 6 00:05:16.439270 kubelet[2206]: E0906 00:05:16.439231 2206 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.29.17:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-29-17?timeout=10s\": dial tcp 172.31.29.17:6443: connect: connection refused" interval="200ms" Sep 6 00:05:16.440400 kubelet[2206]: I0906 00:05:16.440367 2206 factory.go:223] Registration of the systemd container factory successfully Sep 6 00:05:16.440973 kubelet[2206]: I0906 00:05:16.440938 2206 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 6 00:05:16.443571 kubelet[2206]: I0906 00:05:16.443537 2206 factory.go:223] Registration of the containerd container factory successfully Sep 6 00:05:16.464000 audit[2224]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2224 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:05:16.464000 audit[2224]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff8ad2af0 a2=0 a3=1 items=0 ppid=2206 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:16.464000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 6 00:05:16.468747 kubelet[2206]: I0906 00:05:16.468712 2206 cpu_manager.go:221] "Starting CPU manager" policy="none" Sep 6 00:05:16.468930 kubelet[2206]: I0906 00:05:16.468906 2206 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Sep 6 00:05:16.469087 kubelet[2206]: I0906 00:05:16.469066 2206 state_mem.go:36] "Initialized new in-memory state store" Sep 6 00:05:16.469000 audit[2225]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2225 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:05:16.469000 audit[2225]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe62eb2f0 a2=0 a3=1 items=0 ppid=2206 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:16.469000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 6 00:05:16.472960 kubelet[2206]: I0906 00:05:16.472928 2206 policy_none.go:49] "None policy: Start" Sep 6 00:05:16.473205 kubelet[2206]: I0906 00:05:16.473182 2206 memory_manager.go:186] "Starting memorymanager" policy="None" Sep 6 00:05:16.473398 kubelet[2206]: I0906 00:05:16.473377 2206 state_mem.go:35] "Initializing new in-memory state store" Sep 6 00:05:16.474000 audit[2227]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2227 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:05:16.474000 audit[2227]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc71d7ca0 a2=0 a3=1 items=0 ppid=2206 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:16.474000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 6 00:05:16.484169 systemd[1]: Created slice kubepods.slice. Sep 6 00:05:16.493000 audit[2229]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2229 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:05:16.495062 systemd[1]: Created slice kubepods-burstable.slice. Sep 6 00:05:16.493000 audit[2229]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc759b8f0 a2=0 a3=1 items=0 ppid=2206 pid=2229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:16.493000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 6 00:05:16.506012 systemd[1]: Created slice kubepods-besteffort.slice. Sep 6 00:05:16.517775 kubelet[2206]: E0906 00:05:16.517728 2206 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Sep 6 00:05:16.516000 audit[2206]: AVC avc: denied { mac_admin } for pid=2206 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:16.516000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 00:05:16.516000 audit[2206]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000dad800 a1=4000de0ea0 a2=4000dad7d0 a3=25 items=0 ppid=1 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:16.516000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 00:05:16.518351 kubelet[2206]: E0906 00:05:16.517855 2206 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Sep 6 00:05:16.518688 kubelet[2206]: I0906 00:05:16.518461 2206 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 6 00:05:16.518688 kubelet[2206]: I0906 00:05:16.518518 2206 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 6 00:05:16.520306 kubelet[2206]: I0906 00:05:16.520272 2206 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 6 00:05:16.522991 kubelet[2206]: E0906 00:05:16.522940 2206 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Sep 6 00:05:16.523236 kubelet[2206]: E0906 00:05:16.523022 2206 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-29-17\" not found" Sep 6 00:05:16.535000 audit[2233]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2233 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:05:16.535000 audit[2233]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=fffff17f9e00 a2=0 a3=1 items=0 ppid=2206 pid=2233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:16.535000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Sep 6 00:05:16.538013 kubelet[2206]: I0906 00:05:16.537969 2206 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Sep 6 00:05:16.538000 audit[2235]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=2235 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:05:16.538000 audit[2235]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffffc56a290 a2=0 a3=1 items=0 ppid=2206 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:16.538000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 6 00:05:16.540618 kubelet[2206]: I0906 00:05:16.540570 2206 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Sep 6 00:05:16.540767 kubelet[2206]: I0906 00:05:16.540747 2206 status_manager.go:230] "Starting to sync pod status with apiserver" Sep 6 00:05:16.541242 kubelet[2206]: I0906 00:05:16.541216 2206 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Sep 6 00:05:16.541430 kubelet[2206]: I0906 00:05:16.541408 2206 kubelet.go:2436] "Starting kubelet main sync loop" Sep 6 00:05:16.541707 kubelet[2206]: E0906 00:05:16.541680 2206 kubelet.go:2460] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Sep 6 00:05:16.543022 kubelet[2206]: E0906 00:05:16.542942 2206 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://172.31.29.17:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.29.17:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Sep 6 00:05:16.542000 audit[2237]: NETFILTER_CFG table=mangle:32 family=10 entries=1 op=nft_register_chain pid=2237 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:05:16.542000 audit[2237]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff4c37dc0 a2=0 a3=1 items=0 ppid=2206 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:16.542000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 6 00:05:16.544000 audit[2236]: NETFILTER_CFG table=mangle:33 family=2 entries=1 op=nft_register_chain pid=2236 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:05:16.544000 audit[2236]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc33b0300 a2=0 a3=1 items=0 ppid=2206 pid=2236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:16.544000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 6 00:05:16.552000 audit[2239]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=2239 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:05:16.554000 audit[2238]: NETFILTER_CFG table=nat:35 family=10 entries=2 op=nft_register_chain pid=2238 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:05:16.554000 audit[2238]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=fffff51cf7e0 a2=0 a3=1 items=0 ppid=2206 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:16.554000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 6 00:05:16.552000 audit[2239]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffc2af340 a2=0 a3=1 items=0 ppid=2206 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:16.552000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 6 00:05:16.558000 audit[2240]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_chain pid=2240 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:05:16.558000 audit[2240]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdbd2aed0 a2=0 a3=1 items=0 ppid=2206 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:16.558000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 6 00:05:16.559000 audit[2241]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=2241 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:05:16.559000 audit[2241]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffdb9ded80 a2=0 a3=1 items=0 ppid=2206 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:16.559000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 6 00:05:16.624302 kubelet[2206]: I0906 00:05:16.624250 2206 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-29-17" Sep 6 00:05:16.625636 kubelet[2206]: E0906 00:05:16.625576 2206 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.29.17:6443/api/v1/nodes\": dial tcp 172.31.29.17:6443: connect: connection refused" node="ip-172-31-29-17" Sep 6 00:05:16.640128 kubelet[2206]: E0906 00:05:16.640052 2206 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.29.17:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-29-17?timeout=10s\": dial tcp 172.31.29.17:6443: connect: connection refused" interval="400ms" Sep 6 00:05:16.659441 systemd[1]: Created slice kubepods-burstable-pod4c351c7e0fee39b6e85b592322926db5.slice. Sep 6 00:05:16.669966 kubelet[2206]: E0906 00:05:16.669713 2206 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-29-17\" not found" node="ip-172-31-29-17" Sep 6 00:05:16.675627 systemd[1]: Created slice kubepods-burstable-pod2881375aba065a8af46c9b9261b99d3f.slice. Sep 6 00:05:16.681332 kubelet[2206]: E0906 00:05:16.681278 2206 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-29-17\" not found" node="ip-172-31-29-17" Sep 6 00:05:16.688438 systemd[1]: Created slice kubepods-burstable-pod7ff4566481299415eb5ce4601e9440ad.slice. Sep 6 00:05:16.691897 kubelet[2206]: E0906 00:05:16.691858 2206 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-29-17\" not found" node="ip-172-31-29-17" Sep 6 00:05:16.739943 kubelet[2206]: I0906 00:05:16.739907 2206 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/4c351c7e0fee39b6e85b592322926db5-ca-certs\") pod \"kube-controller-manager-ip-172-31-29-17\" (UID: \"4c351c7e0fee39b6e85b592322926db5\") " pod="kube-system/kube-controller-manager-ip-172-31-29-17" Sep 6 00:05:16.740198 kubelet[2206]: I0906 00:05:16.740158 2206 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/4c351c7e0fee39b6e85b592322926db5-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-29-17\" (UID: \"4c351c7e0fee39b6e85b592322926db5\") " pod="kube-system/kube-controller-manager-ip-172-31-29-17" Sep 6 00:05:16.740383 kubelet[2206]: I0906 00:05:16.740346 2206 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/4c351c7e0fee39b6e85b592322926db5-kubeconfig\") pod \"kube-controller-manager-ip-172-31-29-17\" (UID: \"4c351c7e0fee39b6e85b592322926db5\") " pod="kube-system/kube-controller-manager-ip-172-31-29-17" Sep 6 00:05:16.740543 kubelet[2206]: I0906 00:05:16.740516 2206 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/7ff4566481299415eb5ce4601e9440ad-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-29-17\" (UID: \"7ff4566481299415eb5ce4601e9440ad\") " pod="kube-system/kube-apiserver-ip-172-31-29-17" Sep 6 00:05:16.740692 kubelet[2206]: I0906 00:05:16.740666 2206 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/4c351c7e0fee39b6e85b592322926db5-k8s-certs\") pod \"kube-controller-manager-ip-172-31-29-17\" (UID: \"4c351c7e0fee39b6e85b592322926db5\") " pod="kube-system/kube-controller-manager-ip-172-31-29-17" Sep 6 00:05:16.740842 kubelet[2206]: I0906 00:05:16.740809 2206 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/4c351c7e0fee39b6e85b592322926db5-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-29-17\" (UID: \"4c351c7e0fee39b6e85b592322926db5\") " pod="kube-system/kube-controller-manager-ip-172-31-29-17" Sep 6 00:05:16.740996 kubelet[2206]: I0906 00:05:16.740970 2206 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/2881375aba065a8af46c9b9261b99d3f-kubeconfig\") pod \"kube-scheduler-ip-172-31-29-17\" (UID: \"2881375aba065a8af46c9b9261b99d3f\") " pod="kube-system/kube-scheduler-ip-172-31-29-17" Sep 6 00:05:16.741157 kubelet[2206]: I0906 00:05:16.741132 2206 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/7ff4566481299415eb5ce4601e9440ad-ca-certs\") pod \"kube-apiserver-ip-172-31-29-17\" (UID: \"7ff4566481299415eb5ce4601e9440ad\") " pod="kube-system/kube-apiserver-ip-172-31-29-17" Sep 6 00:05:16.741323 kubelet[2206]: I0906 00:05:16.741275 2206 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/7ff4566481299415eb5ce4601e9440ad-k8s-certs\") pod \"kube-apiserver-ip-172-31-29-17\" (UID: \"7ff4566481299415eb5ce4601e9440ad\") " pod="kube-system/kube-apiserver-ip-172-31-29-17" Sep 6 00:05:16.829162 kubelet[2206]: I0906 00:05:16.828316 2206 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-29-17" Sep 6 00:05:16.829162 kubelet[2206]: E0906 00:05:16.828847 2206 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.29.17:6443/api/v1/nodes\": dial tcp 172.31.29.17:6443: connect: connection refused" node="ip-172-31-29-17" Sep 6 00:05:16.972527 env[1646]: time="2025-09-06T00:05:16.972425273Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-29-17,Uid:4c351c7e0fee39b6e85b592322926db5,Namespace:kube-system,Attempt:0,}" Sep 6 00:05:16.983891 env[1646]: time="2025-09-06T00:05:16.983793461Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-29-17,Uid:2881375aba065a8af46c9b9261b99d3f,Namespace:kube-system,Attempt:0,}" Sep 6 00:05:16.993796 env[1646]: time="2025-09-06T00:05:16.993715268Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-29-17,Uid:7ff4566481299415eb5ce4601e9440ad,Namespace:kube-system,Attempt:0,}" Sep 6 00:05:17.041282 kubelet[2206]: E0906 00:05:17.041200 2206 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.29.17:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-29-17?timeout=10s\": dial tcp 172.31.29.17:6443: connect: connection refused" interval="800ms" Sep 6 00:05:17.231338 kubelet[2206]: I0906 00:05:17.231279 2206 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-29-17" Sep 6 00:05:17.231869 kubelet[2206]: E0906 00:05:17.231790 2206 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.29.17:6443/api/v1/nodes\": dial tcp 172.31.29.17:6443: connect: connection refused" node="ip-172-31-29-17" Sep 6 00:05:17.280029 kubelet[2206]: E0906 00:05:17.279962 2206 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://172.31.29.17:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-29-17&limit=500&resourceVersion=0\": dial tcp 172.31.29.17:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Sep 6 00:05:17.285861 kubelet[2206]: E0906 00:05:17.285803 2206 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://172.31.29.17:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.29.17:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Sep 6 00:05:17.418467 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount571927176.mount: Deactivated successfully. Sep 6 00:05:17.423793 env[1646]: time="2025-09-06T00:05:17.423739214Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:05:17.431022 env[1646]: time="2025-09-06T00:05:17.430971134Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:05:17.436659 env[1646]: time="2025-09-06T00:05:17.436610309Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:05:17.439059 env[1646]: time="2025-09-06T00:05:17.439011604Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:05:17.443202 env[1646]: time="2025-09-06T00:05:17.442456459Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:05:17.448787 env[1646]: time="2025-09-06T00:05:17.448724185Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:05:17.451216 env[1646]: time="2025-09-06T00:05:17.451103015Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:05:17.456085 env[1646]: time="2025-09-06T00:05:17.456024378Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:05:17.457527 env[1646]: time="2025-09-06T00:05:17.457472536Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:05:17.459060 env[1646]: time="2025-09-06T00:05:17.459009739Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:05:17.461173 env[1646]: time="2025-09-06T00:05:17.461085417Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:05:17.466957 env[1646]: time="2025-09-06T00:05:17.466868302Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:05:17.518850 env[1646]: time="2025-09-06T00:05:17.516355998Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:05:17.518850 env[1646]: time="2025-09-06T00:05:17.516432374Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:05:17.518850 env[1646]: time="2025-09-06T00:05:17.516459162Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:05:17.518850 env[1646]: time="2025-09-06T00:05:17.516900225Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/187cf65246173866a605c90984ecdfa791ccf09f16315b3c0433c3ae8c0fd218 pid=2249 runtime=io.containerd.runc.v2 Sep 6 00:05:17.543578 systemd[1]: Started cri-containerd-187cf65246173866a605c90984ecdfa791ccf09f16315b3c0433c3ae8c0fd218.scope. Sep 6 00:05:17.562217 env[1646]: time="2025-09-06T00:05:17.559955159Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:05:17.562217 env[1646]: time="2025-09-06T00:05:17.560019456Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:05:17.562217 env[1646]: time="2025-09-06T00:05:17.560059391Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:05:17.562217 env[1646]: time="2025-09-06T00:05:17.560328972Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/45935bd9bc2264f9477e097c24f2e7d1d91ed0800e5a9b34f8b8da714a197528 pid=2279 runtime=io.containerd.runc.v2 Sep 6 00:05:17.576835 env[1646]: time="2025-09-06T00:05:17.576723928Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:05:17.577202 env[1646]: time="2025-09-06T00:05:17.577061575Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:05:17.577408 env[1646]: time="2025-09-06T00:05:17.577344135Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:05:17.577932 env[1646]: time="2025-09-06T00:05:17.577841523Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f8dca498f7471a1ffa4a8f7ad4e6c0a828f693d0bb6e96cce745e1a1eb2a0e5d pid=2278 runtime=io.containerd.runc.v2 Sep 6 00:05:17.609048 kernel: kauditd_printk_skb: 219 callbacks suppressed Sep 6 00:05:17.609213 kernel: audit: type=1400 audit(1757117117.597:462): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.619527 kernel: audit: type=1400 audit(1757117117.597:463): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.624671 systemd[1]: Started cri-containerd-f8dca498f7471a1ffa4a8f7ad4e6c0a828f693d0bb6e96cce745e1a1eb2a0e5d.scope. Sep 6 00:05:17.638266 kernel: audit: type=1400 audit(1757117117.597:464): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.643282 systemd[1]: Started cri-containerd-45935bd9bc2264f9477e097c24f2e7d1d91ed0800e5a9b34f8b8da714a197528.scope. Sep 6 00:05:17.653965 kernel: audit: type=1400 audit(1757117117.597:465): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.662433 kernel: audit: type=1400 audit(1757117117.597:466): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.681386 kernel: audit: type=1400 audit(1757117117.597:467): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.681545 kernel: audit: type=1400 audit(1757117117.597:468): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.698036 kernel: audit: type=1400 audit(1757117117.597:469): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.698160 kernel: audit: type=1400 audit(1757117117.597:470): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.706463 kernel: audit: type=1400 audit(1757117117.598:471): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.598000 audit: BPF prog-id=64 op=LOAD Sep 6 00:05:17.622000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.622000 audit[2257]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2249 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:17.622000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138376366363532343631373338363661363035633930393834656364 Sep 6 00:05:17.622000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.622000 audit[2257]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2249 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:17.622000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138376366363532343631373338363661363035633930393834656364 Sep 6 00:05:17.622000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.622000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.622000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.622000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.622000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.622000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.622000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.622000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.622000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.622000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.622000 audit: BPF prog-id=65 op=LOAD Sep 6 00:05:17.622000 audit[2257]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2249 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:17.622000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138376366363532343631373338363661363035633930393834656364 Sep 6 00:05:17.622000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.622000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.622000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.622000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.622000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.622000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.622000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.622000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.622000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.622000 audit: BPF prog-id=66 op=LOAD Sep 6 00:05:17.622000 audit[2257]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2249 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:17.622000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138376366363532343631373338363661363035633930393834656364 Sep 6 00:05:17.622000 audit: BPF prog-id=66 op=UNLOAD Sep 6 00:05:17.622000 audit: BPF prog-id=65 op=UNLOAD Sep 6 00:05:17.622000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.622000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.622000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.622000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.622000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.622000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.622000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.622000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.622000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.622000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.622000 audit: BPF prog-id=67 op=LOAD Sep 6 00:05:17.622000 audit[2257]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2249 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:17.622000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138376366363532343631373338363661363035633930393834656364 Sep 6 00:05:17.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.736000 audit: BPF prog-id=68 op=LOAD Sep 6 00:05:17.739000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.739000 audit[2292]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2279 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:17.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435393335626439626332323634663934373765303937633234663265 Sep 6 00:05:17.739000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.739000 audit[2292]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2279 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:17.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435393335626439626332323634663934373765303937633234663265 Sep 6 00:05:17.739000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.739000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.739000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.739000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.739000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.739000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.739000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.739000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.739000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.739000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.739000 audit: BPF prog-id=69 op=LOAD Sep 6 00:05:17.739000 audit[2292]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2279 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:17.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435393335626439626332323634663934373765303937633234663265 Sep 6 00:05:17.739000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.739000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.739000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.739000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.739000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.739000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.739000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.739000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.739000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.739000 audit: BPF prog-id=70 op=LOAD Sep 6 00:05:17.739000 audit[2292]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2279 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:17.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435393335626439626332323634663934373765303937633234663265 Sep 6 00:05:17.739000 audit: BPF prog-id=70 op=UNLOAD Sep 6 00:05:17.739000 audit: BPF prog-id=69 op=UNLOAD Sep 6 00:05:17.740000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.740000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.740000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.740000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.740000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.740000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.740000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.740000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.740000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.740000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.740000 audit: BPF prog-id=71 op=LOAD Sep 6 00:05:17.740000 audit[2292]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2279 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:17.740000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435393335626439626332323634663934373765303937633234663265 Sep 6 00:05:17.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.744000 audit: BPF prog-id=72 op=LOAD Sep 6 00:05:17.747000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.747000 audit[2310]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2278 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:17.747000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638646361343938663734373161316666613461386637616434653663 Sep 6 00:05:17.747000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.747000 audit[2310]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2278 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:17.747000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638646361343938663734373161316666613461386637616434653663 Sep 6 00:05:17.756000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.756000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.756000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.756000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.756000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.756000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.756000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.756000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.756000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.756000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.756000 audit: BPF prog-id=73 op=LOAD Sep 6 00:05:17.756000 audit[2310]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2278 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:17.756000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638646361343938663734373161316666613461386637616434653663 Sep 6 00:05:17.756000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.756000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.756000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.756000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.756000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.756000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.756000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.756000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.756000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.756000 audit: BPF prog-id=74 op=LOAD Sep 6 00:05:17.756000 audit[2310]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2278 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:17.756000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638646361343938663734373161316666613461386637616434653663 Sep 6 00:05:17.756000 audit: BPF prog-id=74 op=UNLOAD Sep 6 00:05:17.756000 audit: BPF prog-id=73 op=UNLOAD Sep 6 00:05:17.756000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.756000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.756000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.756000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.756000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.756000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.756000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.756000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.756000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.756000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.756000 audit: BPF prog-id=75 op=LOAD Sep 6 00:05:17.756000 audit[2310]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2278 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:17.756000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638646361343938663734373161316666613461386637616434653663 Sep 6 00:05:17.763522 env[1646]: time="2025-09-06T00:05:17.763459686Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-29-17,Uid:4c351c7e0fee39b6e85b592322926db5,Namespace:kube-system,Attempt:0,} returns sandbox id \"187cf65246173866a605c90984ecdfa791ccf09f16315b3c0433c3ae8c0fd218\"" Sep 6 00:05:17.775630 env[1646]: time="2025-09-06T00:05:17.775485192Z" level=info msg="CreateContainer within sandbox \"187cf65246173866a605c90984ecdfa791ccf09f16315b3c0433c3ae8c0fd218\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Sep 6 00:05:17.793442 env[1646]: time="2025-09-06T00:05:17.793376430Z" level=info msg="CreateContainer within sandbox \"187cf65246173866a605c90984ecdfa791ccf09f16315b3c0433c3ae8c0fd218\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"7fdcd676ace470f8934959f3d8bcb121a47c530be7e953dab76136b95db04598\"" Sep 6 00:05:17.795233 env[1646]: time="2025-09-06T00:05:17.795176537Z" level=info msg="StartContainer for \"7fdcd676ace470f8934959f3d8bcb121a47c530be7e953dab76136b95db04598\"" Sep 6 00:05:17.801139 kubelet[2206]: E0906 00:05:17.801016 2206 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://172.31.29.17:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.29.17:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Sep 6 00:05:17.820872 env[1646]: time="2025-09-06T00:05:17.820815155Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-29-17,Uid:7ff4566481299415eb5ce4601e9440ad,Namespace:kube-system,Attempt:0,} returns sandbox id \"45935bd9bc2264f9477e097c24f2e7d1d91ed0800e5a9b34f8b8da714a197528\"" Sep 6 00:05:17.840636 env[1646]: time="2025-09-06T00:05:17.840515530Z" level=info msg="CreateContainer within sandbox \"45935bd9bc2264f9477e097c24f2e7d1d91ed0800e5a9b34f8b8da714a197528\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Sep 6 00:05:17.841909 kubelet[2206]: E0906 00:05:17.841834 2206 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.29.17:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-29-17?timeout=10s\": dial tcp 172.31.29.17:6443: connect: connection refused" interval="1.6s" Sep 6 00:05:17.854673 env[1646]: time="2025-09-06T00:05:17.854613291Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-29-17,Uid:2881375aba065a8af46c9b9261b99d3f,Namespace:kube-system,Attempt:0,} returns sandbox id \"f8dca498f7471a1ffa4a8f7ad4e6c0a828f693d0bb6e96cce745e1a1eb2a0e5d\"" Sep 6 00:05:17.861740 env[1646]: time="2025-09-06T00:05:17.861682818Z" level=info msg="CreateContainer within sandbox \"f8dca498f7471a1ffa4a8f7ad4e6c0a828f693d0bb6e96cce745e1a1eb2a0e5d\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Sep 6 00:05:17.864375 env[1646]: time="2025-09-06T00:05:17.864299314Z" level=info msg="CreateContainer within sandbox \"45935bd9bc2264f9477e097c24f2e7d1d91ed0800e5a9b34f8b8da714a197528\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"eba98e56d0933d3a514413d8f20199dfd03d730ceeef44ba76122b1df92e17ff\"" Sep 6 00:05:17.882750 systemd[1]: Started cri-containerd-7fdcd676ace470f8934959f3d8bcb121a47c530be7e953dab76136b95db04598.scope. Sep 6 00:05:17.889807 env[1646]: time="2025-09-06T00:05:17.889727642Z" level=info msg="StartContainer for \"eba98e56d0933d3a514413d8f20199dfd03d730ceeef44ba76122b1df92e17ff\"" Sep 6 00:05:17.895950 env[1646]: time="2025-09-06T00:05:17.895886333Z" level=info msg="CreateContainer within sandbox \"f8dca498f7471a1ffa4a8f7ad4e6c0a828f693d0bb6e96cce745e1a1eb2a0e5d\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"1702285cf0f47ccabe1e84c16e70d8ca1fefd9aabd7c34f37bf1b9f36ccc3e6d\"" Sep 6 00:05:17.896947 env[1646]: time="2025-09-06T00:05:17.896898915Z" level=info msg="StartContainer for \"1702285cf0f47ccabe1e84c16e70d8ca1fefd9aabd7c34f37bf1b9f36ccc3e6d\"" Sep 6 00:05:17.933000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.933000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.933000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.933000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.933000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.933000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.933000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.933000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.933000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.934000 audit: BPF prog-id=76 op=LOAD Sep 6 00:05:17.935000 audit[2373]: AVC avc: denied { bpf } for pid=2373 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.935000 audit[2373]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2249 pid=2373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:17.935000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766646364363736616365343730663839333439353966336438626362 Sep 6 00:05:17.936000 audit[2373]: AVC avc: denied { perfmon } for pid=2373 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.936000 audit[2373]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2249 pid=2373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:17.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766646364363736616365343730663839333439353966336438626362 Sep 6 00:05:17.936000 audit[2373]: AVC avc: denied { bpf } for pid=2373 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.936000 audit[2373]: AVC avc: denied { bpf } for pid=2373 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.936000 audit[2373]: AVC avc: denied { bpf } for pid=2373 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.936000 audit[2373]: AVC avc: denied { perfmon } for pid=2373 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.936000 audit[2373]: AVC avc: denied { perfmon } for pid=2373 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.936000 audit[2373]: AVC avc: denied { perfmon } for pid=2373 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.936000 audit[2373]: AVC avc: denied { perfmon } for pid=2373 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.936000 audit[2373]: AVC avc: denied { perfmon } for pid=2373 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.936000 audit[2373]: AVC avc: denied { bpf } for pid=2373 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.936000 audit[2373]: AVC avc: denied { bpf } for pid=2373 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.936000 audit: BPF prog-id=77 op=LOAD Sep 6 00:05:17.936000 audit[2373]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2249 pid=2373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:17.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766646364363736616365343730663839333439353966336438626362 Sep 6 00:05:17.938000 audit[2373]: AVC avc: denied { bpf } for pid=2373 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.938000 audit[2373]: AVC avc: denied { bpf } for pid=2373 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.938000 audit[2373]: AVC avc: denied { perfmon } for pid=2373 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.938000 audit[2373]: AVC avc: denied { perfmon } for pid=2373 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.938000 audit[2373]: AVC avc: denied { perfmon } for pid=2373 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.938000 audit[2373]: AVC avc: denied { perfmon } for pid=2373 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.938000 audit[2373]: AVC avc: denied { perfmon } for pid=2373 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.938000 audit[2373]: AVC avc: denied { bpf } for pid=2373 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.938000 audit[2373]: AVC avc: denied { bpf } for pid=2373 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.938000 audit: BPF prog-id=78 op=LOAD Sep 6 00:05:17.938000 audit[2373]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2249 pid=2373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:17.938000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766646364363736616365343730663839333439353966336438626362 Sep 6 00:05:17.939000 audit: BPF prog-id=78 op=UNLOAD Sep 6 00:05:17.939000 audit: BPF prog-id=77 op=UNLOAD Sep 6 00:05:17.939000 audit[2373]: AVC avc: denied { bpf } for pid=2373 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.939000 audit[2373]: AVC avc: denied { bpf } for pid=2373 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.939000 audit[2373]: AVC avc: denied { bpf } for pid=2373 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.939000 audit[2373]: AVC avc: denied { perfmon } for pid=2373 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.939000 audit[2373]: AVC avc: denied { perfmon } for pid=2373 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.939000 audit[2373]: AVC avc: denied { perfmon } for pid=2373 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.939000 audit[2373]: AVC avc: denied { perfmon } for pid=2373 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.939000 audit[2373]: AVC avc: denied { perfmon } for pid=2373 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.939000 audit[2373]: AVC avc: denied { bpf } for pid=2373 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.939000 audit[2373]: AVC avc: denied { bpf } for pid=2373 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:17.939000 audit: BPF prog-id=79 op=LOAD Sep 6 00:05:17.939000 audit[2373]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2249 pid=2373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:17.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766646364363736616365343730663839333439353966336438626362 Sep 6 00:05:17.952536 kubelet[2206]: E0906 00:05:17.952465 2206 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://172.31.29.17:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.29.17:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Sep 6 00:05:17.958544 systemd[1]: Started cri-containerd-eba98e56d0933d3a514413d8f20199dfd03d730ceeef44ba76122b1df92e17ff.scope. Sep 6 00:05:17.972806 systemd[1]: Started cri-containerd-1702285cf0f47ccabe1e84c16e70d8ca1fefd9aabd7c34f37bf1b9f36ccc3e6d.scope. Sep 6 00:05:18.032000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.035000 audit: BPF prog-id=80 op=LOAD Sep 6 00:05:18.039499 kubelet[2206]: I0906 00:05:18.038805 2206 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-29-17" Sep 6 00:05:18.039499 kubelet[2206]: E0906 00:05:18.039436 2206 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.29.17:6443/api/v1/nodes\": dial tcp 172.31.29.17:6443: connect: connection refused" node="ip-172-31-29-17" Sep 6 00:05:18.038000 audit[2409]: AVC avc: denied { bpf } for pid=2409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.038000 audit[2409]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2279 pid=2409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:18.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562613938653536643039333364336135313434313364386632303139 Sep 6 00:05:18.038000 audit[2409]: AVC avc: denied { perfmon } for pid=2409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.038000 audit[2409]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2279 pid=2409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:18.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562613938653536643039333364336135313434313364386632303139 Sep 6 00:05:18.038000 audit[2409]: AVC avc: denied { bpf } for pid=2409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.038000 audit[2409]: AVC avc: denied { bpf } for pid=2409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.038000 audit[2409]: AVC avc: denied { bpf } for pid=2409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.038000 audit[2409]: AVC avc: denied { perfmon } for pid=2409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.038000 audit[2409]: AVC avc: denied { perfmon } for pid=2409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.038000 audit[2409]: AVC avc: denied { perfmon } for pid=2409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.038000 audit[2409]: AVC avc: denied { perfmon } for pid=2409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.038000 audit[2409]: AVC avc: denied { perfmon } for pid=2409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.038000 audit[2409]: AVC avc: denied { bpf } for pid=2409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.038000 audit[2409]: AVC avc: denied { bpf } for pid=2409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.038000 audit: BPF prog-id=81 op=LOAD Sep 6 00:05:18.038000 audit[2409]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2279 pid=2409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:18.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562613938653536643039333364336135313434313364386632303139 Sep 6 00:05:18.038000 audit[2409]: AVC avc: denied { bpf } for pid=2409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.038000 audit[2409]: AVC avc: denied { bpf } for pid=2409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.038000 audit[2409]: AVC avc: denied { perfmon } for pid=2409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.038000 audit[2409]: AVC avc: denied { perfmon } for pid=2409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.038000 audit[2409]: AVC avc: denied { perfmon } for pid=2409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.038000 audit[2409]: AVC avc: denied { perfmon } for pid=2409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.038000 audit[2409]: AVC avc: denied { perfmon } for pid=2409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.038000 audit[2409]: AVC avc: denied { bpf } for pid=2409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.038000 audit[2409]: AVC avc: denied { bpf } for pid=2409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.038000 audit: BPF prog-id=82 op=LOAD Sep 6 00:05:18.038000 audit[2409]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2279 pid=2409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:18.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562613938653536643039333364336135313434313364386632303139 Sep 6 00:05:18.040000 audit: BPF prog-id=82 op=UNLOAD Sep 6 00:05:18.040000 audit: BPF prog-id=81 op=UNLOAD Sep 6 00:05:18.040000 audit[2409]: AVC avc: denied { bpf } for pid=2409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.040000 audit[2409]: AVC avc: denied { bpf } for pid=2409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.040000 audit[2409]: AVC avc: denied { bpf } for pid=2409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.040000 audit[2409]: AVC avc: denied { perfmon } for pid=2409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.040000 audit[2409]: AVC avc: denied { perfmon } for pid=2409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.040000 audit[2409]: AVC avc: denied { perfmon } for pid=2409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.040000 audit[2409]: AVC avc: denied { perfmon } for pid=2409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.040000 audit[2409]: AVC avc: denied { perfmon } for pid=2409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.040000 audit[2409]: AVC avc: denied { bpf } for pid=2409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.040000 audit[2409]: AVC avc: denied { bpf } for pid=2409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.040000 audit: BPF prog-id=83 op=LOAD Sep 6 00:05:18.040000 audit[2409]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2279 pid=2409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:18.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562613938653536643039333364336135313434313364386632303139 Sep 6 00:05:18.052318 env[1646]: time="2025-09-06T00:05:18.052258203Z" level=info msg="StartContainer for \"7fdcd676ace470f8934959f3d8bcb121a47c530be7e953dab76136b95db04598\" returns successfully" Sep 6 00:05:18.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.054000 audit: BPF prog-id=84 op=LOAD Sep 6 00:05:18.057000 audit[2410]: AVC avc: denied { bpf } for pid=2410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.057000 audit[2410]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2278 pid=2410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:18.057000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137303232383563663066343763636162653165383463313665373064 Sep 6 00:05:18.057000 audit[2410]: AVC avc: denied { perfmon } for pid=2410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.057000 audit[2410]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2278 pid=2410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:18.057000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137303232383563663066343763636162653165383463313665373064 Sep 6 00:05:18.057000 audit[2410]: AVC avc: denied { bpf } for pid=2410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.057000 audit[2410]: AVC avc: denied { bpf } for pid=2410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.057000 audit[2410]: AVC avc: denied { bpf } for pid=2410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.057000 audit[2410]: AVC avc: denied { perfmon } for pid=2410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.057000 audit[2410]: AVC avc: denied { perfmon } for pid=2410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.057000 audit[2410]: AVC avc: denied { perfmon } for pid=2410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.057000 audit[2410]: AVC avc: denied { perfmon } for pid=2410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.057000 audit[2410]: AVC avc: denied { perfmon } for pid=2410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.057000 audit[2410]: AVC avc: denied { bpf } for pid=2410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.057000 audit[2410]: AVC avc: denied { bpf } for pid=2410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.057000 audit: BPF prog-id=85 op=LOAD Sep 6 00:05:18.057000 audit[2410]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2278 pid=2410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:18.057000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137303232383563663066343763636162653165383463313665373064 Sep 6 00:05:18.058000 audit[2410]: AVC avc: denied { bpf } for pid=2410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.058000 audit[2410]: AVC avc: denied { bpf } for pid=2410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.058000 audit[2410]: AVC avc: denied { perfmon } for pid=2410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.058000 audit[2410]: AVC avc: denied { perfmon } for pid=2410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.058000 audit[2410]: AVC avc: denied { perfmon } for pid=2410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.058000 audit[2410]: AVC avc: denied { perfmon } for pid=2410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.058000 audit[2410]: AVC avc: denied { perfmon } for pid=2410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.058000 audit[2410]: AVC avc: denied { bpf } for pid=2410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.058000 audit[2410]: AVC avc: denied { bpf } for pid=2410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.058000 audit: BPF prog-id=86 op=LOAD Sep 6 00:05:18.058000 audit[2410]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2278 pid=2410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:18.058000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137303232383563663066343763636162653165383463313665373064 Sep 6 00:05:18.058000 audit: BPF prog-id=86 op=UNLOAD Sep 6 00:05:18.058000 audit: BPF prog-id=85 op=UNLOAD Sep 6 00:05:18.058000 audit[2410]: AVC avc: denied { bpf } for pid=2410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.058000 audit[2410]: AVC avc: denied { bpf } for pid=2410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.058000 audit[2410]: AVC avc: denied { bpf } for pid=2410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.058000 audit[2410]: AVC avc: denied { perfmon } for pid=2410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.058000 audit[2410]: AVC avc: denied { perfmon } for pid=2410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.058000 audit[2410]: AVC avc: denied { perfmon } for pid=2410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.058000 audit[2410]: AVC avc: denied { perfmon } for pid=2410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.058000 audit[2410]: AVC avc: denied { perfmon } for pid=2410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.058000 audit[2410]: AVC avc: denied { bpf } for pid=2410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.058000 audit[2410]: AVC avc: denied { bpf } for pid=2410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:18.058000 audit: BPF prog-id=87 op=LOAD Sep 6 00:05:18.058000 audit[2410]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2278 pid=2410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:18.058000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137303232383563663066343763636162653165383463313665373064 Sep 6 00:05:18.105844 env[1646]: time="2025-09-06T00:05:18.105780662Z" level=info msg="StartContainer for \"eba98e56d0933d3a514413d8f20199dfd03d730ceeef44ba76122b1df92e17ff\" returns successfully" Sep 6 00:05:18.147712 env[1646]: time="2025-09-06T00:05:18.147649821Z" level=info msg="StartContainer for \"1702285cf0f47ccabe1e84c16e70d8ca1fefd9aabd7c34f37bf1b9f36ccc3e6d\" returns successfully" Sep 6 00:05:18.555182 kubelet[2206]: E0906 00:05:18.555132 2206 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-29-17\" not found" node="ip-172-31-29-17" Sep 6 00:05:18.564877 kubelet[2206]: E0906 00:05:18.564820 2206 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-29-17\" not found" node="ip-172-31-29-17" Sep 6 00:05:18.565478 kubelet[2206]: E0906 00:05:18.565423 2206 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-29-17\" not found" node="ip-172-31-29-17" Sep 6 00:05:19.567139 kubelet[2206]: E0906 00:05:19.567059 2206 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-29-17\" not found" node="ip-172-31-29-17" Sep 6 00:05:19.568336 kubelet[2206]: E0906 00:05:19.568287 2206 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-29-17\" not found" node="ip-172-31-29-17" Sep 6 00:05:19.642050 kubelet[2206]: I0906 00:05:19.642003 2206 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-29-17" Sep 6 00:05:20.569500 kubelet[2206]: E0906 00:05:20.569449 2206 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-29-17\" not found" node="ip-172-31-29-17" Sep 6 00:05:20.736033 kubelet[2206]: E0906 00:05:20.735980 2206 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-29-17\" not found" node="ip-172-31-29-17" Sep 6 00:05:21.870000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6764 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:05:21.870000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000b70600 a2=fc6 a3=0 items=0 ppid=2249 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 key=(null) Sep 6 00:05:21.870000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:05:21.876000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:05:21.876000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40006cb5c0 a2=fc6 a3=0 items=0 ppid=2249 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 key=(null) Sep 6 00:05:21.876000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:05:22.382715 update_engine[1635]: I0906 00:05:22.382164 1635 update_attempter.cc:509] Updating boot flags... Sep 6 00:05:25.120244 kernel: kauditd_printk_skb: 338 callbacks suppressed Sep 6 00:05:25.120432 kernel: audit: type=1400 audit(1757117125.107:572): avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6764 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:05:25.107000 audit[2429]: AVC avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6764 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:05:25.109000 audit[2429]: AVC avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:05:25.135041 kernel: audit: type=1400 audit(1757117125.109:573): avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:05:25.109000 audit[2429]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=40087d9b00 a2=fc6 a3=0 items=0 ppid=2279 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 key=(null) Sep 6 00:05:25.154479 kernel: audit: type=1300 audit(1757117125.109:573): arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=40087d9b00 a2=fc6 a3=0 items=0 ppid=2279 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 key=(null) Sep 6 00:05:25.109000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 00:05:25.165250 kernel: audit: type=1327 audit(1757117125.109:573): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 00:05:25.107000 audit[2429]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40037fe750 a2=fc6 a3=0 items=0 ppid=2279 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 key=(null) Sep 6 00:05:25.180531 kernel: audit: type=1300 audit(1757117125.107:572): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40037fe750 a2=fc6 a3=0 items=0 ppid=2279 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 key=(null) Sep 6 00:05:25.107000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 00:05:25.192509 kernel: audit: type=1327 audit(1757117125.107:572): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 00:05:25.216504 kernel: audit: type=1400 audit(1757117125.150:574): avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:05:25.150000 audit[2429]: AVC avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:05:25.235808 kernel: audit: type=1300 audit(1757117125.150:574): arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=400431bec0 a2=fc6 a3=0 items=0 ppid=2279 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 key=(null) Sep 6 00:05:25.150000 audit[2429]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=400431bec0 a2=fc6 a3=0 items=0 ppid=2279 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 key=(null) Sep 6 00:05:25.150000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 00:05:25.253281 kernel: audit: type=1327 audit(1757117125.150:574): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 00:05:25.151000 audit[2429]: AVC avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6764 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:05:25.263155 kernel: audit: type=1400 audit(1757117125.151:575): avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6764 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:05:25.151000 audit[2429]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=4007189680 a2=fc6 a3=0 items=0 ppid=2279 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 key=(null) Sep 6 00:05:25.151000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 00:05:25.269000 audit[2429]: AVC avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=6766 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:05:25.269000 audit[2429]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=81 a1=4006e607e0 a2=fc6 a3=0 items=0 ppid=2279 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 key=(null) Sep 6 00:05:25.269000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 00:05:25.271000 audit[2429]: AVC avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:05:25.271000 audit[2429]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=81 a1=4003c4a760 a2=fc6 a3=0 items=0 ppid=2279 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 key=(null) Sep 6 00:05:25.271000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 00:05:25.420359 kubelet[2206]: I0906 00:05:25.420204 2206 apiserver.go:52] "Watching apiserver" Sep 6 00:05:25.439026 kubelet[2206]: I0906 00:05:25.438967 2206 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Sep 6 00:05:25.447571 kubelet[2206]: E0906 00:05:25.447508 2206 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-29-17\" not found" node="ip-172-31-29-17" Sep 6 00:05:25.542229 kubelet[2206]: E0906 00:05:25.542020 2206 event.go:359] "Server rejected event (will not retry!)" err="namespaces \"default\" not found" event="&Event{ObjectMeta:{ip-172-31-29-17.186288b5303e8af6 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ip-172-31-29-17,UID:ip-172-31-29-17,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ip-172-31-29-17,},FirstTimestamp:2025-09-06 00:05:16.407778038 +0000 UTC m=+0.925368847,LastTimestamp:2025-09-06 00:05:16.407778038 +0000 UTC m=+0.925368847,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ip-172-31-29-17,}" Sep 6 00:05:25.603520 kubelet[2206]: I0906 00:05:25.603440 2206 kubelet_node_status.go:78] "Successfully registered node" node="ip-172-31-29-17" Sep 6 00:05:25.605416 kubelet[2206]: E0906 00:05:25.605288 2206 event.go:359] "Server rejected event (will not retry!)" err="namespaces \"default\" not found" event="&Event{ObjectMeta:{ip-172-31-29-17.186288b531c6671c default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ip-172-31-29-17,UID:ip-172-31-29-17,APIVersion:,ResourceVersion:,FieldPath:,},Reason:InvalidDiskCapacity,Message:invalid capacity 0 on image filesystem,Source:EventSource{Component:kubelet,Host:ip-172-31-29-17,},FirstTimestamp:2025-09-06 00:05:16.433458972 +0000 UTC m=+0.951049793,LastTimestamp:2025-09-06 00:05:16.433458972 +0000 UTC m=+0.951049793,Count:1,Type:Warning,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ip-172-31-29-17,}" Sep 6 00:05:25.638097 kubelet[2206]: I0906 00:05:25.638019 2206 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-29-17" Sep 6 00:05:25.651288 kubelet[2206]: E0906 00:05:25.651237 2206 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-ip-172-31-29-17\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-ip-172-31-29-17" Sep 6 00:05:25.651509 kubelet[2206]: I0906 00:05:25.651486 2206 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ip-172-31-29-17" Sep 6 00:05:25.656743 kubelet[2206]: E0906 00:05:25.656694 2206 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-ip-172-31-29-17\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-ip-172-31-29-17" Sep 6 00:05:25.656992 kubelet[2206]: I0906 00:05:25.656966 2206 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ip-172-31-29-17" Sep 6 00:05:25.660613 kubelet[2206]: E0906 00:05:25.660570 2206 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ip-172-31-29-17\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-ip-172-31-29-17" Sep 6 00:05:26.958869 kubelet[2206]: I0906 00:05:26.958817 2206 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ip-172-31-29-17" Sep 6 00:05:28.009089 systemd[1]: Reloading. Sep 6 00:05:28.165487 /usr/lib/systemd/system-generators/torcx-generator[2691]: time="2025-09-06T00:05:28Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 6 00:05:28.168273 /usr/lib/systemd/system-generators/torcx-generator[2691]: time="2025-09-06T00:05:28Z" level=info msg="torcx already run" Sep 6 00:05:28.362250 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 6 00:05:28.362288 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 6 00:05:28.402711 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 6 00:05:28.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.629000 audit: BPF prog-id=88 op=LOAD Sep 6 00:05:28.630000 audit: BPF prog-id=76 op=UNLOAD Sep 6 00:05:28.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.634000 audit: BPF prog-id=89 op=LOAD Sep 6 00:05:28.634000 audit: BPF prog-id=49 op=UNLOAD Sep 6 00:05:28.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.636000 audit: BPF prog-id=90 op=LOAD Sep 6 00:05:28.636000 audit: BPF prog-id=50 op=UNLOAD Sep 6 00:05:28.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.641000 audit: BPF prog-id=91 op=LOAD Sep 6 00:05:28.641000 audit: BPF prog-id=51 op=UNLOAD Sep 6 00:05:28.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.642000 audit: BPF prog-id=92 op=LOAD Sep 6 00:05:28.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.642000 audit: BPF prog-id=93 op=LOAD Sep 6 00:05:28.642000 audit: BPF prog-id=52 op=UNLOAD Sep 6 00:05:28.642000 audit: BPF prog-id=53 op=UNLOAD Sep 6 00:05:28.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.643000 audit: BPF prog-id=94 op=LOAD Sep 6 00:05:28.643000 audit: BPF prog-id=54 op=UNLOAD Sep 6 00:05:28.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.644000 audit: BPF prog-id=95 op=LOAD Sep 6 00:05:28.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.644000 audit: BPF prog-id=96 op=LOAD Sep 6 00:05:28.644000 audit: BPF prog-id=55 op=UNLOAD Sep 6 00:05:28.644000 audit: BPF prog-id=56 op=UNLOAD Sep 6 00:05:28.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.646000 audit: BPF prog-id=97 op=LOAD Sep 6 00:05:28.646000 audit: BPF prog-id=57 op=UNLOAD Sep 6 00:05:28.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.648000 audit: BPF prog-id=98 op=LOAD Sep 6 00:05:28.648000 audit: BPF prog-id=58 op=UNLOAD Sep 6 00:05:28.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.649000 audit: BPF prog-id=99 op=LOAD Sep 6 00:05:28.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.649000 audit: BPF prog-id=100 op=LOAD Sep 6 00:05:28.649000 audit: BPF prog-id=59 op=UNLOAD Sep 6 00:05:28.649000 audit: BPF prog-id=60 op=UNLOAD Sep 6 00:05:28.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.652000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.652000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.652000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.652000 audit: BPF prog-id=101 op=LOAD Sep 6 00:05:28.652000 audit: BPF prog-id=68 op=UNLOAD Sep 6 00:05:28.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.653000 audit: BPF prog-id=102 op=LOAD Sep 6 00:05:28.653000 audit: BPF prog-id=64 op=UNLOAD Sep 6 00:05:28.661000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.661000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.661000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.661000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.661000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.661000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.661000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.661000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.661000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.661000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.661000 audit: BPF prog-id=103 op=LOAD Sep 6 00:05:28.661000 audit: BPF prog-id=84 op=UNLOAD Sep 6 00:05:28.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.665000 audit: BPF prog-id=104 op=LOAD Sep 6 00:05:28.665000 audit: BPF prog-id=72 op=UNLOAD Sep 6 00:05:28.666000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.666000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.666000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.666000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.666000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.666000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.666000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.666000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.666000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.666000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.666000 audit: BPF prog-id=105 op=LOAD Sep 6 00:05:28.666000 audit: BPF prog-id=80 op=UNLOAD Sep 6 00:05:28.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.668000 audit: BPF prog-id=106 op=LOAD Sep 6 00:05:28.668000 audit: BPF prog-id=61 op=UNLOAD Sep 6 00:05:28.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.669000 audit: BPF prog-id=107 op=LOAD Sep 6 00:05:28.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:28.669000 audit: BPF prog-id=108 op=LOAD Sep 6 00:05:28.669000 audit: BPF prog-id=62 op=UNLOAD Sep 6 00:05:28.669000 audit: BPF prog-id=63 op=UNLOAD Sep 6 00:05:28.721621 systemd[1]: Stopping kubelet.service... Sep 6 00:05:28.746764 systemd[1]: kubelet.service: Deactivated successfully. Sep 6 00:05:28.747191 systemd[1]: Stopped kubelet.service. Sep 6 00:05:28.747283 systemd[1]: kubelet.service: Consumed 1.734s CPU time. Sep 6 00:05:28.746000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:05:28.750884 systemd[1]: Starting kubelet.service... Sep 6 00:05:29.113879 systemd[1]: Started kubelet.service. Sep 6 00:05:29.116000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:05:29.213154 kubelet[2752]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 6 00:05:29.213154 kubelet[2752]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Sep 6 00:05:29.213154 kubelet[2752]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 6 00:05:29.213154 kubelet[2752]: I0906 00:05:29.212751 2752 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 6 00:05:29.233431 kubelet[2752]: I0906 00:05:29.233372 2752 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Sep 6 00:05:29.233431 kubelet[2752]: I0906 00:05:29.233420 2752 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 6 00:05:29.233819 kubelet[2752]: I0906 00:05:29.233784 2752 server.go:956] "Client rotation is on, will bootstrap in background" Sep 6 00:05:29.236589 kubelet[2752]: I0906 00:05:29.236527 2752 certificate_store.go:147] "Loading cert/key pair from a file" filePath="/var/lib/kubelet/pki/kubelet-client-current.pem" Sep 6 00:05:29.242464 kubelet[2752]: I0906 00:05:29.242417 2752 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 6 00:05:29.254255 kubelet[2752]: E0906 00:05:29.254182 2752 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 6 00:05:29.254255 kubelet[2752]: I0906 00:05:29.254249 2752 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 6 00:05:29.261148 kubelet[2752]: I0906 00:05:29.261062 2752 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 6 00:05:29.261703 kubelet[2752]: I0906 00:05:29.261646 2752 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 6 00:05:29.262166 kubelet[2752]: I0906 00:05:29.261704 2752 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-29-17","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 6 00:05:29.262351 kubelet[2752]: I0906 00:05:29.262193 2752 topology_manager.go:138] "Creating topology manager with none policy" Sep 6 00:05:29.262351 kubelet[2752]: I0906 00:05:29.262216 2752 container_manager_linux.go:303] "Creating device plugin manager" Sep 6 00:05:29.262351 kubelet[2752]: I0906 00:05:29.262293 2752 state_mem.go:36] "Initialized new in-memory state store" Sep 6 00:05:29.262617 kubelet[2752]: I0906 00:05:29.262588 2752 kubelet.go:480] "Attempting to sync node with API server" Sep 6 00:05:29.262685 kubelet[2752]: I0906 00:05:29.262623 2752 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 6 00:05:29.262685 kubelet[2752]: I0906 00:05:29.262679 2752 kubelet.go:386] "Adding apiserver pod source" Sep 6 00:05:29.262880 kubelet[2752]: I0906 00:05:29.262708 2752 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 6 00:05:29.272679 kubelet[2752]: I0906 00:05:29.268384 2752 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 6 00:05:29.272679 kubelet[2752]: I0906 00:05:29.269387 2752 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Sep 6 00:05:29.273978 kubelet[2752]: I0906 00:05:29.273809 2752 watchdog_linux.go:99] "Systemd watchdog is not enabled" Sep 6 00:05:29.274250 kubelet[2752]: I0906 00:05:29.274168 2752 server.go:1289] "Started kubelet" Sep 6 00:05:29.282000 audit[2752]: AVC avc: denied { mac_admin } for pid=2752 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:29.282000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 00:05:29.282000 audit[2752]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000bdcd80 a1=4000ba8810 a2=4000bdcd50 a3=25 items=0 ppid=1 pid=2752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:29.282000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 00:05:29.284274 kubelet[2752]: I0906 00:05:29.284220 2752 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Sep 6 00:05:29.283000 audit[2752]: AVC avc: denied { mac_admin } for pid=2752 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:29.283000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 00:05:29.283000 audit[2752]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000027ac0 a1=4000ba8828 a2=4000bdce10 a3=25 items=0 ppid=1 pid=2752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:29.283000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 00:05:29.284806 kubelet[2752]: I0906 00:05:29.284773 2752 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Sep 6 00:05:29.284975 kubelet[2752]: I0906 00:05:29.284952 2752 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 6 00:05:29.299997 kubelet[2752]: I0906 00:05:29.299904 2752 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Sep 6 00:05:29.304157 kubelet[2752]: I0906 00:05:29.301710 2752 server.go:317] "Adding debug handlers to kubelet server" Sep 6 00:05:29.319920 kubelet[2752]: I0906 00:05:29.319835 2752 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 6 00:05:29.320589 kubelet[2752]: I0906 00:05:29.320554 2752 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 6 00:05:29.321172 kubelet[2752]: I0906 00:05:29.321088 2752 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 6 00:05:29.325039 kubelet[2752]: I0906 00:05:29.324965 2752 volume_manager.go:297] "Starting Kubelet Volume Manager" Sep 6 00:05:29.358593 kubelet[2752]: I0906 00:05:29.330809 2752 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Sep 6 00:05:29.358867 kubelet[2752]: E0906 00:05:29.331049 2752 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-29-17\" not found" Sep 6 00:05:29.359295 kubelet[2752]: I0906 00:05:29.359271 2752 reconciler.go:26] "Reconciler: start to sync state" Sep 6 00:05:29.365348 kubelet[2752]: I0906 00:05:29.365210 2752 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Sep 6 00:05:29.367621 kubelet[2752]: I0906 00:05:29.367583 2752 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Sep 6 00:05:29.367798 kubelet[2752]: I0906 00:05:29.367777 2752 status_manager.go:230] "Starting to sync pod status with apiserver" Sep 6 00:05:29.367933 kubelet[2752]: I0906 00:05:29.367910 2752 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Sep 6 00:05:29.368071 kubelet[2752]: I0906 00:05:29.368051 2752 kubelet.go:2436] "Starting kubelet main sync loop" Sep 6 00:05:29.368376 kubelet[2752]: E0906 00:05:29.368344 2752 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Sep 6 00:05:29.391673 kubelet[2752]: I0906 00:05:29.390014 2752 factory.go:223] Registration of the containerd container factory successfully Sep 6 00:05:29.391673 kubelet[2752]: I0906 00:05:29.390061 2752 factory.go:223] Registration of the systemd container factory successfully Sep 6 00:05:29.392277 kubelet[2752]: I0906 00:05:29.392219 2752 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 6 00:05:29.400390 kubelet[2752]: E0906 00:05:29.400349 2752 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Sep 6 00:05:29.469438 kubelet[2752]: E0906 00:05:29.468839 2752 kubelet.go:2460] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Sep 6 00:05:29.518696 kubelet[2752]: I0906 00:05:29.518592 2752 cpu_manager.go:221] "Starting CPU manager" policy="none" Sep 6 00:05:29.518696 kubelet[2752]: I0906 00:05:29.518629 2752 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Sep 6 00:05:29.518696 kubelet[2752]: I0906 00:05:29.518672 2752 state_mem.go:36] "Initialized new in-memory state store" Sep 6 00:05:29.518989 kubelet[2752]: I0906 00:05:29.518907 2752 state_mem.go:88] "Updated default CPUSet" cpuSet="" Sep 6 00:05:29.518989 kubelet[2752]: I0906 00:05:29.518928 2752 state_mem.go:96] "Updated CPUSet assignments" assignments={} Sep 6 00:05:29.518989 kubelet[2752]: I0906 00:05:29.518959 2752 policy_none.go:49] "None policy: Start" Sep 6 00:05:29.519249 kubelet[2752]: I0906 00:05:29.518999 2752 memory_manager.go:186] "Starting memorymanager" policy="None" Sep 6 00:05:29.519249 kubelet[2752]: I0906 00:05:29.519023 2752 state_mem.go:35] "Initializing new in-memory state store" Sep 6 00:05:29.519249 kubelet[2752]: I0906 00:05:29.519225 2752 state_mem.go:75] "Updated machine memory state" Sep 6 00:05:29.527581 kubelet[2752]: E0906 00:05:29.527532 2752 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Sep 6 00:05:29.526000 audit[2752]: AVC avc: denied { mac_admin } for pid=2752 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:29.526000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 00:05:29.526000 audit[2752]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000bddaa0 a1=4000b38f30 a2=4000bdda70 a3=25 items=0 ppid=1 pid=2752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:29.526000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 00:05:29.529928 kubelet[2752]: E0906 00:05:29.529229 2752 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Sep 6 00:05:29.529928 kubelet[2752]: I0906 00:05:29.529512 2752 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 6 00:05:29.529928 kubelet[2752]: I0906 00:05:29.529536 2752 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 6 00:05:29.530316 kubelet[2752]: I0906 00:05:29.530279 2752 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 6 00:05:29.537688 kubelet[2752]: E0906 00:05:29.537651 2752 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Sep 6 00:05:29.652817 kubelet[2752]: I0906 00:05:29.652694 2752 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-29-17" Sep 6 00:05:29.670261 kubelet[2752]: I0906 00:05:29.670226 2752 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-29-17" Sep 6 00:05:29.671200 kubelet[2752]: I0906 00:05:29.671165 2752 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ip-172-31-29-17" Sep 6 00:05:29.671993 kubelet[2752]: I0906 00:05:29.671951 2752 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ip-172-31-29-17" Sep 6 00:05:29.677918 kubelet[2752]: I0906 00:05:29.677878 2752 kubelet_node_status.go:124] "Node was previously registered" node="ip-172-31-29-17" Sep 6 00:05:29.678267 kubelet[2752]: I0906 00:05:29.678247 2752 kubelet_node_status.go:78] "Successfully registered node" node="ip-172-31-29-17" Sep 6 00:05:29.688252 kubelet[2752]: E0906 00:05:29.688149 2752 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ip-172-31-29-17\" already exists" pod="kube-system/kube-controller-manager-ip-172-31-29-17" Sep 6 00:05:29.762347 kubelet[2752]: I0906 00:05:29.762284 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/4c351c7e0fee39b6e85b592322926db5-k8s-certs\") pod \"kube-controller-manager-ip-172-31-29-17\" (UID: \"4c351c7e0fee39b6e85b592322926db5\") " pod="kube-system/kube-controller-manager-ip-172-31-29-17" Sep 6 00:05:29.762630 kubelet[2752]: I0906 00:05:29.762583 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/4c351c7e0fee39b6e85b592322926db5-kubeconfig\") pod \"kube-controller-manager-ip-172-31-29-17\" (UID: \"4c351c7e0fee39b6e85b592322926db5\") " pod="kube-system/kube-controller-manager-ip-172-31-29-17" Sep 6 00:05:29.762818 kubelet[2752]: I0906 00:05:29.762779 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/7ff4566481299415eb5ce4601e9440ad-ca-certs\") pod \"kube-apiserver-ip-172-31-29-17\" (UID: \"7ff4566481299415eb5ce4601e9440ad\") " pod="kube-system/kube-apiserver-ip-172-31-29-17" Sep 6 00:05:29.763069 kubelet[2752]: I0906 00:05:29.762996 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/7ff4566481299415eb5ce4601e9440ad-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-29-17\" (UID: \"7ff4566481299415eb5ce4601e9440ad\") " pod="kube-system/kube-apiserver-ip-172-31-29-17" Sep 6 00:05:29.763301 kubelet[2752]: I0906 00:05:29.763256 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/4c351c7e0fee39b6e85b592322926db5-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-29-17\" (UID: \"4c351c7e0fee39b6e85b592322926db5\") " pod="kube-system/kube-controller-manager-ip-172-31-29-17" Sep 6 00:05:29.763487 kubelet[2752]: I0906 00:05:29.763447 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/4c351c7e0fee39b6e85b592322926db5-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-29-17\" (UID: \"4c351c7e0fee39b6e85b592322926db5\") " pod="kube-system/kube-controller-manager-ip-172-31-29-17" Sep 6 00:05:29.763659 kubelet[2752]: I0906 00:05:29.763622 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/2881375aba065a8af46c9b9261b99d3f-kubeconfig\") pod \"kube-scheduler-ip-172-31-29-17\" (UID: \"2881375aba065a8af46c9b9261b99d3f\") " pod="kube-system/kube-scheduler-ip-172-31-29-17" Sep 6 00:05:29.763854 kubelet[2752]: I0906 00:05:29.763797 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/7ff4566481299415eb5ce4601e9440ad-k8s-certs\") pod \"kube-apiserver-ip-172-31-29-17\" (UID: \"7ff4566481299415eb5ce4601e9440ad\") " pod="kube-system/kube-apiserver-ip-172-31-29-17" Sep 6 00:05:29.764058 kubelet[2752]: I0906 00:05:29.764020 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/4c351c7e0fee39b6e85b592322926db5-ca-certs\") pod \"kube-controller-manager-ip-172-31-29-17\" (UID: \"4c351c7e0fee39b6e85b592322926db5\") " pod="kube-system/kube-controller-manager-ip-172-31-29-17" Sep 6 00:05:29.987000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:05:29.987000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4001418c00 a2=fc6 a3=0 items=0 ppid=2249 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 key=(null) Sep 6 00:05:29.987000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:05:29.991000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:05:29.991000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4001620680 a2=fc6 a3=0 items=0 ppid=2249 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 key=(null) Sep 6 00:05:29.991000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:05:29.992000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:05:29.992000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40016206a0 a2=fc6 a3=0 items=0 ppid=2249 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 key=(null) Sep 6 00:05:29.992000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:05:29.994000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:05:29.994000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4001418da0 a2=fc6 a3=0 items=0 ppid=2249 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 key=(null) Sep 6 00:05:29.994000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:05:30.326009 kubelet[2752]: I0906 00:05:30.325866 2752 apiserver.go:52] "Watching apiserver" Sep 6 00:05:30.359862 kubelet[2752]: I0906 00:05:30.359806 2752 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Sep 6 00:05:30.416322 kubelet[2752]: I0906 00:05:30.416221 2752 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-29-17" podStartSLOduration=1.416199142 podStartE2EDuration="1.416199142s" podCreationTimestamp="2025-09-06 00:05:29 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 00:05:30.38076047 +0000 UTC m=+1.255210788" watchObservedRunningTime="2025-09-06 00:05:30.416199142 +0000 UTC m=+1.290649472" Sep 6 00:05:30.445457 kubelet[2752]: I0906 00:05:30.445348 2752 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-29-17" podStartSLOduration=1.445326167 podStartE2EDuration="1.445326167s" podCreationTimestamp="2025-09-06 00:05:29 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 00:05:30.417433254 +0000 UTC m=+1.291883596" watchObservedRunningTime="2025-09-06 00:05:30.445326167 +0000 UTC m=+1.319776497" Sep 6 00:05:30.472494 kubelet[2752]: I0906 00:05:30.472408 2752 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-29-17" podStartSLOduration=4.472362796 podStartE2EDuration="4.472362796s" podCreationTimestamp="2025-09-06 00:05:26 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 00:05:30.446251831 +0000 UTC m=+1.320702173" watchObservedRunningTime="2025-09-06 00:05:30.472362796 +0000 UTC m=+1.346813126" Sep 6 00:05:31.537000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Sep 6 00:05:31.539976 kernel: kauditd_printk_skb: 278 callbacks suppressed Sep 6 00:05:31.540133 kernel: audit: type=1400 audit(1757117131.537:831): avc: denied { watch } for pid=2388 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Sep 6 00:05:31.537000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000ab1dc0 a2=fc6 a3=0 items=0 ppid=2249 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 key=(null) Sep 6 00:05:31.562275 kernel: audit: type=1300 audit(1757117131.537:831): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000ab1dc0 a2=fc6 a3=0 items=0 ppid=2249 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 key=(null) Sep 6 00:05:31.562360 kernel: audit: type=1327 audit(1757117131.537:831): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:05:31.537000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:05:33.439128 kubelet[2752]: I0906 00:05:33.439055 2752 kuberuntime_manager.go:1746] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Sep 6 00:05:33.441048 env[1646]: time="2025-09-06T00:05:33.440878592Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Sep 6 00:05:33.442178 kubelet[2752]: I0906 00:05:33.442147 2752 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Sep 6 00:05:34.265287 systemd[1]: Created slice kubepods-besteffort-pod509e9d8c_c40d_4c35_928f_072b7b91fc75.slice. Sep 6 00:05:34.292360 kubelet[2752]: I0906 00:05:34.292279 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/509e9d8c-c40d-4c35-928f-072b7b91fc75-kube-proxy\") pod \"kube-proxy-jql9s\" (UID: \"509e9d8c-c40d-4c35-928f-072b7b91fc75\") " pod="kube-system/kube-proxy-jql9s" Sep 6 00:05:34.292686 kubelet[2752]: I0906 00:05:34.292640 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/509e9d8c-c40d-4c35-928f-072b7b91fc75-xtables-lock\") pod \"kube-proxy-jql9s\" (UID: \"509e9d8c-c40d-4c35-928f-072b7b91fc75\") " pod="kube-system/kube-proxy-jql9s" Sep 6 00:05:34.292901 kubelet[2752]: I0906 00:05:34.292851 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/509e9d8c-c40d-4c35-928f-072b7b91fc75-lib-modules\") pod \"kube-proxy-jql9s\" (UID: \"509e9d8c-c40d-4c35-928f-072b7b91fc75\") " pod="kube-system/kube-proxy-jql9s" Sep 6 00:05:34.293126 kubelet[2752]: I0906 00:05:34.293068 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-c7sd5\" (UniqueName: \"kubernetes.io/projected/509e9d8c-c40d-4c35-928f-072b7b91fc75-kube-api-access-c7sd5\") pod \"kube-proxy-jql9s\" (UID: \"509e9d8c-c40d-4c35-928f-072b7b91fc75\") " pod="kube-system/kube-proxy-jql9s" Sep 6 00:05:34.405415 kubelet[2752]: I0906 00:05:34.405355 2752 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Sep 6 00:05:34.577020 env[1646]: time="2025-09-06T00:05:34.576838313Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-jql9s,Uid:509e9d8c-c40d-4c35-928f-072b7b91fc75,Namespace:kube-system,Attempt:0,}" Sep 6 00:05:34.628897 env[1646]: time="2025-09-06T00:05:34.628737912Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:05:34.628897 env[1646]: time="2025-09-06T00:05:34.628822330Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:05:34.629328 env[1646]: time="2025-09-06T00:05:34.629229896Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:05:34.629924 env[1646]: time="2025-09-06T00:05:34.629810463Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/060d538f4cf58b9615eb8828c9ebc5ba3ff5d8a95513dad1eea3b44a8cede0da pid=2811 runtime=io.containerd.runc.v2 Sep 6 00:05:34.667442 systemd[1]: Started cri-containerd-060d538f4cf58b9615eb8828c9ebc5ba3ff5d8a95513dad1eea3b44a8cede0da.scope. Sep 6 00:05:34.684937 systemd[1]: run-containerd-runc-k8s.io-060d538f4cf58b9615eb8828c9ebc5ba3ff5d8a95513dad1eea3b44a8cede0da-runc.hpIg5a.mount: Deactivated successfully. Sep 6 00:05:34.714938 systemd[1]: Created slice kubepods-besteffort-pod4729e41a_9b08_4c52_b9cb_e134ae770c63.slice. Sep 6 00:05:34.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.760295 kernel: audit: type=1400 audit(1757117134.742:832): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.760417 kernel: audit: type=1400 audit(1757117134.742:833): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.767991 kernel: audit: type=1400 audit(1757117134.742:834): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.775734 kernel: audit: type=1400 audit(1757117134.742:835): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.783577 kernel: audit: type=1400 audit(1757117134.742:836): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.792397 kernel: audit: type=1400 audit(1757117134.742:837): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.795494 kubelet[2752]: I0906 00:05:34.795274 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-j2nn4\" (UniqueName: \"kubernetes.io/projected/4729e41a-9b08-4c52-b9cb-e134ae770c63-kube-api-access-j2nn4\") pod \"tigera-operator-755d956888-gg5vh\" (UID: \"4729e41a-9b08-4c52-b9cb-e134ae770c63\") " pod="tigera-operator/tigera-operator-755d956888-gg5vh" Sep 6 00:05:34.795494 kubelet[2752]: I0906 00:05:34.795406 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/4729e41a-9b08-4c52-b9cb-e134ae770c63-var-lib-calico\") pod \"tigera-operator-755d956888-gg5vh\" (UID: \"4729e41a-9b08-4c52-b9cb-e134ae770c63\") " pod="tigera-operator/tigera-operator-755d956888-gg5vh" Sep 6 00:05:34.800606 kernel: audit: type=1400 audit(1757117134.742:838): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.742000 audit: BPF prog-id=109 op=LOAD Sep 6 00:05:34.750000 audit[2820]: AVC avc: denied { bpf } for pid=2820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.750000 audit[2820]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2811 pid=2820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:34.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036306435333866346366353862393631356562383832386339656263 Sep 6 00:05:34.750000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.750000 audit[2820]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2811 pid=2820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:34.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036306435333866346366353862393631356562383832386339656263 Sep 6 00:05:34.750000 audit[2820]: AVC avc: denied { bpf } for pid=2820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.750000 audit[2820]: AVC avc: denied { bpf } for pid=2820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.750000 audit[2820]: AVC avc: denied { bpf } for pid=2820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.750000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.750000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.750000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.750000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.750000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.750000 audit[2820]: AVC avc: denied { bpf } for pid=2820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.750000 audit[2820]: AVC avc: denied { bpf } for pid=2820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.750000 audit: BPF prog-id=110 op=LOAD Sep 6 00:05:34.750000 audit[2820]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2811 pid=2820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:34.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036306435333866346366353862393631356562383832386339656263 Sep 6 00:05:34.750000 audit[2820]: AVC avc: denied { bpf } for pid=2820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.750000 audit[2820]: AVC avc: denied { bpf } for pid=2820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.750000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.750000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.750000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.750000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.750000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.750000 audit[2820]: AVC avc: denied { bpf } for pid=2820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.750000 audit[2820]: AVC avc: denied { bpf } for pid=2820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.750000 audit: BPF prog-id=111 op=LOAD Sep 6 00:05:34.750000 audit[2820]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2811 pid=2820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:34.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036306435333866346366353862393631356562383832386339656263 Sep 6 00:05:34.750000 audit: BPF prog-id=111 op=UNLOAD Sep 6 00:05:34.751000 audit: BPF prog-id=110 op=UNLOAD Sep 6 00:05:34.751000 audit[2820]: AVC avc: denied { bpf } for pid=2820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.751000 audit[2820]: AVC avc: denied { bpf } for pid=2820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.751000 audit[2820]: AVC avc: denied { bpf } for pid=2820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.751000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.751000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.751000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.751000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.751000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.751000 audit[2820]: AVC avc: denied { bpf } for pid=2820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.751000 audit[2820]: AVC avc: denied { bpf } for pid=2820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.751000 audit: BPF prog-id=112 op=LOAD Sep 6 00:05:34.751000 audit[2820]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2811 pid=2820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:34.751000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036306435333866346366353862393631356562383832386339656263 Sep 6 00:05:34.822546 env[1646]: time="2025-09-06T00:05:34.822482678Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-jql9s,Uid:509e9d8c-c40d-4c35-928f-072b7b91fc75,Namespace:kube-system,Attempt:0,} returns sandbox id \"060d538f4cf58b9615eb8828c9ebc5ba3ff5d8a95513dad1eea3b44a8cede0da\"" Sep 6 00:05:34.833415 env[1646]: time="2025-09-06T00:05:34.833267016Z" level=info msg="CreateContainer within sandbox \"060d538f4cf58b9615eb8828c9ebc5ba3ff5d8a95513dad1eea3b44a8cede0da\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Sep 6 00:05:34.865920 env[1646]: time="2025-09-06T00:05:34.865855978Z" level=info msg="CreateContainer within sandbox \"060d538f4cf58b9615eb8828c9ebc5ba3ff5d8a95513dad1eea3b44a8cede0da\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"1d4fcc6c5c0fc72653fe7da484820809150012c454ca1631d58cf86f9ba225f8\"" Sep 6 00:05:34.869261 env[1646]: time="2025-09-06T00:05:34.869095333Z" level=info msg="StartContainer for \"1d4fcc6c5c0fc72653fe7da484820809150012c454ca1631d58cf86f9ba225f8\"" Sep 6 00:05:34.910963 systemd[1]: Started cri-containerd-1d4fcc6c5c0fc72653fe7da484820809150012c454ca1631d58cf86f9ba225f8.scope. Sep 6 00:05:34.956000 audit[2851]: AVC avc: denied { perfmon } for pid=2851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.956000 audit[2851]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2811 pid=2851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:34.956000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164346663633663356330666337323635336665376461343834383230 Sep 6 00:05:34.956000 audit[2851]: AVC avc: denied { bpf } for pid=2851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.956000 audit[2851]: AVC avc: denied { bpf } for pid=2851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.956000 audit[2851]: AVC avc: denied { bpf } for pid=2851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.956000 audit[2851]: AVC avc: denied { perfmon } for pid=2851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.956000 audit[2851]: AVC avc: denied { perfmon } for pid=2851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.956000 audit[2851]: AVC avc: denied { perfmon } for pid=2851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.956000 audit[2851]: AVC avc: denied { perfmon } for pid=2851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.956000 audit[2851]: AVC avc: denied { perfmon } for pid=2851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.956000 audit[2851]: AVC avc: denied { bpf } for pid=2851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.956000 audit[2851]: AVC avc: denied { bpf } for pid=2851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.956000 audit: BPF prog-id=113 op=LOAD Sep 6 00:05:34.956000 audit[2851]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2811 pid=2851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:34.956000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164346663633663356330666337323635336665376461343834383230 Sep 6 00:05:34.957000 audit[2851]: AVC avc: denied { bpf } for pid=2851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.957000 audit[2851]: AVC avc: denied { bpf } for pid=2851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.957000 audit[2851]: AVC avc: denied { perfmon } for pid=2851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.957000 audit[2851]: AVC avc: denied { perfmon } for pid=2851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.957000 audit[2851]: AVC avc: denied { perfmon } for pid=2851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.957000 audit[2851]: AVC avc: denied { perfmon } for pid=2851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.957000 audit[2851]: AVC avc: denied { perfmon } for pid=2851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.957000 audit[2851]: AVC avc: denied { bpf } for pid=2851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.957000 audit[2851]: AVC avc: denied { bpf } for pid=2851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.957000 audit: BPF prog-id=114 op=LOAD Sep 6 00:05:34.957000 audit[2851]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2811 pid=2851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:34.957000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164346663633663356330666337323635336665376461343834383230 Sep 6 00:05:34.957000 audit: BPF prog-id=114 op=UNLOAD Sep 6 00:05:34.957000 audit: BPF prog-id=113 op=UNLOAD Sep 6 00:05:34.957000 audit[2851]: AVC avc: denied { bpf } for pid=2851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.957000 audit[2851]: AVC avc: denied { bpf } for pid=2851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.957000 audit[2851]: AVC avc: denied { bpf } for pid=2851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.957000 audit[2851]: AVC avc: denied { perfmon } for pid=2851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.957000 audit[2851]: AVC avc: denied { perfmon } for pid=2851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.957000 audit[2851]: AVC avc: denied { perfmon } for pid=2851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.957000 audit[2851]: AVC avc: denied { perfmon } for pid=2851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.957000 audit[2851]: AVC avc: denied { perfmon } for pid=2851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.957000 audit[2851]: AVC avc: denied { bpf } for pid=2851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.957000 audit[2851]: AVC avc: denied { bpf } for pid=2851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:34.957000 audit: BPF prog-id=115 op=LOAD Sep 6 00:05:34.957000 audit[2851]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2811 pid=2851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:34.957000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164346663633663356330666337323635336665376461343834383230 Sep 6 00:05:34.988368 env[1646]: time="2025-09-06T00:05:34.988217625Z" level=info msg="StartContainer for \"1d4fcc6c5c0fc72653fe7da484820809150012c454ca1631d58cf86f9ba225f8\" returns successfully" Sep 6 00:05:35.024622 env[1646]: time="2025-09-06T00:05:35.024479333Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-755d956888-gg5vh,Uid:4729e41a-9b08-4c52-b9cb-e134ae770c63,Namespace:tigera-operator,Attempt:0,}" Sep 6 00:05:35.061900 env[1646]: time="2025-09-06T00:05:35.061747940Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:05:35.061900 env[1646]: time="2025-09-06T00:05:35.061829645Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:05:35.061900 env[1646]: time="2025-09-06T00:05:35.061856543Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:05:35.062696 env[1646]: time="2025-09-06T00:05:35.062595556Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/578a14e744a9275e5bc6ca3e4d84887c6d303ba8172430584b1d2f7d97d7a8d4 pid=2887 runtime=io.containerd.runc.v2 Sep 6 00:05:35.092552 systemd[1]: Started cri-containerd-578a14e744a9275e5bc6ca3e4d84887c6d303ba8172430584b1d2f7d97d7a8d4.scope. Sep 6 00:05:35.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.147000 audit: BPF prog-id=116 op=LOAD Sep 6 00:05:35.148000 audit[2898]: AVC avc: denied { bpf } for pid=2898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.148000 audit[2898]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=2887 pid=2898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.148000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537386131346537343461393237356535626336636133653464383438 Sep 6 00:05:35.148000 audit[2898]: AVC avc: denied { perfmon } for pid=2898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.148000 audit[2898]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2887 pid=2898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.148000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537386131346537343461393237356535626336636133653464383438 Sep 6 00:05:35.148000 audit[2898]: AVC avc: denied { bpf } for pid=2898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.148000 audit[2898]: AVC avc: denied { bpf } for pid=2898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.148000 audit[2898]: AVC avc: denied { bpf } for pid=2898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.148000 audit[2898]: AVC avc: denied { perfmon } for pid=2898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.148000 audit[2898]: AVC avc: denied { perfmon } for pid=2898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.148000 audit[2898]: AVC avc: denied { perfmon } for pid=2898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.148000 audit[2898]: AVC avc: denied { perfmon } for pid=2898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.148000 audit[2898]: AVC avc: denied { perfmon } for pid=2898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.148000 audit[2898]: AVC avc: denied { bpf } for pid=2898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.148000 audit[2898]: AVC avc: denied { bpf } for pid=2898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.148000 audit: BPF prog-id=117 op=LOAD Sep 6 00:05:35.148000 audit[2898]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2887 pid=2898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.148000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537386131346537343461393237356535626336636133653464383438 Sep 6 00:05:35.148000 audit[2898]: AVC avc: denied { bpf } for pid=2898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.148000 audit[2898]: AVC avc: denied { bpf } for pid=2898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.148000 audit[2898]: AVC avc: denied { perfmon } for pid=2898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.148000 audit[2898]: AVC avc: denied { perfmon } for pid=2898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.148000 audit[2898]: AVC avc: denied { perfmon } for pid=2898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.148000 audit[2898]: AVC avc: denied { perfmon } for pid=2898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.148000 audit[2898]: AVC avc: denied { perfmon } for pid=2898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.148000 audit[2898]: AVC avc: denied { bpf } for pid=2898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.148000 audit[2898]: AVC avc: denied { bpf } for pid=2898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.148000 audit: BPF prog-id=118 op=LOAD Sep 6 00:05:35.148000 audit[2898]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2887 pid=2898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.148000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537386131346537343461393237356535626336636133653464383438 Sep 6 00:05:35.148000 audit: BPF prog-id=118 op=UNLOAD Sep 6 00:05:35.148000 audit: BPF prog-id=117 op=UNLOAD Sep 6 00:05:35.149000 audit[2898]: AVC avc: denied { bpf } for pid=2898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.149000 audit[2898]: AVC avc: denied { bpf } for pid=2898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.149000 audit[2898]: AVC avc: denied { bpf } for pid=2898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.149000 audit[2898]: AVC avc: denied { perfmon } for pid=2898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.149000 audit[2898]: AVC avc: denied { perfmon } for pid=2898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.149000 audit[2898]: AVC avc: denied { perfmon } for pid=2898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.149000 audit[2898]: AVC avc: denied { perfmon } for pid=2898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.149000 audit[2898]: AVC avc: denied { perfmon } for pid=2898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.149000 audit[2898]: AVC avc: denied { bpf } for pid=2898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.149000 audit[2898]: AVC avc: denied { bpf } for pid=2898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:35.149000 audit: BPF prog-id=119 op=LOAD Sep 6 00:05:35.149000 audit[2898]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2887 pid=2898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.149000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537386131346537343461393237356535626336636133653464383438 Sep 6 00:05:35.196158 env[1646]: time="2025-09-06T00:05:35.196065877Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-755d956888-gg5vh,Uid:4729e41a-9b08-4c52-b9cb-e134ae770c63,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"578a14e744a9275e5bc6ca3e4d84887c6d303ba8172430584b1d2f7d97d7a8d4\"" Sep 6 00:05:35.199064 env[1646]: time="2025-09-06T00:05:35.198997634Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\"" Sep 6 00:05:35.316000 audit[2955]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2955 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:05:35.316000 audit[2955]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffea6fcd60 a2=0 a3=1 items=0 ppid=2863 pid=2955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.316000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 6 00:05:35.318000 audit[2957]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2957 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:05:35.318000 audit[2957]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc6498390 a2=0 a3=1 items=0 ppid=2863 pid=2957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.318000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 6 00:05:35.321000 audit[2958]: NETFILTER_CFG table=filter:40 family=2 entries=1 op=nft_register_chain pid=2958 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:05:35.321000 audit[2958]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff9795c10 a2=0 a3=1 items=0 ppid=2863 pid=2958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.321000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 6 00:05:35.323000 audit[2960]: NETFILTER_CFG table=mangle:41 family=10 entries=1 op=nft_register_chain pid=2960 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:05:35.323000 audit[2960]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc67d3d80 a2=0 a3=1 items=0 ppid=2863 pid=2960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.323000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 6 00:05:35.346000 audit[2961]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=2961 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:05:35.346000 audit[2961]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd96cb150 a2=0 a3=1 items=0 ppid=2863 pid=2961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.346000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 6 00:05:35.352000 audit[2962]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2962 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:05:35.352000 audit[2962]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffeac864c0 a2=0 a3=1 items=0 ppid=2863 pid=2962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.352000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 6 00:05:35.430000 audit[2963]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2963 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:05:35.430000 audit[2963]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffdc208940 a2=0 a3=1 items=0 ppid=2863 pid=2963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.430000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 6 00:05:35.435000 audit[2965]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2965 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:05:35.435000 audit[2965]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffe94bb2a0 a2=0 a3=1 items=0 ppid=2863 pid=2965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.435000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Sep 6 00:05:35.445000 audit[2968]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2968 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:05:35.445000 audit[2968]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffffb7c61a0 a2=0 a3=1 items=0 ppid=2863 pid=2968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.445000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Sep 6 00:05:35.448000 audit[2969]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2969 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:05:35.448000 audit[2969]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffeac60570 a2=0 a3=1 items=0 ppid=2863 pid=2969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.448000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 6 00:05:35.454000 audit[2971]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2971 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:05:35.454000 audit[2971]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff10c94c0 a2=0 a3=1 items=0 ppid=2863 pid=2971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.454000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 6 00:05:35.457000 audit[2972]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2972 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:05:35.457000 audit[2972]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffef237e80 a2=0 a3=1 items=0 ppid=2863 pid=2972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.457000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 6 00:05:35.482000 audit[2974]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2974 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:05:35.482000 audit[2974]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd589a900 a2=0 a3=1 items=0 ppid=2863 pid=2974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.482000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 6 00:05:35.496000 audit[2977]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2977 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:05:35.496000 audit[2977]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffdd877310 a2=0 a3=1 items=0 ppid=2863 pid=2977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.496000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Sep 6 00:05:35.500000 audit[2978]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2978 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:05:35.500000 audit[2978]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc1c87b90 a2=0 a3=1 items=0 ppid=2863 pid=2978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.500000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 6 00:05:35.505000 audit[2980]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2980 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:05:35.505000 audit[2980]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd18c5570 a2=0 a3=1 items=0 ppid=2863 pid=2980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.505000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 6 00:05:35.510000 audit[2981]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2981 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:05:35.510000 audit[2981]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff8041dd0 a2=0 a3=1 items=0 ppid=2863 pid=2981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.510000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 6 00:05:35.514000 audit[2983]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2983 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:05:35.514000 audit[2983]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd97f3e90 a2=0 a3=1 items=0 ppid=2863 pid=2983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.514000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 6 00:05:35.521000 audit[2986]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2986 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:05:35.521000 audit[2986]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffbd37720 a2=0 a3=1 items=0 ppid=2863 pid=2986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.521000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 6 00:05:35.531000 audit[2989]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2989 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:05:35.531000 audit[2989]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff3468de0 a2=0 a3=1 items=0 ppid=2863 pid=2989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.531000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 6 00:05:35.535000 audit[2990]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2990 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:05:35.535000 audit[2990]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffffb62e260 a2=0 a3=1 items=0 ppid=2863 pid=2990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.535000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 6 00:05:35.541000 audit[2992]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2992 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:05:35.541000 audit[2992]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffdeae3310 a2=0 a3=1 items=0 ppid=2863 pid=2992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.541000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 6 00:05:35.551000 audit[2995]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2995 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:05:35.551000 audit[2995]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe6984990 a2=0 a3=1 items=0 ppid=2863 pid=2995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.551000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 6 00:05:35.553000 audit[2996]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2996 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:05:35.553000 audit[2996]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffde27bf80 a2=0 a3=1 items=0 ppid=2863 pid=2996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.553000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 6 00:05:35.559000 audit[2998]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2998 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:05:35.559000 audit[2998]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffc1315c30 a2=0 a3=1 items=0 ppid=2863 pid=2998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.559000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 6 00:05:35.620000 audit[3004]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=3004 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:05:35.620000 audit[3004]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffec257660 a2=0 a3=1 items=0 ppid=2863 pid=3004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.620000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:05:35.634000 audit[3004]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=3004 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:05:35.634000 audit[3004]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffec257660 a2=0 a3=1 items=0 ppid=2863 pid=3004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.634000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:05:35.637000 audit[3009]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=3009 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:05:35.637000 audit[3009]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffed202570 a2=0 a3=1 items=0 ppid=2863 pid=3009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.637000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 6 00:05:35.644000 audit[3011]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=3011 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:05:35.644000 audit[3011]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffff1afedf0 a2=0 a3=1 items=0 ppid=2863 pid=3011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.644000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Sep 6 00:05:35.654000 audit[3014]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=3014 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:05:35.654000 audit[3014]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffd727fd00 a2=0 a3=1 items=0 ppid=2863 pid=3014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.654000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Sep 6 00:05:35.657000 audit[3015]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=3015 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:05:35.657000 audit[3015]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe508f0f0 a2=0 a3=1 items=0 ppid=2863 pid=3015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.657000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 6 00:05:35.663000 audit[3017]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=3017 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:05:35.663000 audit[3017]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffffde38a0 a2=0 a3=1 items=0 ppid=2863 pid=3017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.663000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 6 00:05:35.665000 audit[3018]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=3018 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:05:35.665000 audit[3018]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdd427270 a2=0 a3=1 items=0 ppid=2863 pid=3018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.665000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 6 00:05:35.671000 audit[3020]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=3020 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:05:35.671000 audit[3020]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe21a7c40 a2=0 a3=1 items=0 ppid=2863 pid=3020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.671000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Sep 6 00:05:35.678000 audit[3023]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=3023 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:05:35.678000 audit[3023]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffea3ebdf0 a2=0 a3=1 items=0 ppid=2863 pid=3023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.678000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 6 00:05:35.680000 audit[3024]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=3024 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:05:35.680000 audit[3024]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffcd56200 a2=0 a3=1 items=0 ppid=2863 pid=3024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.680000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 6 00:05:35.685000 audit[3026]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=3026 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:05:35.685000 audit[3026]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe7fd6ae0 a2=0 a3=1 items=0 ppid=2863 pid=3026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.685000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 6 00:05:35.688000 audit[3027]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=3027 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:05:35.688000 audit[3027]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc84960b0 a2=0 a3=1 items=0 ppid=2863 pid=3027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.688000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 6 00:05:35.693000 audit[3029]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=3029 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:05:35.693000 audit[3029]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc3554780 a2=0 a3=1 items=0 ppid=2863 pid=3029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.693000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 6 00:05:35.701000 audit[3032]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=3032 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:05:35.701000 audit[3032]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdf8d9a10 a2=0 a3=1 items=0 ppid=2863 pid=3032 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.701000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 6 00:05:35.708000 audit[3035]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=3035 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:05:35.708000 audit[3035]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc9670e80 a2=0 a3=1 items=0 ppid=2863 pid=3035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.708000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Sep 6 00:05:35.710000 audit[3036]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=3036 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:05:35.710000 audit[3036]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffffb065bc0 a2=0 a3=1 items=0 ppid=2863 pid=3036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.710000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 6 00:05:35.715000 audit[3038]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=3038 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:05:35.715000 audit[3038]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffcf5a7390 a2=0 a3=1 items=0 ppid=2863 pid=3038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.715000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 6 00:05:35.722000 audit[3041]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=3041 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:05:35.722000 audit[3041]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffd2f637a0 a2=0 a3=1 items=0 ppid=2863 pid=3041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.722000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 6 00:05:35.727000 audit[3042]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=3042 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:05:35.727000 audit[3042]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd8fc4100 a2=0 a3=1 items=0 ppid=2863 pid=3042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.727000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 6 00:05:35.735000 audit[3044]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=3044 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:05:35.735000 audit[3044]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffcdaa5290 a2=0 a3=1 items=0 ppid=2863 pid=3044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.735000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 6 00:05:35.738000 audit[3045]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=3045 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:05:35.738000 audit[3045]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd26259c0 a2=0 a3=1 items=0 ppid=2863 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.738000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 6 00:05:35.745000 audit[3047]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=3047 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:05:35.745000 audit[3047]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffdcfcb740 a2=0 a3=1 items=0 ppid=2863 pid=3047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.745000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 6 00:05:35.758000 audit[3050]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=3050 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:05:35.758000 audit[3050]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd1eac9d0 a2=0 a3=1 items=0 ppid=2863 pid=3050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.758000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 6 00:05:35.765000 audit[3052]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=3052 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 6 00:05:35.765000 audit[3052]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=ffffd64be130 a2=0 a3=1 items=0 ppid=2863 pid=3052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.765000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:05:35.766000 audit[3052]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=3052 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 6 00:05:35.766000 audit[3052]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffd64be130 a2=0 a3=1 items=0 ppid=2863 pid=3052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:35.766000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:05:36.067744 env[1646]: time="2025-09-06T00:05:36.065232542Z" level=error msg="PullImage \"quay.io/tigera/operator:v1.38.6\" failed" error="failed to pull and unpack image \"quay.io/tigera/operator:v1.38.6\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \"https://cdn01.quay.io/quayio-production-s3/sha256/dd/dd2e197838b00861b08ae5f480dfbfb9a519722e35ced99346315722309cbe9f?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTCKFFWO5C%2F20250906%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250906T000536Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=22d1bfb0e80eaeaab496c3e8e54ede769fbf8888277c759484379b4ff9689c19®ion=us-east-1&namespace=tigera&repo_name=operator&akamai_signature=exp=1757118036~hmac=4c4c9d38031b8779df724c5400ae118d00ac0ab272c941436cf5888791984931\": dial tcp: lookup cdn01.quay.io: no such host" Sep 6 00:05:36.075855 kubelet[2752]: E0906 00:05:36.074629 2752 log.go:32] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"quay.io/tigera/operator:v1.38.6\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \"https://cdn01.quay.io/quayio-production-s3/sha256/dd/dd2e197838b00861b08ae5f480dfbfb9a519722e35ced99346315722309cbe9f?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTCKFFWO5C%2F20250906%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250906T000536Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=22d1bfb0e80eaeaab496c3e8e54ede769fbf8888277c759484379b4ff9689c19®ion=us-east-1&namespace=tigera&repo_name=operator&akamai_signature=exp=1757118036~hmac=4c4c9d38031b8779df724c5400ae118d00ac0ab272c941436cf5888791984931\": dial tcp: lookup cdn01.quay.io: no such host" image="quay.io/tigera/operator:v1.38.6" Sep 6 00:05:36.075855 kubelet[2752]: E0906 00:05:36.074745 2752 kuberuntime_image.go:42] "Failed to pull image" err="failed to pull and unpack image \"quay.io/tigera/operator:v1.38.6\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \"https://cdn01.quay.io/quayio-production-s3/sha256/dd/dd2e197838b00861b08ae5f480dfbfb9a519722e35ced99346315722309cbe9f?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTCKFFWO5C%2F20250906%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250906T000536Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=22d1bfb0e80eaeaab496c3e8e54ede769fbf8888277c759484379b4ff9689c19®ion=us-east-1&namespace=tigera&repo_name=operator&akamai_signature=exp=1757118036~hmac=4c4c9d38031b8779df724c5400ae118d00ac0ab272c941436cf5888791984931\": dial tcp: lookup cdn01.quay.io: no such host" image="quay.io/tigera/operator:v1.38.6" Sep 6 00:05:36.076896 kubelet[2752]: E0906 00:05:36.075231 2752 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:tigera-operator,Image:quay.io/tigera/operator:v1.38.6,Command:[operator],Args:[-manage-crds=true],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:WATCH_NAMESPACE,Value:,ValueFrom:nil,},EnvVar{Name:POD_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:metadata.name,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},EnvVar{Name:OPERATOR_NAME,Value:tigera-operator,ValueFrom:nil,},EnvVar{Name:TIGERA_OPERATOR_INIT_IMAGE_VERSION,Value:v1.38.6,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:var-lib-calico,ReadOnly:true,MountPath:/var/lib/calico,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-j2nn4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:nil,Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{EnvFromSource{Prefix:,ConfigMapRef:&ConfigMapEnvSource{LocalObjectReference:LocalObjectReference{Name:kubernetes-services-endpoint,},Optional:*true,},SecretRef:nil,},},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod tigera-operator-755d956888-gg5vh_tigera-operator(4729e41a-9b08-4c52-b9cb-e134ae770c63): ErrImagePull: failed to pull and unpack image \"quay.io/tigera/operator:v1.38.6\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \"https://cdn01.quay.io/quayio-production-s3/sha256/dd/dd2e197838b00861b08ae5f480dfbfb9a519722e35ced99346315722309cbe9f?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTCKFFWO5C%2F20250906%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250906T000536Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=22d1bfb0e80eaeaab496c3e8e54ede769fbf8888277c759484379b4ff9689c19®ion=us-east-1&namespace=tigera&repo_name=operator&akamai_signature=exp=1757118036~hmac=4c4c9d38031b8779df724c5400ae118d00ac0ab272c941436cf5888791984931\": dial tcp: lookup cdn01.quay.io: no such host" logger="UnhandledError" Sep 6 00:05:36.077822 kubelet[2752]: E0906 00:05:36.077570 2752 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"tigera-operator\" with ErrImagePull: \"failed to pull and unpack image \\\"quay.io/tigera/operator:v1.38.6\\\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \\\"https://cdn01.quay.io/quayio-production-s3/sha256/dd/dd2e197838b00861b08ae5f480dfbfb9a519722e35ced99346315722309cbe9f?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTCKFFWO5C%2F20250906%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250906T000536Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=22d1bfb0e80eaeaab496c3e8e54ede769fbf8888277c759484379b4ff9689c19®ion=us-east-1&namespace=tigera&repo_name=operator&akamai_signature=exp=1757118036~hmac=4c4c9d38031b8779df724c5400ae118d00ac0ab272c941436cf5888791984931\\\": dial tcp: lookup cdn01.quay.io: no such host\"" pod="tigera-operator/tigera-operator-755d956888-gg5vh" podUID="4729e41a-9b08-4c52-b9cb-e134ae770c63" Sep 6 00:05:36.480340 kubelet[2752]: E0906 00:05:36.480248 2752 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"tigera-operator\" with ImagePullBackOff: \"Back-off pulling image \\\"quay.io/tigera/operator:v1.38.6\\\": ErrImagePull: failed to pull and unpack image \\\"quay.io/tigera/operator:v1.38.6\\\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \\\"https://cdn01.quay.io/quayio-production-s3/sha256/dd/dd2e197838b00861b08ae5f480dfbfb9a519722e35ced99346315722309cbe9f?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTCKFFWO5C%2F20250906%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250906T000536Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=22d1bfb0e80eaeaab496c3e8e54ede769fbf8888277c759484379b4ff9689c19®ion=us-east-1&namespace=tigera&repo_name=operator&akamai_signature=exp=1757118036~hmac=4c4c9d38031b8779df724c5400ae118d00ac0ab272c941436cf5888791984931\\\": dial tcp: lookup cdn01.quay.io: no such host\"" pod="tigera-operator/tigera-operator-755d956888-gg5vh" podUID="4729e41a-9b08-4c52-b9cb-e134ae770c63" Sep 6 00:05:36.496532 amazon-ssm-agent[1640]: 2025-09-06 00:05:36 INFO [MessagingDeliveryService] [Association] Schedule manager refreshed with 0 associations, 0 new associations associated Sep 6 00:05:36.497236 kubelet[2752]: I0906 00:05:36.496835 2752 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-jql9s" podStartSLOduration=2.496811824 podStartE2EDuration="2.496811824s" podCreationTimestamp="2025-09-06 00:05:34 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 00:05:35.493715999 +0000 UTC m=+6.368166341" watchObservedRunningTime="2025-09-06 00:05:36.496811824 +0000 UTC m=+7.371262142" Sep 6 00:05:50.374569 env[1646]: time="2025-09-06T00:05:50.374130714Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\"" Sep 6 00:05:51.872252 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3444800353.mount: Deactivated successfully. Sep 6 00:05:52.955511 env[1646]: time="2025-09-06T00:05:52.955449704Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:05:52.958229 env[1646]: time="2025-09-06T00:05:52.958173262Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dd2e197838b00861b08ae5f480dfbfb9a519722e35ced99346315722309cbe9f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:05:52.961163 env[1646]: time="2025-09-06T00:05:52.961071518Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:05:52.964006 env[1646]: time="2025-09-06T00:05:52.963949347Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:00a7a9b62f9b9a4e0856128b078539783b8352b07f707bff595cb604cc580f6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:05:52.965404 env[1646]: time="2025-09-06T00:05:52.965334847Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\" returns image reference \"sha256:dd2e197838b00861b08ae5f480dfbfb9a519722e35ced99346315722309cbe9f\"" Sep 6 00:05:52.976340 env[1646]: time="2025-09-06T00:05:52.976244236Z" level=info msg="CreateContainer within sandbox \"578a14e744a9275e5bc6ca3e4d84887c6d303ba8172430584b1d2f7d97d7a8d4\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Sep 6 00:05:53.000718 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2835313291.mount: Deactivated successfully. Sep 6 00:05:53.014470 env[1646]: time="2025-09-06T00:05:53.014405194Z" level=info msg="CreateContainer within sandbox \"578a14e744a9275e5bc6ca3e4d84887c6d303ba8172430584b1d2f7d97d7a8d4\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"54738a2681c690dc2f23024c701ac04c4af58c069828104d222b56ac45b7c686\"" Sep 6 00:05:53.016702 env[1646]: time="2025-09-06T00:05:53.015525667Z" level=info msg="StartContainer for \"54738a2681c690dc2f23024c701ac04c4af58c069828104d222b56ac45b7c686\"" Sep 6 00:05:53.061962 systemd[1]: Started cri-containerd-54738a2681c690dc2f23024c701ac04c4af58c069828104d222b56ac45b7c686.scope. Sep 6 00:05:53.107170 kernel: kauditd_printk_skb: 303 callbacks suppressed Sep 6 00:05:53.107318 kernel: audit: type=1400 audit(1757117153.102:925): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.123086 kernel: audit: type=1400 audit(1757117153.102:926): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.130955 kernel: audit: type=1400 audit(1757117153.102:927): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.138915 kernel: audit: type=1400 audit(1757117153.102:928): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.146940 kernel: audit: type=1400 audit(1757117153.102:929): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.156081 kernel: audit: type=1400 audit(1757117153.102:930): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.164297 kernel: audit: type=1400 audit(1757117153.102:931): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.172482 kernel: audit: type=1400 audit(1757117153.102:932): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.180556 kernel: audit: type=1400 audit(1757117153.103:933): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.105000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.188974 kernel: audit: type=1400 audit(1757117153.105:934): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.189081 env[1646]: time="2025-09-06T00:05:53.184398472Z" level=info msg="StartContainer for \"54738a2681c690dc2f23024c701ac04c4af58c069828104d222b56ac45b7c686\" returns successfully" Sep 6 00:05:53.105000 audit: BPF prog-id=120 op=LOAD Sep 6 00:05:53.112000 audit[3062]: AVC avc: denied { bpf } for pid=3062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.112000 audit[3062]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2887 pid=3062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:53.112000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534373338613236383163363930646332663233303234633730316163 Sep 6 00:05:53.113000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.113000 audit[3062]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2887 pid=3062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:53.113000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534373338613236383163363930646332663233303234633730316163 Sep 6 00:05:53.113000 audit[3062]: AVC avc: denied { bpf } for pid=3062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.113000 audit[3062]: AVC avc: denied { bpf } for pid=3062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.113000 audit[3062]: AVC avc: denied { bpf } for pid=3062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.113000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.113000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.113000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.113000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.113000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.113000 audit[3062]: AVC avc: denied { bpf } for pid=3062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.113000 audit[3062]: AVC avc: denied { bpf } for pid=3062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.113000 audit: BPF prog-id=121 op=LOAD Sep 6 00:05:53.113000 audit[3062]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2887 pid=3062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:53.113000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534373338613236383163363930646332663233303234633730316163 Sep 6 00:05:53.113000 audit[3062]: AVC avc: denied { bpf } for pid=3062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.113000 audit[3062]: AVC avc: denied { bpf } for pid=3062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.113000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.113000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.113000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.113000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.113000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.113000 audit[3062]: AVC avc: denied { bpf } for pid=3062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.113000 audit[3062]: AVC avc: denied { bpf } for pid=3062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.113000 audit: BPF prog-id=122 op=LOAD Sep 6 00:05:53.113000 audit[3062]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2887 pid=3062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:53.113000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534373338613236383163363930646332663233303234633730316163 Sep 6 00:05:53.113000 audit: BPF prog-id=122 op=UNLOAD Sep 6 00:05:53.113000 audit: BPF prog-id=121 op=UNLOAD Sep 6 00:05:53.113000 audit[3062]: AVC avc: denied { bpf } for pid=3062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.113000 audit[3062]: AVC avc: denied { bpf } for pid=3062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.113000 audit[3062]: AVC avc: denied { bpf } for pid=3062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.113000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.113000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.113000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.113000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.113000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.113000 audit[3062]: AVC avc: denied { bpf } for pid=3062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.113000 audit[3062]: AVC avc: denied { bpf } for pid=3062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:05:53.113000 audit: BPF prog-id=123 op=LOAD Sep 6 00:05:53.113000 audit[3062]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2887 pid=3062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:05:53.113000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534373338613236383163363930646332663233303234633730316163 Sep 6 00:06:02.310837 sudo[1931]: pam_unix(sudo:session): session closed for user root Sep 6 00:06:02.309000 audit[1931]: USER_END pid=1931 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:06:02.312955 kernel: kauditd_printk_skb: 47 callbacks suppressed Sep 6 00:06:02.313088 kernel: audit: type=1106 audit(1757117162.309:943): pid=1931 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:06:02.321000 audit[1931]: CRED_DISP pid=1931 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:06:02.333314 kernel: audit: type=1104 audit(1757117162.321:944): pid=1931 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:06:02.345040 sshd[1928]: pam_unix(sshd:session): session closed for user core Sep 6 00:06:02.346000 audit[1928]: USER_END pid=1928 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:02.350828 systemd-logind[1634]: Session 7 logged out. Waiting for processes to exit. Sep 6 00:06:02.351736 systemd[1]: session-7.scope: Deactivated successfully. Sep 6 00:06:02.352055 systemd[1]: session-7.scope: Consumed 11.966s CPU time. Sep 6 00:06:02.352912 systemd[1]: sshd@6-172.31.29.17:22-147.75.109.163:47894.service: Deactivated successfully. Sep 6 00:06:02.359313 systemd-logind[1634]: Removed session 7. Sep 6 00:06:02.346000 audit[1928]: CRED_DISP pid=1928 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:02.370791 kernel: audit: type=1106 audit(1757117162.346:945): pid=1928 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:02.370976 kernel: audit: type=1104 audit(1757117162.346:946): pid=1928 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:02.352000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.29.17:22-147.75.109.163:47894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:06:02.383552 kernel: audit: type=1131 audit(1757117162.352:947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.29.17:22-147.75.109.163:47894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:06:04.308000 audit[3139]: NETFILTER_CFG table=filter:89 family=2 entries=14 op=nft_register_rule pid=3139 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:04.316160 kernel: audit: type=1325 audit(1757117164.308:948): table=filter:89 family=2 entries=14 op=nft_register_rule pid=3139 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:04.308000 audit[3139]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffca9d66e0 a2=0 a3=1 items=0 ppid=2863 pid=3139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:04.308000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:04.336882 kernel: audit: type=1300 audit(1757117164.308:948): arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffca9d66e0 a2=0 a3=1 items=0 ppid=2863 pid=3139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:04.337149 kernel: audit: type=1327 audit(1757117164.308:948): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:04.377000 audit[3139]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=3139 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:04.377000 audit[3139]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffca9d66e0 a2=0 a3=1 items=0 ppid=2863 pid=3139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:04.395938 kernel: audit: type=1325 audit(1757117164.377:949): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3139 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:04.396092 kernel: audit: type=1300 audit(1757117164.377:949): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffca9d66e0 a2=0 a3=1 items=0 ppid=2863 pid=3139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:04.377000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:04.431000 audit[3141]: NETFILTER_CFG table=filter:91 family=2 entries=15 op=nft_register_rule pid=3141 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:04.431000 audit[3141]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffe7611510 a2=0 a3=1 items=0 ppid=2863 pid=3141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:04.431000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:04.437000 audit[3141]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=3141 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:04.437000 audit[3141]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe7611510 a2=0 a3=1 items=0 ppid=2863 pid=3141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:04.437000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:11.215000 audit[3145]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=3145 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:11.219080 kernel: kauditd_printk_skb: 7 callbacks suppressed Sep 6 00:06:11.219274 kernel: audit: type=1325 audit(1757117171.215:952): table=filter:93 family=2 entries=17 op=nft_register_rule pid=3145 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:11.215000 audit[3145]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffec674840 a2=0 a3=1 items=0 ppid=2863 pid=3145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:11.237909 kernel: audit: type=1300 audit(1757117171.215:952): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffec674840 a2=0 a3=1 items=0 ppid=2863 pid=3145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:11.215000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:11.249810 kernel: audit: type=1327 audit(1757117171.215:952): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:11.240000 audit[3145]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=3145 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:11.257792 kernel: audit: type=1325 audit(1757117171.240:953): table=nat:94 family=2 entries=12 op=nft_register_rule pid=3145 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:11.240000 audit[3145]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffec674840 a2=0 a3=1 items=0 ppid=2863 pid=3145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:11.271936 kernel: audit: type=1300 audit(1757117171.240:953): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffec674840 a2=0 a3=1 items=0 ppid=2863 pid=3145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:11.240000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:11.280835 kernel: audit: type=1327 audit(1757117171.240:953): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:11.282763 kubelet[2752]: I0906 00:06:11.282615 2752 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-755d956888-gg5vh" podStartSLOduration=19.513092962 podStartE2EDuration="37.282590548s" podCreationTimestamp="2025-09-06 00:05:34 +0000 UTC" firstStartedPulling="2025-09-06 00:05:35.198176329 +0000 UTC m=+6.072626647" lastFinishedPulling="2025-09-06 00:05:52.967673891 +0000 UTC m=+23.842124233" observedRunningTime="2025-09-06 00:05:53.541721462 +0000 UTC m=+24.416171792" watchObservedRunningTime="2025-09-06 00:06:11.282590548 +0000 UTC m=+42.157040878" Sep 6 00:06:11.299077 systemd[1]: Created slice kubepods-besteffort-podadcde192_4837_42e5_8492_d63c97031518.slice. Sep 6 00:06:11.305965 kubelet[2752]: E0906 00:06:11.305902 2752 reflector.go:200] "Failed to watch" err="failed to list *v1.ConfigMap: configmaps \"tigera-ca-bundle\" is forbidden: User \"system:node:ip-172-31-29-17\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ip-172-31-29-17' and this object" logger="UnhandledError" reflector="object-\"calico-system\"/\"tigera-ca-bundle\"" type="*v1.ConfigMap" Sep 6 00:06:11.306291 kubelet[2752]: E0906 00:06:11.305924 2752 reflector.go:200] "Failed to watch" err="failed to list *v1.Secret: secrets \"typha-certs\" is forbidden: User \"system:node:ip-172-31-29-17\" cannot list resource \"secrets\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ip-172-31-29-17' and this object" logger="UnhandledError" reflector="object-\"calico-system\"/\"typha-certs\"" type="*v1.Secret" Sep 6 00:06:11.306503 kubelet[2752]: E0906 00:06:11.306450 2752 reflector.go:200] "Failed to watch" err="failed to list *v1.ConfigMap: configmaps \"kube-root-ca.crt\" is forbidden: User \"system:node:ip-172-31-29-17\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ip-172-31-29-17' and this object" logger="UnhandledError" reflector="object-\"calico-system\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" Sep 6 00:06:11.306946 kubelet[2752]: I0906 00:06:11.306872 2752 status_manager.go:895] "Failed to get status for pod" podUID="adcde192-4837-42e5-8492-d63c97031518" pod="calico-system/calico-typha-9fb697576-2vhmr" err="pods \"calico-typha-9fb697576-2vhmr\" is forbidden: User \"system:node:ip-172-31-29-17\" cannot get resource \"pods\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ip-172-31-29-17' and this object" Sep 6 00:06:11.358695 kubelet[2752]: I0906 00:06:11.358609 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/adcde192-4837-42e5-8492-d63c97031518-tigera-ca-bundle\") pod \"calico-typha-9fb697576-2vhmr\" (UID: \"adcde192-4837-42e5-8492-d63c97031518\") " pod="calico-system/calico-typha-9fb697576-2vhmr" Sep 6 00:06:11.358876 kubelet[2752]: I0906 00:06:11.358719 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/adcde192-4837-42e5-8492-d63c97031518-typha-certs\") pod \"calico-typha-9fb697576-2vhmr\" (UID: \"adcde192-4837-42e5-8492-d63c97031518\") " pod="calico-system/calico-typha-9fb697576-2vhmr" Sep 6 00:06:11.358876 kubelet[2752]: I0906 00:06:11.358801 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kggzt\" (UniqueName: \"kubernetes.io/projected/adcde192-4837-42e5-8492-d63c97031518-kube-api-access-kggzt\") pod \"calico-typha-9fb697576-2vhmr\" (UID: \"adcde192-4837-42e5-8492-d63c97031518\") " pod="calico-system/calico-typha-9fb697576-2vhmr" Sep 6 00:06:11.543000 audit[3147]: NETFILTER_CFG table=filter:95 family=2 entries=19 op=nft_register_rule pid=3147 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:11.553173 kernel: audit: type=1325 audit(1757117171.543:954): table=filter:95 family=2 entries=19 op=nft_register_rule pid=3147 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:11.543000 audit[3147]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=fffff5b08e60 a2=0 a3=1 items=0 ppid=2863 pid=3147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:11.543000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:11.574858 kernel: audit: type=1300 audit(1757117171.543:954): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=fffff5b08e60 a2=0 a3=1 items=0 ppid=2863 pid=3147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:11.575034 kernel: audit: type=1327 audit(1757117171.543:954): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:11.568000 audit[3147]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=3147 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:11.581732 kernel: audit: type=1325 audit(1757117171.568:955): table=nat:96 family=2 entries=12 op=nft_register_rule pid=3147 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:11.568000 audit[3147]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff5b08e60 a2=0 a3=1 items=0 ppid=2863 pid=3147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:11.568000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:11.768199 systemd[1]: Created slice kubepods-besteffort-podd633da2e_e6b3_4364_912f_d1c649fdf0f7.slice. Sep 6 00:06:11.771593 kubelet[2752]: E0906 00:06:11.771438 2752 reflector.go:200] "Failed to watch" err="failed to list *v1.Secret: secrets \"node-certs\" is forbidden: User \"system:node:ip-172-31-29-17\" cannot list resource \"secrets\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ip-172-31-29-17' and this object" logger="UnhandledError" reflector="object-\"calico-system\"/\"node-certs\"" type="*v1.Secret" Sep 6 00:06:11.773419 kubelet[2752]: E0906 00:06:11.773348 2752 reflector.go:200] "Failed to watch" err="failed to list *v1.ConfigMap: configmaps \"cni-config\" is forbidden: User \"system:node:ip-172-31-29-17\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ip-172-31-29-17' and this object" logger="UnhandledError" reflector="object-\"calico-system\"/\"cni-config\"" type="*v1.ConfigMap" Sep 6 00:06:11.871377 kubelet[2752]: I0906 00:06:11.871319 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/d633da2e-e6b3-4364-912f-d1c649fdf0f7-cni-bin-dir\") pod \"calico-node-5zrzm\" (UID: \"d633da2e-e6b3-4364-912f-d1c649fdf0f7\") " pod="calico-system/calico-node-5zrzm" Sep 6 00:06:11.871695 kubelet[2752]: I0906 00:06:11.871658 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/d633da2e-e6b3-4364-912f-d1c649fdf0f7-lib-modules\") pod \"calico-node-5zrzm\" (UID: \"d633da2e-e6b3-4364-912f-d1c649fdf0f7\") " pod="calico-system/calico-node-5zrzm" Sep 6 00:06:11.872035 kubelet[2752]: I0906 00:06:11.871994 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/d633da2e-e6b3-4364-912f-d1c649fdf0f7-cni-net-dir\") pod \"calico-node-5zrzm\" (UID: \"d633da2e-e6b3-4364-912f-d1c649fdf0f7\") " pod="calico-system/calico-node-5zrzm" Sep 6 00:06:11.872509 kubelet[2752]: I0906 00:06:11.872454 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/d633da2e-e6b3-4364-912f-d1c649fdf0f7-node-certs\") pod \"calico-node-5zrzm\" (UID: \"d633da2e-e6b3-4364-912f-d1c649fdf0f7\") " pod="calico-system/calico-node-5zrzm" Sep 6 00:06:11.872871 kubelet[2752]: I0906 00:06:11.872812 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/d633da2e-e6b3-4364-912f-d1c649fdf0f7-policysync\") pod \"calico-node-5zrzm\" (UID: \"d633da2e-e6b3-4364-912f-d1c649fdf0f7\") " pod="calico-system/calico-node-5zrzm" Sep 6 00:06:11.873323 kubelet[2752]: I0906 00:06:11.873280 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/d633da2e-e6b3-4364-912f-d1c649fdf0f7-var-lib-calico\") pod \"calico-node-5zrzm\" (UID: \"d633da2e-e6b3-4364-912f-d1c649fdf0f7\") " pod="calico-system/calico-node-5zrzm" Sep 6 00:06:11.873604 kubelet[2752]: I0906 00:06:11.873564 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/d633da2e-e6b3-4364-912f-d1c649fdf0f7-var-run-calico\") pod \"calico-node-5zrzm\" (UID: \"d633da2e-e6b3-4364-912f-d1c649fdf0f7\") " pod="calico-system/calico-node-5zrzm" Sep 6 00:06:11.873831 kubelet[2752]: I0906 00:06:11.873793 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d633da2e-e6b3-4364-912f-d1c649fdf0f7-tigera-ca-bundle\") pod \"calico-node-5zrzm\" (UID: \"d633da2e-e6b3-4364-912f-d1c649fdf0f7\") " pod="calico-system/calico-node-5zrzm" Sep 6 00:06:11.874037 kubelet[2752]: I0906 00:06:11.874002 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/d633da2e-e6b3-4364-912f-d1c649fdf0f7-xtables-lock\") pod \"calico-node-5zrzm\" (UID: \"d633da2e-e6b3-4364-912f-d1c649fdf0f7\") " pod="calico-system/calico-node-5zrzm" Sep 6 00:06:11.874344 kubelet[2752]: I0906 00:06:11.874305 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fkxmb\" (UniqueName: \"kubernetes.io/projected/d633da2e-e6b3-4364-912f-d1c649fdf0f7-kube-api-access-fkxmb\") pod \"calico-node-5zrzm\" (UID: \"d633da2e-e6b3-4364-912f-d1c649fdf0f7\") " pod="calico-system/calico-node-5zrzm" Sep 6 00:06:11.874634 kubelet[2752]: I0906 00:06:11.874575 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/d633da2e-e6b3-4364-912f-d1c649fdf0f7-cni-log-dir\") pod \"calico-node-5zrzm\" (UID: \"d633da2e-e6b3-4364-912f-d1c649fdf0f7\") " pod="calico-system/calico-node-5zrzm" Sep 6 00:06:11.874893 kubelet[2752]: I0906 00:06:11.874857 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/d633da2e-e6b3-4364-912f-d1c649fdf0f7-flexvol-driver-host\") pod \"calico-node-5zrzm\" (UID: \"d633da2e-e6b3-4364-912f-d1c649fdf0f7\") " pod="calico-system/calico-node-5zrzm" Sep 6 00:06:11.973789 kubelet[2752]: E0906 00:06:11.973725 2752 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-t8r6b" podUID="cefa6dd1-365c-4b02-b17f-1f1b3edee0dd" Sep 6 00:06:12.057190 kubelet[2752]: E0906 00:06:12.057134 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.057190 kubelet[2752]: W0906 00:06:12.057182 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.057624 kubelet[2752]: E0906 00:06:12.057227 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.058064 kubelet[2752]: E0906 00:06:12.058023 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.058258 kubelet[2752]: W0906 00:06:12.058063 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.058258 kubelet[2752]: E0906 00:06:12.058183 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.058937 kubelet[2752]: E0906 00:06:12.058877 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.058937 kubelet[2752]: W0906 00:06:12.058921 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.059202 kubelet[2752]: E0906 00:06:12.058980 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.060622 kubelet[2752]: E0906 00:06:12.060565 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.060622 kubelet[2752]: W0906 00:06:12.060609 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.060937 kubelet[2752]: E0906 00:06:12.060647 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.061283 kubelet[2752]: E0906 00:06:12.061231 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.061283 kubelet[2752]: W0906 00:06:12.061273 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.061523 kubelet[2752]: E0906 00:06:12.061309 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.062219 kubelet[2752]: E0906 00:06:12.062154 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.062219 kubelet[2752]: W0906 00:06:12.062202 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.062452 kubelet[2752]: E0906 00:06:12.062240 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.062734 kubelet[2752]: E0906 00:06:12.062684 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.062734 kubelet[2752]: W0906 00:06:12.062722 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.062941 kubelet[2752]: E0906 00:06:12.062753 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.063641 kubelet[2752]: E0906 00:06:12.063582 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.063641 kubelet[2752]: W0906 00:06:12.063626 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.063940 kubelet[2752]: E0906 00:06:12.063663 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.064248 kubelet[2752]: E0906 00:06:12.064194 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.064248 kubelet[2752]: W0906 00:06:12.064234 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.064487 kubelet[2752]: E0906 00:06:12.064271 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.067329 kubelet[2752]: E0906 00:06:12.067274 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.067329 kubelet[2752]: W0906 00:06:12.067317 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.067609 kubelet[2752]: E0906 00:06:12.067352 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.067851 kubelet[2752]: E0906 00:06:12.067800 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.067851 kubelet[2752]: W0906 00:06:12.067835 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.068021 kubelet[2752]: E0906 00:06:12.067865 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.068458 kubelet[2752]: E0906 00:06:12.068408 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.068458 kubelet[2752]: W0906 00:06:12.068445 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.068642 kubelet[2752]: E0906 00:06:12.068476 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.068938 kubelet[2752]: E0906 00:06:12.068883 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.068938 kubelet[2752]: W0906 00:06:12.068916 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.069130 kubelet[2752]: E0906 00:06:12.068948 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.069700 kubelet[2752]: E0906 00:06:12.069651 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.069700 kubelet[2752]: W0906 00:06:12.069691 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.069920 kubelet[2752]: E0906 00:06:12.069727 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.070268 kubelet[2752]: E0906 00:06:12.070229 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.070268 kubelet[2752]: W0906 00:06:12.070266 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.070519 kubelet[2752]: E0906 00:06:12.070299 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.071079 kubelet[2752]: E0906 00:06:12.070972 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.071079 kubelet[2752]: W0906 00:06:12.071016 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.071079 kubelet[2752]: E0906 00:06:12.071053 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.071607 kubelet[2752]: E0906 00:06:12.071553 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.071607 kubelet[2752]: W0906 00:06:12.071593 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.071779 kubelet[2752]: E0906 00:06:12.071625 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.072333 kubelet[2752]: E0906 00:06:12.072283 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.072333 kubelet[2752]: W0906 00:06:12.072323 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.072558 kubelet[2752]: E0906 00:06:12.072359 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.072831 kubelet[2752]: E0906 00:06:12.072790 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.072831 kubelet[2752]: W0906 00:06:12.072829 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.073057 kubelet[2752]: E0906 00:06:12.072863 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.075342 kubelet[2752]: E0906 00:06:12.075286 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.075342 kubelet[2752]: W0906 00:06:12.075331 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.075559 kubelet[2752]: E0906 00:06:12.075369 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.079331 kubelet[2752]: E0906 00:06:12.079278 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.079331 kubelet[2752]: W0906 00:06:12.079326 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.079620 kubelet[2752]: E0906 00:06:12.079365 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.079620 kubelet[2752]: I0906 00:06:12.079426 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/cefa6dd1-365c-4b02-b17f-1f1b3edee0dd-kubelet-dir\") pod \"csi-node-driver-t8r6b\" (UID: \"cefa6dd1-365c-4b02-b17f-1f1b3edee0dd\") " pod="calico-system/csi-node-driver-t8r6b" Sep 6 00:06:12.080047 kubelet[2752]: E0906 00:06:12.080002 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.080047 kubelet[2752]: W0906 00:06:12.080046 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.080334 kubelet[2752]: E0906 00:06:12.080082 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.080334 kubelet[2752]: I0906 00:06:12.080182 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/cefa6dd1-365c-4b02-b17f-1f1b3edee0dd-registration-dir\") pod \"csi-node-driver-t8r6b\" (UID: \"cefa6dd1-365c-4b02-b17f-1f1b3edee0dd\") " pod="calico-system/csi-node-driver-t8r6b" Sep 6 00:06:12.080840 kubelet[2752]: E0906 00:06:12.080792 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.080840 kubelet[2752]: W0906 00:06:12.080835 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.081088 kubelet[2752]: E0906 00:06:12.080872 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.081088 kubelet[2752]: I0906 00:06:12.080938 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/cefa6dd1-365c-4b02-b17f-1f1b3edee0dd-socket-dir\") pod \"csi-node-driver-t8r6b\" (UID: \"cefa6dd1-365c-4b02-b17f-1f1b3edee0dd\") " pod="calico-system/csi-node-driver-t8r6b" Sep 6 00:06:12.081538 kubelet[2752]: E0906 00:06:12.081461 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.081538 kubelet[2752]: W0906 00:06:12.081511 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.081749 kubelet[2752]: E0906 00:06:12.081551 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.081855 kubelet[2752]: I0906 00:06:12.081806 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2zlsz\" (UniqueName: \"kubernetes.io/projected/cefa6dd1-365c-4b02-b17f-1f1b3edee0dd-kube-api-access-2zlsz\") pod \"csi-node-driver-t8r6b\" (UID: \"cefa6dd1-365c-4b02-b17f-1f1b3edee0dd\") " pod="calico-system/csi-node-driver-t8r6b" Sep 6 00:06:12.084043 kubelet[2752]: E0906 00:06:12.083669 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.084043 kubelet[2752]: W0906 00:06:12.083712 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.084043 kubelet[2752]: E0906 00:06:12.083749 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.084405 kubelet[2752]: E0906 00:06:12.084229 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.084405 kubelet[2752]: W0906 00:06:12.084259 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.084405 kubelet[2752]: E0906 00:06:12.084291 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.087376 kubelet[2752]: E0906 00:06:12.087316 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.087376 kubelet[2752]: W0906 00:06:12.087362 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.087653 kubelet[2752]: E0906 00:06:12.087398 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.087981 kubelet[2752]: E0906 00:06:12.087920 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.087981 kubelet[2752]: W0906 00:06:12.087969 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.088257 kubelet[2752]: E0906 00:06:12.088004 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.088395 kubelet[2752]: I0906 00:06:12.088325 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/cefa6dd1-365c-4b02-b17f-1f1b3edee0dd-varrun\") pod \"csi-node-driver-t8r6b\" (UID: \"cefa6dd1-365c-4b02-b17f-1f1b3edee0dd\") " pod="calico-system/csi-node-driver-t8r6b" Sep 6 00:06:12.088782 kubelet[2752]: E0906 00:06:12.088730 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.088782 kubelet[2752]: W0906 00:06:12.088770 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.089031 kubelet[2752]: E0906 00:06:12.088803 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.089310 kubelet[2752]: E0906 00:06:12.089266 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.089310 kubelet[2752]: W0906 00:06:12.089302 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.089505 kubelet[2752]: E0906 00:06:12.089333 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.089931 kubelet[2752]: E0906 00:06:12.089881 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.089931 kubelet[2752]: W0906 00:06:12.089921 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.090190 kubelet[2752]: E0906 00:06:12.089955 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.090815 kubelet[2752]: E0906 00:06:12.090501 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.090815 kubelet[2752]: W0906 00:06:12.090541 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.090815 kubelet[2752]: E0906 00:06:12.090575 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.091540 kubelet[2752]: E0906 00:06:12.091489 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.091540 kubelet[2752]: W0906 00:06:12.091529 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.091871 kubelet[2752]: E0906 00:06:12.091576 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.092413 kubelet[2752]: E0906 00:06:12.092016 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.092413 kubelet[2752]: W0906 00:06:12.092049 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.092413 kubelet[2752]: E0906 00:06:12.092078 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.094402 kubelet[2752]: E0906 00:06:12.094342 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.094402 kubelet[2752]: W0906 00:06:12.094387 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.094653 kubelet[2752]: E0906 00:06:12.094425 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.193073 kubelet[2752]: E0906 00:06:12.192912 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.193358 kubelet[2752]: W0906 00:06:12.193319 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.193562 kubelet[2752]: E0906 00:06:12.193534 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.195820 kubelet[2752]: E0906 00:06:12.195780 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.196072 kubelet[2752]: W0906 00:06:12.196042 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.196320 kubelet[2752]: E0906 00:06:12.196291 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.196923 kubelet[2752]: E0906 00:06:12.196893 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.197181 kubelet[2752]: W0906 00:06:12.197126 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.197338 kubelet[2752]: E0906 00:06:12.197311 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.199316 kubelet[2752]: E0906 00:06:12.199277 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.199535 kubelet[2752]: W0906 00:06:12.199504 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.199683 kubelet[2752]: E0906 00:06:12.199656 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.200314 kubelet[2752]: E0906 00:06:12.200266 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.200314 kubelet[2752]: W0906 00:06:12.200304 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.200495 kubelet[2752]: E0906 00:06:12.200341 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.200759 kubelet[2752]: E0906 00:06:12.200721 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.200759 kubelet[2752]: W0906 00:06:12.200753 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.200940 kubelet[2752]: E0906 00:06:12.200780 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.201295 kubelet[2752]: E0906 00:06:12.201255 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.201295 kubelet[2752]: W0906 00:06:12.201288 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.201448 kubelet[2752]: E0906 00:06:12.201318 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.201738 kubelet[2752]: E0906 00:06:12.201697 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.201738 kubelet[2752]: W0906 00:06:12.201729 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.201922 kubelet[2752]: E0906 00:06:12.201755 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.202191 kubelet[2752]: E0906 00:06:12.202150 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.202191 kubelet[2752]: W0906 00:06:12.202184 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.202394 kubelet[2752]: E0906 00:06:12.202213 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.202674 kubelet[2752]: E0906 00:06:12.202632 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.202674 kubelet[2752]: W0906 00:06:12.202666 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.202855 kubelet[2752]: E0906 00:06:12.202694 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.203196 kubelet[2752]: E0906 00:06:12.203155 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.203196 kubelet[2752]: W0906 00:06:12.203187 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.203342 kubelet[2752]: E0906 00:06:12.203218 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.203626 kubelet[2752]: E0906 00:06:12.203585 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.203626 kubelet[2752]: W0906 00:06:12.203617 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.203814 kubelet[2752]: E0906 00:06:12.203644 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.204160 kubelet[2752]: E0906 00:06:12.203993 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.204160 kubelet[2752]: W0906 00:06:12.204024 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.204160 kubelet[2752]: E0906 00:06:12.204051 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.207271 kubelet[2752]: E0906 00:06:12.207217 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.207271 kubelet[2752]: W0906 00:06:12.207261 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.207552 kubelet[2752]: E0906 00:06:12.207296 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.209003 kubelet[2752]: E0906 00:06:12.208887 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.209003 kubelet[2752]: W0906 00:06:12.208928 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.209003 kubelet[2752]: E0906 00:06:12.208964 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.209496 kubelet[2752]: E0906 00:06:12.209462 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.209636 kubelet[2752]: W0906 00:06:12.209495 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.209636 kubelet[2752]: E0906 00:06:12.209535 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.209938 kubelet[2752]: E0906 00:06:12.209906 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.210062 kubelet[2752]: W0906 00:06:12.209938 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.210062 kubelet[2752]: E0906 00:06:12.209967 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.212172 kubelet[2752]: E0906 00:06:12.212097 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.212172 kubelet[2752]: W0906 00:06:12.212158 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.212428 kubelet[2752]: E0906 00:06:12.212192 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.212779 kubelet[2752]: E0906 00:06:12.212720 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.212779 kubelet[2752]: W0906 00:06:12.212755 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.212956 kubelet[2752]: E0906 00:06:12.212786 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.213263 kubelet[2752]: E0906 00:06:12.213220 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.213263 kubelet[2752]: W0906 00:06:12.213255 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.213465 kubelet[2752]: E0906 00:06:12.213286 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.213698 kubelet[2752]: E0906 00:06:12.213658 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.213698 kubelet[2752]: W0906 00:06:12.213691 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.214323 kubelet[2752]: E0906 00:06:12.213718 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.214323 kubelet[2752]: E0906 00:06:12.214186 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.214323 kubelet[2752]: W0906 00:06:12.214211 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.214323 kubelet[2752]: E0906 00:06:12.214238 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.214657 kubelet[2752]: E0906 00:06:12.214631 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.214657 kubelet[2752]: W0906 00:06:12.214653 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.214780 kubelet[2752]: E0906 00:06:12.214678 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.215242 kubelet[2752]: E0906 00:06:12.215130 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.215242 kubelet[2752]: W0906 00:06:12.215168 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.215242 kubelet[2752]: E0906 00:06:12.215197 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.216388 kubelet[2752]: E0906 00:06:12.215600 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.216388 kubelet[2752]: W0906 00:06:12.215638 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.216388 kubelet[2752]: E0906 00:06:12.215667 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.365747 kubelet[2752]: E0906 00:06:12.365643 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.365747 kubelet[2752]: W0906 00:06:12.365734 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.366463 kubelet[2752]: E0906 00:06:12.365769 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.370511 kubelet[2752]: E0906 00:06:12.370471 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.370714 kubelet[2752]: W0906 00:06:12.370685 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.370843 kubelet[2752]: E0906 00:06:12.370816 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.444552 kubelet[2752]: E0906 00:06:12.444321 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.444552 kubelet[2752]: W0906 00:06:12.444362 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.444552 kubelet[2752]: E0906 00:06:12.444398 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.492695 kubelet[2752]: E0906 00:06:12.492655 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.492913 kubelet[2752]: W0906 00:06:12.492870 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.493145 kubelet[2752]: E0906 00:06:12.493088 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.508019 kubelet[2752]: E0906 00:06:12.507969 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.509169 kubelet[2752]: W0906 00:06:12.509094 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.509381 kubelet[2752]: E0906 00:06:12.509351 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.531308 kubelet[2752]: E0906 00:06:12.531267 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.531528 kubelet[2752]: W0906 00:06:12.531496 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.531668 kubelet[2752]: E0906 00:06:12.531638 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.599000 audit[3219]: NETFILTER_CFG table=filter:97 family=2 entries=21 op=nft_register_rule pid=3219 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:12.599000 audit[3219]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffd8382130 a2=0 a3=1 items=0 ppid=2863 pid=3219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:12.599000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:12.605000 audit[3219]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=3219 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:12.605000 audit[3219]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd8382130 a2=0 a3=1 items=0 ppid=2863 pid=3219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:12.605000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:12.803733 kubelet[2752]: E0906 00:06:12.803589 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:12.803994 kubelet[2752]: W0906 00:06:12.803953 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:12.804190 kubelet[2752]: E0906 00:06:12.804156 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:12.807199 env[1646]: time="2025-09-06T00:06:12.807093065Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-9fb697576-2vhmr,Uid:adcde192-4837-42e5-8492-d63c97031518,Namespace:calico-system,Attempt:0,}" Sep 6 00:06:12.839724 env[1646]: time="2025-09-06T00:06:12.838788976Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:06:12.839724 env[1646]: time="2025-09-06T00:06:12.839026243Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:06:12.839724 env[1646]: time="2025-09-06T00:06:12.839173336Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:06:12.841943 env[1646]: time="2025-09-06T00:06:12.841827424Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/997ac3277712b345154b12fecbb439fcd9c5808eaa5825d85dc86108b57f4ff9 pid=3228 runtime=io.containerd.runc.v2 Sep 6 00:06:12.877917 systemd[1]: Started cri-containerd-997ac3277712b345154b12fecbb439fcd9c5808eaa5825d85dc86108b57f4ff9.scope. Sep 6 00:06:12.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.929000 audit: BPF prog-id=124 op=LOAD Sep 6 00:06:12.931000 audit[3239]: AVC avc: denied { bpf } for pid=3239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.931000 audit[3239]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3228 pid=3239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:12.931000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939376163333237373731326233343531353462313266656362623433 Sep 6 00:06:12.931000 audit[3239]: AVC avc: denied { perfmon } for pid=3239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.931000 audit[3239]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3228 pid=3239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:12.931000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939376163333237373731326233343531353462313266656362623433 Sep 6 00:06:12.932000 audit[3239]: AVC avc: denied { bpf } for pid=3239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.932000 audit[3239]: AVC avc: denied { bpf } for pid=3239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.932000 audit[3239]: AVC avc: denied { bpf } for pid=3239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.932000 audit[3239]: AVC avc: denied { perfmon } for pid=3239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.932000 audit[3239]: AVC avc: denied { perfmon } for pid=3239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.932000 audit[3239]: AVC avc: denied { perfmon } for pid=3239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.932000 audit[3239]: AVC avc: denied { perfmon } for pid=3239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.932000 audit[3239]: AVC avc: denied { perfmon } for pid=3239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.932000 audit[3239]: AVC avc: denied { bpf } for pid=3239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.932000 audit[3239]: AVC avc: denied { bpf } for pid=3239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.932000 audit: BPF prog-id=125 op=LOAD Sep 6 00:06:12.932000 audit[3239]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3228 pid=3239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:12.932000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939376163333237373731326233343531353462313266656362623433 Sep 6 00:06:12.934000 audit[3239]: AVC avc: denied { bpf } for pid=3239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.934000 audit[3239]: AVC avc: denied { bpf } for pid=3239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.934000 audit[3239]: AVC avc: denied { perfmon } for pid=3239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.934000 audit[3239]: AVC avc: denied { perfmon } for pid=3239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.934000 audit[3239]: AVC avc: denied { perfmon } for pid=3239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.934000 audit[3239]: AVC avc: denied { perfmon } for pid=3239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.934000 audit[3239]: AVC avc: denied { perfmon } for pid=3239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.934000 audit[3239]: AVC avc: denied { bpf } for pid=3239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.934000 audit[3239]: AVC avc: denied { bpf } for pid=3239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.934000 audit: BPF prog-id=126 op=LOAD Sep 6 00:06:12.934000 audit[3239]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3228 pid=3239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:12.934000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939376163333237373731326233343531353462313266656362623433 Sep 6 00:06:12.935000 audit: BPF prog-id=126 op=UNLOAD Sep 6 00:06:12.936000 audit: BPF prog-id=125 op=UNLOAD Sep 6 00:06:12.936000 audit[3239]: AVC avc: denied { bpf } for pid=3239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.936000 audit[3239]: AVC avc: denied { bpf } for pid=3239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.936000 audit[3239]: AVC avc: denied { bpf } for pid=3239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.936000 audit[3239]: AVC avc: denied { perfmon } for pid=3239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.936000 audit[3239]: AVC avc: denied { perfmon } for pid=3239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.936000 audit[3239]: AVC avc: denied { perfmon } for pid=3239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.936000 audit[3239]: AVC avc: denied { perfmon } for pid=3239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.936000 audit[3239]: AVC avc: denied { perfmon } for pid=3239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.936000 audit[3239]: AVC avc: denied { bpf } for pid=3239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.936000 audit[3239]: AVC avc: denied { bpf } for pid=3239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:12.936000 audit: BPF prog-id=127 op=LOAD Sep 6 00:06:12.936000 audit[3239]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3228 pid=3239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:12.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939376163333237373731326233343531353462313266656362623433 Sep 6 00:06:12.975903 env[1646]: time="2025-09-06T00:06:12.975843383Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-5zrzm,Uid:d633da2e-e6b3-4364-912f-d1c649fdf0f7,Namespace:calico-system,Attempt:0,}" Sep 6 00:06:12.988320 env[1646]: time="2025-09-06T00:06:12.988246983Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-9fb697576-2vhmr,Uid:adcde192-4837-42e5-8492-d63c97031518,Namespace:calico-system,Attempt:0,} returns sandbox id \"997ac3277712b345154b12fecbb439fcd9c5808eaa5825d85dc86108b57f4ff9\"" Sep 6 00:06:12.995012 env[1646]: time="2025-09-06T00:06:12.994008283Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\"" Sep 6 00:06:13.019212 env[1646]: time="2025-09-06T00:06:13.019069220Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:06:13.019427 env[1646]: time="2025-09-06T00:06:13.019174122Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:06:13.019427 env[1646]: time="2025-09-06T00:06:13.019205179Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:06:13.020973 env[1646]: time="2025-09-06T00:06:13.019513577Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5985b34aa5664a0a8ea75dee660f470a2f5f4f83714a50c7e8b31cff504580de pid=3273 runtime=io.containerd.runc.v2 Sep 6 00:06:13.045428 systemd[1]: Started cri-containerd-5985b34aa5664a0a8ea75dee660f470a2f5f4f83714a50c7e8b31cff504580de.scope. Sep 6 00:06:13.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.085000 audit: BPF prog-id=128 op=LOAD Sep 6 00:06:13.085000 audit[3283]: AVC avc: denied { bpf } for pid=3283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.085000 audit[3283]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=3273 pid=3283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:13.085000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539383562333461613536363461306138656137356465653636306634 Sep 6 00:06:13.089000 audit[3283]: AVC avc: denied { perfmon } for pid=3283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.089000 audit[3283]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3273 pid=3283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:13.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539383562333461613536363461306138656137356465653636306634 Sep 6 00:06:13.089000 audit[3283]: AVC avc: denied { bpf } for pid=3283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.089000 audit[3283]: AVC avc: denied { bpf } for pid=3283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.089000 audit[3283]: AVC avc: denied { bpf } for pid=3283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.089000 audit[3283]: AVC avc: denied { perfmon } for pid=3283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.089000 audit[3283]: AVC avc: denied { perfmon } for pid=3283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.089000 audit[3283]: AVC avc: denied { perfmon } for pid=3283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.089000 audit[3283]: AVC avc: denied { perfmon } for pid=3283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.089000 audit[3283]: AVC avc: denied { perfmon } for pid=3283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.089000 audit[3283]: AVC avc: denied { bpf } for pid=3283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.089000 audit[3283]: AVC avc: denied { bpf } for pid=3283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.089000 audit: BPF prog-id=129 op=LOAD Sep 6 00:06:13.089000 audit[3283]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3273 pid=3283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:13.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539383562333461613536363461306138656137356465653636306634 Sep 6 00:06:13.090000 audit[3283]: AVC avc: denied { bpf } for pid=3283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.090000 audit[3283]: AVC avc: denied { bpf } for pid=3283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.090000 audit[3283]: AVC avc: denied { perfmon } for pid=3283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.090000 audit[3283]: AVC avc: denied { perfmon } for pid=3283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.090000 audit[3283]: AVC avc: denied { perfmon } for pid=3283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.090000 audit[3283]: AVC avc: denied { perfmon } for pid=3283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.090000 audit[3283]: AVC avc: denied { perfmon } for pid=3283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.090000 audit[3283]: AVC avc: denied { bpf } for pid=3283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.090000 audit[3283]: AVC avc: denied { bpf } for pid=3283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.090000 audit: BPF prog-id=130 op=LOAD Sep 6 00:06:13.090000 audit[3283]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3273 pid=3283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:13.090000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539383562333461613536363461306138656137356465653636306634 Sep 6 00:06:13.091000 audit: BPF prog-id=130 op=UNLOAD Sep 6 00:06:13.091000 audit: BPF prog-id=129 op=UNLOAD Sep 6 00:06:13.091000 audit[3283]: AVC avc: denied { bpf } for pid=3283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.091000 audit[3283]: AVC avc: denied { bpf } for pid=3283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.091000 audit[3283]: AVC avc: denied { bpf } for pid=3283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.091000 audit[3283]: AVC avc: denied { perfmon } for pid=3283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.091000 audit[3283]: AVC avc: denied { perfmon } for pid=3283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.091000 audit[3283]: AVC avc: denied { perfmon } for pid=3283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.091000 audit[3283]: AVC avc: denied { perfmon } for pid=3283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.091000 audit[3283]: AVC avc: denied { perfmon } for pid=3283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.091000 audit[3283]: AVC avc: denied { bpf } for pid=3283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.091000 audit[3283]: AVC avc: denied { bpf } for pid=3283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:13.091000 audit: BPF prog-id=131 op=LOAD Sep 6 00:06:13.091000 audit[3283]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3273 pid=3283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:13.091000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539383562333461613536363461306138656137356465653636306634 Sep 6 00:06:13.132341 env[1646]: time="2025-09-06T00:06:13.132284777Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-5zrzm,Uid:d633da2e-e6b3-4364-912f-d1c649fdf0f7,Namespace:calico-system,Attempt:0,} returns sandbox id \"5985b34aa5664a0a8ea75dee660f470a2f5f4f83714a50c7e8b31cff504580de\"" Sep 6 00:06:13.369272 kubelet[2752]: E0906 00:06:13.369214 2752 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-t8r6b" podUID="cefa6dd1-365c-4b02-b17f-1f1b3edee0dd" Sep 6 00:06:14.261564 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount907075685.mount: Deactivated successfully. Sep 6 00:06:15.369678 kubelet[2752]: E0906 00:06:15.369623 2752 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-t8r6b" podUID="cefa6dd1-365c-4b02-b17f-1f1b3edee0dd" Sep 6 00:06:15.930872 env[1646]: time="2025-09-06T00:06:15.930811260Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:15.932981 env[1646]: time="2025-09-06T00:06:15.932932405Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6a1496fdc48cc0b9ab3c10aef777497484efac5df9efbfbbdf9775e9583645cb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:15.935463 env[1646]: time="2025-09-06T00:06:15.935397331Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:15.937876 env[1646]: time="2025-09-06T00:06:15.937813518Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:f4a3d61ffda9c98a53adeb412c5af404ca3727a3cc2d0b4ef28d197bdd47ecaa,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:15.939315 env[1646]: time="2025-09-06T00:06:15.939245829Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\" returns image reference \"sha256:6a1496fdc48cc0b9ab3c10aef777497484efac5df9efbfbbdf9775e9583645cb\"" Sep 6 00:06:15.945282 env[1646]: time="2025-09-06T00:06:15.943780821Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\"" Sep 6 00:06:15.978047 env[1646]: time="2025-09-06T00:06:15.977982862Z" level=info msg="CreateContainer within sandbox \"997ac3277712b345154b12fecbb439fcd9c5808eaa5825d85dc86108b57f4ff9\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Sep 6 00:06:16.000462 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3291046205.mount: Deactivated successfully. Sep 6 00:06:16.004569 env[1646]: time="2025-09-06T00:06:16.004475929Z" level=info msg="CreateContainer within sandbox \"997ac3277712b345154b12fecbb439fcd9c5808eaa5825d85dc86108b57f4ff9\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"706c1a49bcd5030a3964d1283f52b98a16850c9cfc5bc5b46a7311cb02f0cba9\"" Sep 6 00:06:16.007775 env[1646]: time="2025-09-06T00:06:16.007525625Z" level=info msg="StartContainer for \"706c1a49bcd5030a3964d1283f52b98a16850c9cfc5bc5b46a7311cb02f0cba9\"" Sep 6 00:06:16.050352 systemd[1]: Started cri-containerd-706c1a49bcd5030a3964d1283f52b98a16850c9cfc5bc5b46a7311cb02f0cba9.scope. Sep 6 00:06:16.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.095000 audit: BPF prog-id=132 op=LOAD Sep 6 00:06:16.097000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.097000 audit[3318]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3228 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:16.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730366331613439626364353033306133393634643132383366353262 Sep 6 00:06:16.097000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.097000 audit[3318]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3228 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:16.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730366331613439626364353033306133393634643132383366353262 Sep 6 00:06:16.098000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.098000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.098000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.098000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.098000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.098000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.098000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.098000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.098000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.098000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.098000 audit: BPF prog-id=133 op=LOAD Sep 6 00:06:16.098000 audit[3318]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3228 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:16.098000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730366331613439626364353033306133393634643132383366353262 Sep 6 00:06:16.100000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.100000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.100000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.100000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.100000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.100000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.100000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.100000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.100000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.100000 audit: BPF prog-id=134 op=LOAD Sep 6 00:06:16.100000 audit[3318]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3228 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:16.100000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730366331613439626364353033306133393634643132383366353262 Sep 6 00:06:16.101000 audit: BPF prog-id=134 op=UNLOAD Sep 6 00:06:16.101000 audit: BPF prog-id=133 op=UNLOAD Sep 6 00:06:16.102000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.102000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.102000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.102000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.102000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.102000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.102000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.102000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.102000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.102000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:16.102000 audit: BPF prog-id=135 op=LOAD Sep 6 00:06:16.102000 audit[3318]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3228 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:16.102000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730366331613439626364353033306133393634643132383366353262 Sep 6 00:06:16.157311 env[1646]: time="2025-09-06T00:06:16.157248268Z" level=info msg="StartContainer for \"706c1a49bcd5030a3964d1283f52b98a16850c9cfc5bc5b46a7311cb02f0cba9\" returns successfully" Sep 6 00:06:16.708798 kubelet[2752]: E0906 00:06:16.708727 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.708798 kubelet[2752]: W0906 00:06:16.708774 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.709580 kubelet[2752]: E0906 00:06:16.708811 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.711334 kubelet[2752]: E0906 00:06:16.711279 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.711520 kubelet[2752]: W0906 00:06:16.711322 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.711520 kubelet[2752]: E0906 00:06:16.711400 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.713362 kubelet[2752]: E0906 00:06:16.713305 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.713362 kubelet[2752]: W0906 00:06:16.713350 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.713593 kubelet[2752]: E0906 00:06:16.713386 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.713990 kubelet[2752]: E0906 00:06:16.713951 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.713990 kubelet[2752]: W0906 00:06:16.713985 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.714234 kubelet[2752]: E0906 00:06:16.714015 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.715358 kubelet[2752]: E0906 00:06:16.715306 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.715358 kubelet[2752]: W0906 00:06:16.715348 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.715358 kubelet[2752]: E0906 00:06:16.715382 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.716033 kubelet[2752]: E0906 00:06:16.715989 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.716033 kubelet[2752]: W0906 00:06:16.716026 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.716323 kubelet[2752]: E0906 00:06:16.716058 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.716752 kubelet[2752]: E0906 00:06:16.716703 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.716752 kubelet[2752]: W0906 00:06:16.716743 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.716992 kubelet[2752]: E0906 00:06:16.716780 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.719343 kubelet[2752]: E0906 00:06:16.719287 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.719343 kubelet[2752]: W0906 00:06:16.719331 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.719641 kubelet[2752]: E0906 00:06:16.719368 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.720089 kubelet[2752]: E0906 00:06:16.720035 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.720089 kubelet[2752]: W0906 00:06:16.720079 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.720418 kubelet[2752]: E0906 00:06:16.720171 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.720882 kubelet[2752]: E0906 00:06:16.720816 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.720882 kubelet[2752]: W0906 00:06:16.720859 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.721165 kubelet[2752]: E0906 00:06:16.720914 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.723680 kubelet[2752]: E0906 00:06:16.723267 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.723851 kubelet[2752]: W0906 00:06:16.723672 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.723851 kubelet[2752]: E0906 00:06:16.723744 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.724445 kubelet[2752]: I0906 00:06:16.724350 2752 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-9fb697576-2vhmr" podStartSLOduration=2.775722769 podStartE2EDuration="5.724324967s" podCreationTimestamp="2025-09-06 00:06:11 +0000 UTC" firstStartedPulling="2025-09-06 00:06:12.993367863 +0000 UTC m=+43.867818181" lastFinishedPulling="2025-09-06 00:06:15.941970073 +0000 UTC m=+46.816420379" observedRunningTime="2025-09-06 00:06:16.68986917 +0000 UTC m=+47.564319584" watchObservedRunningTime="2025-09-06 00:06:16.724324967 +0000 UTC m=+47.598775285" Sep 6 00:06:16.725656 kubelet[2752]: E0906 00:06:16.725600 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.725815 kubelet[2752]: W0906 00:06:16.725642 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.725815 kubelet[2752]: E0906 00:06:16.725707 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.726589 kubelet[2752]: E0906 00:06:16.726378 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.726589 kubelet[2752]: W0906 00:06:16.726408 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.726589 kubelet[2752]: E0906 00:06:16.726470 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.727380 kubelet[2752]: E0906 00:06:16.727323 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.727380 kubelet[2752]: W0906 00:06:16.727368 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.727699 kubelet[2752]: E0906 00:06:16.727432 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.729093 kubelet[2752]: E0906 00:06:16.729039 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.729282 kubelet[2752]: W0906 00:06:16.729080 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.729282 kubelet[2752]: E0906 00:06:16.729181 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.741334 kubelet[2752]: E0906 00:06:16.741274 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.741334 kubelet[2752]: W0906 00:06:16.741317 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.741607 kubelet[2752]: E0906 00:06:16.741369 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.742649 kubelet[2752]: E0906 00:06:16.742594 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.742649 kubelet[2752]: W0906 00:06:16.742638 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.742934 kubelet[2752]: E0906 00:06:16.742673 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.743557 kubelet[2752]: E0906 00:06:16.743508 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.743557 kubelet[2752]: W0906 00:06:16.743547 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.743787 kubelet[2752]: E0906 00:06:16.743580 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.745395 kubelet[2752]: E0906 00:06:16.745352 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.745670 kubelet[2752]: W0906 00:06:16.745633 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.745843 kubelet[2752]: E0906 00:06:16.745796 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.747431 kubelet[2752]: E0906 00:06:16.747392 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.747632 kubelet[2752]: W0906 00:06:16.747601 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.747798 kubelet[2752]: E0906 00:06:16.747769 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.748653 kubelet[2752]: E0906 00:06:16.748616 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.748843 kubelet[2752]: W0906 00:06:16.748814 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.749008 kubelet[2752]: E0906 00:06:16.748968 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.751403 kubelet[2752]: E0906 00:06:16.751357 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.751650 kubelet[2752]: W0906 00:06:16.751607 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.751822 kubelet[2752]: E0906 00:06:16.751790 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.752533 kubelet[2752]: E0906 00:06:16.752498 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.752745 kubelet[2752]: W0906 00:06:16.752707 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.752944 kubelet[2752]: E0906 00:06:16.752905 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.753610 kubelet[2752]: E0906 00:06:16.753572 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.753840 kubelet[2752]: W0906 00:06:16.753808 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.753974 kubelet[2752]: E0906 00:06:16.753946 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.754592 kubelet[2752]: E0906 00:06:16.754560 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.754785 kubelet[2752]: W0906 00:06:16.754753 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.754921 kubelet[2752]: E0906 00:06:16.754891 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.756196 kubelet[2752]: E0906 00:06:16.756093 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.756450 kubelet[2752]: W0906 00:06:16.756412 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.756611 kubelet[2752]: E0906 00:06:16.756580 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.761877 kubelet[2752]: E0906 00:06:16.761839 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.762284 kubelet[2752]: W0906 00:06:16.762242 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.762476 kubelet[2752]: E0906 00:06:16.762441 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.763291 kubelet[2752]: E0906 00:06:16.763250 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.763520 kubelet[2752]: W0906 00:06:16.763481 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.763690 kubelet[2752]: E0906 00:06:16.763656 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.766863 kubelet[2752]: E0906 00:06:16.766819 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.767203 kubelet[2752]: W0906 00:06:16.767092 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.767493 kubelet[2752]: E0906 00:06:16.767456 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.769254 kubelet[2752]: E0906 00:06:16.769206 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.769565 kubelet[2752]: W0906 00:06:16.769508 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.769748 kubelet[2752]: E0906 00:06:16.769716 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.771491 kubelet[2752]: E0906 00:06:16.771447 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.771738 kubelet[2752]: W0906 00:06:16.771698 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.771943 kubelet[2752]: E0906 00:06:16.771909 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.773090 kubelet[2752]: E0906 00:06:16.773038 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.773397 kubelet[2752]: W0906 00:06:16.773344 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.773591 kubelet[2752]: E0906 00:06:16.773541 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.774483 kubelet[2752]: E0906 00:06:16.774445 2752 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:06:16.774766 kubelet[2752]: W0906 00:06:16.774730 2752 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:06:16.774955 kubelet[2752]: E0906 00:06:16.774922 2752 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:06:16.857000 audit[3384]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=3384 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:16.861488 kernel: kauditd_printk_skb: 179 callbacks suppressed Sep 6 00:06:16.861679 kernel: audit: type=1325 audit(1757117176.857:1012): table=filter:99 family=2 entries=21 op=nft_register_rule pid=3384 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:16.857000 audit[3384]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffebbeeab0 a2=0 a3=1 items=0 ppid=2863 pid=3384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:16.882444 kernel: audit: type=1300 audit(1757117176.857:1012): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffebbeeab0 a2=0 a3=1 items=0 ppid=2863 pid=3384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:16.857000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:16.889154 kernel: audit: type=1327 audit(1757117176.857:1012): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:16.876000 audit[3384]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=3384 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:16.895967 kernel: audit: type=1325 audit(1757117176.876:1013): table=nat:100 family=2 entries=19 op=nft_register_chain pid=3384 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:16.896189 kernel: audit: type=1300 audit(1757117176.876:1013): arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffebbeeab0 a2=0 a3=1 items=0 ppid=2863 pid=3384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:16.876000 audit[3384]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffebbeeab0 a2=0 a3=1 items=0 ppid=2863 pid=3384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:16.876000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:16.913552 kernel: audit: type=1327 audit(1757117176.876:1013): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:17.284571 env[1646]: time="2025-09-06T00:06:17.284478361Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:17.290370 env[1646]: time="2025-09-06T00:06:17.290297171Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:29e6f31ad72882b1b817dd257df6b7981e4d7d31d872b7fe2cf102c6e2af27a5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:17.295052 env[1646]: time="2025-09-06T00:06:17.294977006Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:17.301904 env[1646]: time="2025-09-06T00:06:17.301850757Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:81bdfcd9dbd36624dc35354e8c181c75631ba40e6c7df5820f5f56cea36f0ef9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:17.303262 env[1646]: time="2025-09-06T00:06:17.302576496Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\" returns image reference \"sha256:29e6f31ad72882b1b817dd257df6b7981e4d7d31d872b7fe2cf102c6e2af27a5\"" Sep 6 00:06:17.312319 env[1646]: time="2025-09-06T00:06:17.312211516Z" level=info msg="CreateContainer within sandbox \"5985b34aa5664a0a8ea75dee660f470a2f5f4f83714a50c7e8b31cff504580de\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Sep 6 00:06:17.345024 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount843580577.mount: Deactivated successfully. Sep 6 00:06:17.359477 env[1646]: time="2025-09-06T00:06:17.359401539Z" level=info msg="CreateContainer within sandbox \"5985b34aa5664a0a8ea75dee660f470a2f5f4f83714a50c7e8b31cff504580de\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"e3abb0e462a06f4b7b19d4867fcd14233df4e55080036877617b394e140593cd\"" Sep 6 00:06:17.361676 env[1646]: time="2025-09-06T00:06:17.361594580Z" level=info msg="StartContainer for \"e3abb0e462a06f4b7b19d4867fcd14233df4e55080036877617b394e140593cd\"" Sep 6 00:06:17.370498 kubelet[2752]: E0906 00:06:17.369629 2752 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-t8r6b" podUID="cefa6dd1-365c-4b02-b17f-1f1b3edee0dd" Sep 6 00:06:17.408017 systemd[1]: Started cri-containerd-e3abb0e462a06f4b7b19d4867fcd14233df4e55080036877617b394e140593cd.scope. Sep 6 00:06:17.456000 audit[3392]: AVC avc: denied { perfmon } for pid=3392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.456000 audit[3392]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3273 pid=3392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:17.478322 kernel: audit: type=1400 audit(1757117177.456:1014): avc: denied { perfmon } for pid=3392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.478468 kernel: audit: type=1300 audit(1757117177.456:1014): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3273 pid=3392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:17.456000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533616262306534363261303666346237623139643438363766636431 Sep 6 00:06:17.465000 audit[3392]: AVC avc: denied { bpf } for pid=3392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.498888 kernel: audit: type=1327 audit(1757117177.456:1014): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533616262306534363261303666346237623139643438363766636431 Sep 6 00:06:17.499009 kernel: audit: type=1400 audit(1757117177.465:1015): avc: denied { bpf } for pid=3392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.465000 audit[3392]: AVC avc: denied { bpf } for pid=3392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.465000 audit[3392]: AVC avc: denied { bpf } for pid=3392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.465000 audit[3392]: AVC avc: denied { perfmon } for pid=3392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.465000 audit[3392]: AVC avc: denied { perfmon } for pid=3392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.465000 audit[3392]: AVC avc: denied { perfmon } for pid=3392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.465000 audit[3392]: AVC avc: denied { perfmon } for pid=3392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.465000 audit[3392]: AVC avc: denied { perfmon } for pid=3392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.465000 audit[3392]: AVC avc: denied { bpf } for pid=3392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.465000 audit[3392]: AVC avc: denied { bpf } for pid=3392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.465000 audit: BPF prog-id=136 op=LOAD Sep 6 00:06:17.465000 audit[3392]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3273 pid=3392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:17.465000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533616262306534363261303666346237623139643438363766636431 Sep 6 00:06:17.465000 audit[3392]: AVC avc: denied { bpf } for pid=3392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.465000 audit[3392]: AVC avc: denied { bpf } for pid=3392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.465000 audit[3392]: AVC avc: denied { perfmon } for pid=3392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.465000 audit[3392]: AVC avc: denied { perfmon } for pid=3392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.465000 audit[3392]: AVC avc: denied { perfmon } for pid=3392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.465000 audit[3392]: AVC avc: denied { perfmon } for pid=3392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.465000 audit[3392]: AVC avc: denied { perfmon } for pid=3392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.465000 audit[3392]: AVC avc: denied { bpf } for pid=3392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.465000 audit[3392]: AVC avc: denied { bpf } for pid=3392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.465000 audit: BPF prog-id=137 op=LOAD Sep 6 00:06:17.465000 audit[3392]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3273 pid=3392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:17.465000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533616262306534363261303666346237623139643438363766636431 Sep 6 00:06:17.465000 audit: BPF prog-id=137 op=UNLOAD Sep 6 00:06:17.465000 audit: BPF prog-id=136 op=UNLOAD Sep 6 00:06:17.465000 audit[3392]: AVC avc: denied { bpf } for pid=3392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.465000 audit[3392]: AVC avc: denied { bpf } for pid=3392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.465000 audit[3392]: AVC avc: denied { bpf } for pid=3392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.465000 audit[3392]: AVC avc: denied { perfmon } for pid=3392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.465000 audit[3392]: AVC avc: denied { perfmon } for pid=3392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.465000 audit[3392]: AVC avc: denied { perfmon } for pid=3392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.465000 audit[3392]: AVC avc: denied { perfmon } for pid=3392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.465000 audit[3392]: AVC avc: denied { perfmon } for pid=3392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.465000 audit[3392]: AVC avc: denied { bpf } for pid=3392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.465000 audit[3392]: AVC avc: denied { bpf } for pid=3392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:17.465000 audit: BPF prog-id=138 op=LOAD Sep 6 00:06:17.465000 audit[3392]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3273 pid=3392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:17.465000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533616262306534363261303666346237623139643438363766636431 Sep 6 00:06:17.532237 env[1646]: time="2025-09-06T00:06:17.532171331Z" level=info msg="StartContainer for \"e3abb0e462a06f4b7b19d4867fcd14233df4e55080036877617b394e140593cd\" returns successfully" Sep 6 00:06:17.562503 systemd[1]: cri-containerd-e3abb0e462a06f4b7b19d4867fcd14233df4e55080036877617b394e140593cd.scope: Deactivated successfully. Sep 6 00:06:17.565000 audit: BPF prog-id=138 op=UNLOAD Sep 6 00:06:17.954791 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e3abb0e462a06f4b7b19d4867fcd14233df4e55080036877617b394e140593cd-rootfs.mount: Deactivated successfully. Sep 6 00:06:17.967519 env[1646]: time="2025-09-06T00:06:17.966972088Z" level=info msg="shim disconnected" id=e3abb0e462a06f4b7b19d4867fcd14233df4e55080036877617b394e140593cd Sep 6 00:06:17.967519 env[1646]: time="2025-09-06T00:06:17.967098241Z" level=warning msg="cleaning up after shim disconnected" id=e3abb0e462a06f4b7b19d4867fcd14233df4e55080036877617b394e140593cd namespace=k8s.io Sep 6 00:06:17.967519 env[1646]: time="2025-09-06T00:06:17.967185370Z" level=info msg="cleaning up dead shim" Sep 6 00:06:17.982663 env[1646]: time="2025-09-06T00:06:17.982587963Z" level=warning msg="cleanup warnings time=\"2025-09-06T00:06:17Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3437 runtime=io.containerd.runc.v2\n" Sep 6 00:06:18.633282 env[1646]: time="2025-09-06T00:06:18.633100175Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\"" Sep 6 00:06:19.369484 kubelet[2752]: E0906 00:06:19.369420 2752 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-t8r6b" podUID="cefa6dd1-365c-4b02-b17f-1f1b3edee0dd" Sep 6 00:06:21.373918 kubelet[2752]: E0906 00:06:21.373854 2752 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-t8r6b" podUID="cefa6dd1-365c-4b02-b17f-1f1b3edee0dd" Sep 6 00:06:21.872000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6764 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:06:21.874722 kernel: kauditd_printk_skb: 40 callbacks suppressed Sep 6 00:06:21.874840 kernel: audit: type=1400 audit(1757117181.872:1021): avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6764 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:06:21.872000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002b3d2c0 a2=fc6 a3=0 items=0 ppid=2249 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 key=(null) Sep 6 00:06:21.897299 kernel: audit: type=1300 audit(1757117181.872:1021): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002b3d2c0 a2=fc6 a3=0 items=0 ppid=2249 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 key=(null) Sep 6 00:06:21.872000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:06:21.908001 kernel: audit: type=1327 audit(1757117181.872:1021): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:06:21.908207 kernel: audit: type=1400 audit(1757117181.884:1022): avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:06:21.884000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:06:21.884000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400133cb20 a2=fc6 a3=0 items=0 ppid=2249 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 key=(null) Sep 6 00:06:21.929847 kernel: audit: type=1300 audit(1757117181.884:1022): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400133cb20 a2=fc6 a3=0 items=0 ppid=2249 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 key=(null) Sep 6 00:06:21.884000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:06:21.941147 kernel: audit: type=1327 audit(1757117181.884:1022): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:06:22.521704 env[1646]: time="2025-09-06T00:06:22.521644420Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:22.524353 env[1646]: time="2025-09-06T00:06:22.524298966Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7077a1dc632ee598cbfa626f9e3c9bca5b20c0d1e1e557995890125b2e8d2e23,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:22.528155 env[1646]: time="2025-09-06T00:06:22.528063047Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:22.531963 env[1646]: time="2025-09-06T00:06:22.531909126Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:73d1e391050490d54e5bee8ff2b1a50a8be1746c98dc530361b00e8c0ab63f87,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:22.534367 env[1646]: time="2025-09-06T00:06:22.533518381Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\" returns image reference \"sha256:7077a1dc632ee598cbfa626f9e3c9bca5b20c0d1e1e557995890125b2e8d2e23\"" Sep 6 00:06:22.543795 env[1646]: time="2025-09-06T00:06:22.543695341Z" level=info msg="CreateContainer within sandbox \"5985b34aa5664a0a8ea75dee660f470a2f5f4f83714a50c7e8b31cff504580de\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Sep 6 00:06:22.568793 env[1646]: time="2025-09-06T00:06:22.568691925Z" level=info msg="CreateContainer within sandbox \"5985b34aa5664a0a8ea75dee660f470a2f5f4f83714a50c7e8b31cff504580de\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"1993f74cb6d6d114bee89ef03a228cf707cb303138b0356bf21831ac0b9dc853\"" Sep 6 00:06:22.571657 env[1646]: time="2025-09-06T00:06:22.570391024Z" level=info msg="StartContainer for \"1993f74cb6d6d114bee89ef03a228cf707cb303138b0356bf21831ac0b9dc853\"" Sep 6 00:06:22.614301 systemd[1]: Started cri-containerd-1993f74cb6d6d114bee89ef03a228cf707cb303138b0356bf21831ac0b9dc853.scope. Sep 6 00:06:22.633070 systemd[1]: run-containerd-runc-k8s.io-1993f74cb6d6d114bee89ef03a228cf707cb303138b0356bf21831ac0b9dc853-runc.rday6d.mount: Deactivated successfully. Sep 6 00:06:22.678000 audit[3458]: AVC avc: denied { perfmon } for pid=3458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.678000 audit[3458]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3273 pid=3458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:22.699216 kernel: audit: type=1400 audit(1757117182.678:1023): avc: denied { perfmon } for pid=3458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.699380 kernel: audit: type=1300 audit(1757117182.678:1023): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3273 pid=3458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:22.678000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139393366373463623664366431313462656538396566303361323238 Sep 6 00:06:22.710547 kernel: audit: type=1327 audit(1757117182.678:1023): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139393366373463623664366431313462656538396566303361323238 Sep 6 00:06:22.678000 audit[3458]: AVC avc: denied { bpf } for pid=3458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.718633 kernel: audit: type=1400 audit(1757117182.678:1024): avc: denied { bpf } for pid=3458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.678000 audit[3458]: AVC avc: denied { bpf } for pid=3458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.678000 audit[3458]: AVC avc: denied { bpf } for pid=3458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.678000 audit[3458]: AVC avc: denied { perfmon } for pid=3458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.678000 audit[3458]: AVC avc: denied { perfmon } for pid=3458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.678000 audit[3458]: AVC avc: denied { perfmon } for pid=3458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.678000 audit[3458]: AVC avc: denied { perfmon } for pid=3458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.678000 audit[3458]: AVC avc: denied { perfmon } for pid=3458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.678000 audit[3458]: AVC avc: denied { bpf } for pid=3458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.678000 audit[3458]: AVC avc: denied { bpf } for pid=3458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.678000 audit: BPF prog-id=139 op=LOAD Sep 6 00:06:22.678000 audit[3458]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3273 pid=3458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:22.678000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139393366373463623664366431313462656538396566303361323238 Sep 6 00:06:22.686000 audit[3458]: AVC avc: denied { bpf } for pid=3458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.686000 audit[3458]: AVC avc: denied { bpf } for pid=3458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.686000 audit[3458]: AVC avc: denied { perfmon } for pid=3458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.686000 audit[3458]: AVC avc: denied { perfmon } for pid=3458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.686000 audit[3458]: AVC avc: denied { perfmon } for pid=3458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.686000 audit[3458]: AVC avc: denied { perfmon } for pid=3458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.686000 audit[3458]: AVC avc: denied { perfmon } for pid=3458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.686000 audit[3458]: AVC avc: denied { bpf } for pid=3458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.686000 audit[3458]: AVC avc: denied { bpf } for pid=3458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.686000 audit: BPF prog-id=140 op=LOAD Sep 6 00:06:22.686000 audit[3458]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3273 pid=3458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:22.686000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139393366373463623664366431313462656538396566303361323238 Sep 6 00:06:22.686000 audit: BPF prog-id=140 op=UNLOAD Sep 6 00:06:22.686000 audit: BPF prog-id=139 op=UNLOAD Sep 6 00:06:22.686000 audit[3458]: AVC avc: denied { bpf } for pid=3458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.686000 audit[3458]: AVC avc: denied { bpf } for pid=3458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.686000 audit[3458]: AVC avc: denied { bpf } for pid=3458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.686000 audit[3458]: AVC avc: denied { perfmon } for pid=3458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.686000 audit[3458]: AVC avc: denied { perfmon } for pid=3458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.686000 audit[3458]: AVC avc: denied { perfmon } for pid=3458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.686000 audit[3458]: AVC avc: denied { perfmon } for pid=3458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.686000 audit[3458]: AVC avc: denied { perfmon } for pid=3458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.686000 audit[3458]: AVC avc: denied { bpf } for pid=3458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.686000 audit[3458]: AVC avc: denied { bpf } for pid=3458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:22.686000 audit: BPF prog-id=141 op=LOAD Sep 6 00:06:22.686000 audit[3458]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3273 pid=3458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:22.686000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139393366373463623664366431313462656538396566303361323238 Sep 6 00:06:22.751023 env[1646]: time="2025-09-06T00:06:22.750955684Z" level=info msg="StartContainer for \"1993f74cb6d6d114bee89ef03a228cf707cb303138b0356bf21831ac0b9dc853\" returns successfully" Sep 6 00:06:23.368947 kubelet[2752]: E0906 00:06:23.368848 2752 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-t8r6b" podUID="cefa6dd1-365c-4b02-b17f-1f1b3edee0dd" Sep 6 00:06:23.930200 env[1646]: time="2025-09-06T00:06:23.930048102Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 6 00:06:23.936797 systemd[1]: cri-containerd-1993f74cb6d6d114bee89ef03a228cf707cb303138b0356bf21831ac0b9dc853.scope: Deactivated successfully. Sep 6 00:06:23.937299 systemd[1]: cri-containerd-1993f74cb6d6d114bee89ef03a228cf707cb303138b0356bf21831ac0b9dc853.scope: Consumed 1.143s CPU time. Sep 6 00:06:23.939000 audit: BPF prog-id=141 op=UNLOAD Sep 6 00:06:23.975666 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1993f74cb6d6d114bee89ef03a228cf707cb303138b0356bf21831ac0b9dc853-rootfs.mount: Deactivated successfully. Sep 6 00:06:24.003158 kubelet[2752]: I0906 00:06:24.002096 2752 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Sep 6 00:06:24.108355 kubelet[2752]: I0906 00:06:24.108305 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/f9b12e81-24af-41a3-9679-1c0d02641bbd-config-volume\") pod \"coredns-674b8bbfcf-gb45h\" (UID: \"f9b12e81-24af-41a3-9679-1c0d02641bbd\") " pod="kube-system/coredns-674b8bbfcf-gb45h" Sep 6 00:06:24.135755 kubelet[2752]: I0906 00:06:24.108657 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-srzkq\" (UniqueName: \"kubernetes.io/projected/f9b12e81-24af-41a3-9679-1c0d02641bbd-kube-api-access-srzkq\") pod \"coredns-674b8bbfcf-gb45h\" (UID: \"f9b12e81-24af-41a3-9679-1c0d02641bbd\") " pod="kube-system/coredns-674b8bbfcf-gb45h" Sep 6 00:06:24.209520 kubelet[2752]: I0906 00:06:24.209381 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/4cbde096-0468-49f9-9aa1-f35dc9847a16-config-volume\") pod \"coredns-674b8bbfcf-8tmgs\" (UID: \"4cbde096-0468-49f9-9aa1-f35dc9847a16\") " pod="kube-system/coredns-674b8bbfcf-8tmgs" Sep 6 00:06:24.209839 kubelet[2752]: I0906 00:06:24.209802 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9qsm2\" (UniqueName: \"kubernetes.io/projected/4cbde096-0468-49f9-9aa1-f35dc9847a16-kube-api-access-9qsm2\") pod \"coredns-674b8bbfcf-8tmgs\" (UID: \"4cbde096-0468-49f9-9aa1-f35dc9847a16\") " pod="kube-system/coredns-674b8bbfcf-8tmgs" Sep 6 00:06:24.211052 systemd[1]: Created slice kubepods-burstable-podf9b12e81_24af_41a3_9679_1c0d02641bbd.slice. Sep 6 00:06:24.291040 systemd[1]: Created slice kubepods-besteffort-poda3b5e26a_8037_44a1_b60c_ca22c74c201c.slice. Sep 6 00:06:24.310427 kubelet[2752]: I0906 00:06:24.310377 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/a3b5e26a-8037-44a1-b60c-ca22c74c201c-tigera-ca-bundle\") pod \"calico-kube-controllers-747d8dffd6-vmfb7\" (UID: \"a3b5e26a-8037-44a1-b60c-ca22c74c201c\") " pod="calico-system/calico-kube-controllers-747d8dffd6-vmfb7" Sep 6 00:06:24.310814 kubelet[2752]: I0906 00:06:24.310778 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-d5qct\" (UniqueName: \"kubernetes.io/projected/a3b5e26a-8037-44a1-b60c-ca22c74c201c-kube-api-access-d5qct\") pod \"calico-kube-controllers-747d8dffd6-vmfb7\" (UID: \"a3b5e26a-8037-44a1-b60c-ca22c74c201c\") " pod="calico-system/calico-kube-controllers-747d8dffd6-vmfb7" Sep 6 00:06:24.442758 env[1646]: time="2025-09-06T00:06:24.442171178Z" level=info msg="shim disconnected" id=1993f74cb6d6d114bee89ef03a228cf707cb303138b0356bf21831ac0b9dc853 Sep 6 00:06:24.442758 env[1646]: time="2025-09-06T00:06:24.442398656Z" level=warning msg="cleaning up after shim disconnected" id=1993f74cb6d6d114bee89ef03a228cf707cb303138b0356bf21831ac0b9dc853 namespace=k8s.io Sep 6 00:06:24.442758 env[1646]: time="2025-09-06T00:06:24.442421870Z" level=info msg="cleaning up dead shim" Sep 6 00:06:24.468565 env[1646]: time="2025-09-06T00:06:24.467379383Z" level=warning msg="cleanup warnings time=\"2025-09-06T00:06:24Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3505 runtime=io.containerd.runc.v2\n" Sep 6 00:06:24.479725 systemd[1]: Created slice kubepods-burstable-pod4cbde096_0468_49f9_9aa1_f35dc9847a16.slice. Sep 6 00:06:24.498279 env[1646]: time="2025-09-06T00:06:24.497737157Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-8tmgs,Uid:4cbde096-0468-49f9-9aa1-f35dc9847a16,Namespace:kube-system,Attempt:0,}" Sep 6 00:06:24.508167 systemd[1]: Created slice kubepods-besteffort-pod0ffda2a7_27c9_45ec_8bc5_704a343f8479.slice. Sep 6 00:06:24.513503 kubelet[2752]: I0906 00:06:24.513452 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fcmll\" (UniqueName: \"kubernetes.io/projected/0ffda2a7-27c9-45ec-8bc5-704a343f8479-kube-api-access-fcmll\") pod \"calico-apiserver-6df8d98b58-2jfmb\" (UID: \"0ffda2a7-27c9-45ec-8bc5-704a343f8479\") " pod="calico-apiserver/calico-apiserver-6df8d98b58-2jfmb" Sep 6 00:06:24.514419 kubelet[2752]: I0906 00:06:24.514374 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fqpgc\" (UniqueName: \"kubernetes.io/projected/2807de6d-3101-4685-bb25-ce6118c040a2-kube-api-access-fqpgc\") pod \"whisker-7488f86fd4-b5kz9\" (UID: \"2807de6d-3101-4685-bb25-ce6118c040a2\") " pod="calico-system/whisker-7488f86fd4-b5kz9" Sep 6 00:06:24.514695 kubelet[2752]: I0906 00:06:24.514628 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/5c12b22f-4b8f-447e-b91b-6664f072632b-goldmane-key-pair\") pod \"goldmane-54d579b49d-4jk72\" (UID: \"5c12b22f-4b8f-447e-b91b-6664f072632b\") " pod="calico-system/goldmane-54d579b49d-4jk72" Sep 6 00:06:24.514988 kubelet[2752]: I0906 00:06:24.514951 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/0ffda2a7-27c9-45ec-8bc5-704a343f8479-calico-apiserver-certs\") pod \"calico-apiserver-6df8d98b58-2jfmb\" (UID: \"0ffda2a7-27c9-45ec-8bc5-704a343f8479\") " pod="calico-apiserver/calico-apiserver-6df8d98b58-2jfmb" Sep 6 00:06:24.515388 kubelet[2752]: I0906 00:06:24.515351 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/7191207d-0cc6-4bca-8195-a5e86eef3210-calico-apiserver-certs\") pod \"calico-apiserver-6df8d98b58-z8s4t\" (UID: \"7191207d-0cc6-4bca-8195-a5e86eef3210\") " pod="calico-apiserver/calico-apiserver-6df8d98b58-z8s4t" Sep 6 00:06:24.515736 kubelet[2752]: I0906 00:06:24.515680 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/2807de6d-3101-4685-bb25-ce6118c040a2-whisker-backend-key-pair\") pod \"whisker-7488f86fd4-b5kz9\" (UID: \"2807de6d-3101-4685-bb25-ce6118c040a2\") " pod="calico-system/whisker-7488f86fd4-b5kz9" Sep 6 00:06:24.523992 kubelet[2752]: I0906 00:06:24.523926 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/2807de6d-3101-4685-bb25-ce6118c040a2-whisker-ca-bundle\") pod \"whisker-7488f86fd4-b5kz9\" (UID: \"2807de6d-3101-4685-bb25-ce6118c040a2\") " pod="calico-system/whisker-7488f86fd4-b5kz9" Sep 6 00:06:24.526759 kubelet[2752]: I0906 00:06:24.526712 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/5c12b22f-4b8f-447e-b91b-6664f072632b-config\") pod \"goldmane-54d579b49d-4jk72\" (UID: \"5c12b22f-4b8f-447e-b91b-6664f072632b\") " pod="calico-system/goldmane-54d579b49d-4jk72" Sep 6 00:06:24.527965 kubelet[2752]: I0906 00:06:24.527914 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/5c12b22f-4b8f-447e-b91b-6664f072632b-goldmane-ca-bundle\") pod \"goldmane-54d579b49d-4jk72\" (UID: \"5c12b22f-4b8f-447e-b91b-6664f072632b\") " pod="calico-system/goldmane-54d579b49d-4jk72" Sep 6 00:06:24.529467 kubelet[2752]: I0906 00:06:24.529402 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ltpjg\" (UniqueName: \"kubernetes.io/projected/5c12b22f-4b8f-447e-b91b-6664f072632b-kube-api-access-ltpjg\") pod \"goldmane-54d579b49d-4jk72\" (UID: \"5c12b22f-4b8f-447e-b91b-6664f072632b\") " pod="calico-system/goldmane-54d579b49d-4jk72" Sep 6 00:06:24.529991 kubelet[2752]: I0906 00:06:24.529911 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bjzql\" (UniqueName: \"kubernetes.io/projected/7191207d-0cc6-4bca-8195-a5e86eef3210-kube-api-access-bjzql\") pod \"calico-apiserver-6df8d98b58-z8s4t\" (UID: \"7191207d-0cc6-4bca-8195-a5e86eef3210\") " pod="calico-apiserver/calico-apiserver-6df8d98b58-z8s4t" Sep 6 00:06:24.533305 env[1646]: time="2025-09-06T00:06:24.532863304Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-gb45h,Uid:f9b12e81-24af-41a3-9679-1c0d02641bbd,Namespace:kube-system,Attempt:0,}" Sep 6 00:06:24.565140 systemd[1]: Created slice kubepods-besteffort-pod7191207d_0cc6_4bca_8195_a5e86eef3210.slice. Sep 6 00:06:24.598236 env[1646]: time="2025-09-06T00:06:24.598144546Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-747d8dffd6-vmfb7,Uid:a3b5e26a-8037-44a1-b60c-ca22c74c201c,Namespace:calico-system,Attempt:0,}" Sep 6 00:06:24.605158 systemd[1]: Created slice kubepods-besteffort-pod2807de6d_3101_4685_bb25_ce6118c040a2.slice. Sep 6 00:06:24.624361 systemd[1]: Created slice kubepods-besteffort-podcefa6dd1_365c_4b02_b17f_1f1b3edee0dd.slice. Sep 6 00:06:24.638325 env[1646]: time="2025-09-06T00:06:24.638259105Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-t8r6b,Uid:cefa6dd1-365c-4b02-b17f-1f1b3edee0dd,Namespace:calico-system,Attempt:0,}" Sep 6 00:06:24.691424 systemd[1]: Created slice kubepods-besteffort-pod5c12b22f_4b8f_447e_b91b_6664f072632b.slice. Sep 6 00:06:24.778038 env[1646]: time="2025-09-06T00:06:24.774558383Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\"" Sep 6 00:06:24.863015 env[1646]: time="2025-09-06T00:06:24.862961359Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6df8d98b58-2jfmb,Uid:0ffda2a7-27c9-45ec-8bc5-704a343f8479,Namespace:calico-apiserver,Attempt:0,}" Sep 6 00:06:24.895249 env[1646]: time="2025-09-06T00:06:24.895164726Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6df8d98b58-z8s4t,Uid:7191207d-0cc6-4bca-8195-a5e86eef3210,Namespace:calico-apiserver,Attempt:0,}" Sep 6 00:06:24.925761 env[1646]: time="2025-09-06T00:06:24.925677096Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7488f86fd4-b5kz9,Uid:2807de6d-3101-4685-bb25-ce6118c040a2,Namespace:calico-system,Attempt:0,}" Sep 6 00:06:25.037475 env[1646]: time="2025-09-06T00:06:25.036799262Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-4jk72,Uid:5c12b22f-4b8f-447e-b91b-6664f072632b,Namespace:calico-system,Attempt:0,}" Sep 6 00:06:25.109000 audit[2429]: AVC avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:06:25.109000 audit[2429]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=40054650e0 a2=fc6 a3=0 items=0 ppid=2279 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 key=(null) Sep 6 00:06:25.109000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 00:06:25.121000 audit[2429]: AVC avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6764 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:06:25.121000 audit[2429]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=4005465470 a2=fc6 a3=0 items=0 ppid=2279 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 key=(null) Sep 6 00:06:25.121000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 00:06:25.151000 audit[2429]: AVC avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:06:25.151000 audit[2429]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=40056cb100 a2=fc6 a3=0 items=0 ppid=2279 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 key=(null) Sep 6 00:06:25.151000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 00:06:25.152000 audit[2429]: AVC avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6764 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:06:25.152000 audit[2429]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=40054654d0 a2=fc6 a3=0 items=0 ppid=2279 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 key=(null) Sep 6 00:06:25.152000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 00:06:25.267361 env[1646]: time="2025-09-06T00:06:25.267263439Z" level=error msg="Failed to destroy network for sandbox \"10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.271000 audit[2429]: AVC avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=6766 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:06:25.271000 audit[2429]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=4000c09080 a2=fc6 a3=0 items=0 ppid=2279 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 key=(null) Sep 6 00:06:25.271000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 00:06:25.272203 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2-shm.mount: Deactivated successfully. Sep 6 00:06:25.272000 audit[2429]: AVC avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:06:25.272000 audit[2429]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=400a8cbd80 a2=fc6 a3=0 items=0 ppid=2279 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 key=(null) Sep 6 00:06:25.272000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 00:06:25.275818 env[1646]: time="2025-09-06T00:06:25.275739616Z" level=error msg="encountered an error cleaning up failed sandbox \"10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.276218 env[1646]: time="2025-09-06T00:06:25.276056536Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-747d8dffd6-vmfb7,Uid:a3b5e26a-8037-44a1-b60c-ca22c74c201c,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.280017 kubelet[2752]: E0906 00:06:25.279933 2752 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.280250 kubelet[2752]: E0906 00:06:25.280071 2752 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-747d8dffd6-vmfb7" Sep 6 00:06:25.280250 kubelet[2752]: E0906 00:06:25.280143 2752 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-747d8dffd6-vmfb7" Sep 6 00:06:25.280428 kubelet[2752]: E0906 00:06:25.280231 2752 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-747d8dffd6-vmfb7_calico-system(a3b5e26a-8037-44a1-b60c-ca22c74c201c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-747d8dffd6-vmfb7_calico-system(a3b5e26a-8037-44a1-b60c-ca22c74c201c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-747d8dffd6-vmfb7" podUID="a3b5e26a-8037-44a1-b60c-ca22c74c201c" Sep 6 00:06:25.303048 env[1646]: time="2025-09-06T00:06:25.300945408Z" level=error msg="Failed to destroy network for sandbox \"9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.312616 env[1646]: time="2025-09-06T00:06:25.306590487Z" level=error msg="encountered an error cleaning up failed sandbox \"9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.312616 env[1646]: time="2025-09-06T00:06:25.306715318Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-gb45h,Uid:f9b12e81-24af-41a3-9679-1c0d02641bbd,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.310597 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1-shm.mount: Deactivated successfully. Sep 6 00:06:25.313066 kubelet[2752]: E0906 00:06:25.307017 2752 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.313066 kubelet[2752]: E0906 00:06:25.307157 2752 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-gb45h" Sep 6 00:06:25.313066 kubelet[2752]: E0906 00:06:25.307194 2752 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-gb45h" Sep 6 00:06:25.313066 kubelet[2752]: E0906 00:06:25.307270 2752 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-gb45h_kube-system(f9b12e81-24af-41a3-9679-1c0d02641bbd)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-gb45h_kube-system(f9b12e81-24af-41a3-9679-1c0d02641bbd)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-gb45h" podUID="f9b12e81-24af-41a3-9679-1c0d02641bbd" Sep 6 00:06:25.314439 env[1646]: time="2025-09-06T00:06:25.314367729Z" level=error msg="Failed to destroy network for sandbox \"d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.315430 env[1646]: time="2025-09-06T00:06:25.315359170Z" level=error msg="encountered an error cleaning up failed sandbox \"d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.315714 env[1646]: time="2025-09-06T00:06:25.315659821Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-8tmgs,Uid:4cbde096-0468-49f9-9aa1-f35dc9847a16,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.316281 kubelet[2752]: E0906 00:06:25.316189 2752 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.316450 kubelet[2752]: E0906 00:06:25.316278 2752 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-8tmgs" Sep 6 00:06:25.316450 kubelet[2752]: E0906 00:06:25.316314 2752 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-8tmgs" Sep 6 00:06:25.316450 kubelet[2752]: E0906 00:06:25.316391 2752 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-8tmgs_kube-system(4cbde096-0468-49f9-9aa1-f35dc9847a16)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-8tmgs_kube-system(4cbde096-0468-49f9-9aa1-f35dc9847a16)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-8tmgs" podUID="4cbde096-0468-49f9-9aa1-f35dc9847a16" Sep 6 00:06:25.374321 env[1646]: time="2025-09-06T00:06:25.374252402Z" level=error msg="Failed to destroy network for sandbox \"eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.375620 env[1646]: time="2025-09-06T00:06:25.375526786Z" level=error msg="encountered an error cleaning up failed sandbox \"eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.376525 env[1646]: time="2025-09-06T00:06:25.376426016Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-t8r6b,Uid:cefa6dd1-365c-4b02-b17f-1f1b3edee0dd,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.377246 kubelet[2752]: E0906 00:06:25.377093 2752 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.377402 kubelet[2752]: E0906 00:06:25.377252 2752 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-t8r6b" Sep 6 00:06:25.377402 kubelet[2752]: E0906 00:06:25.377292 2752 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-t8r6b" Sep 6 00:06:25.377402 kubelet[2752]: E0906 00:06:25.377380 2752 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-t8r6b_calico-system(cefa6dd1-365c-4b02-b17f-1f1b3edee0dd)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-t8r6b_calico-system(cefa6dd1-365c-4b02-b17f-1f1b3edee0dd)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-t8r6b" podUID="cefa6dd1-365c-4b02-b17f-1f1b3edee0dd" Sep 6 00:06:25.387729 env[1646]: time="2025-09-06T00:06:25.387626361Z" level=error msg="Failed to destroy network for sandbox \"4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.389273 env[1646]: time="2025-09-06T00:06:25.389182261Z" level=error msg="encountered an error cleaning up failed sandbox \"4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.389469 env[1646]: time="2025-09-06T00:06:25.389291400Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6df8d98b58-2jfmb,Uid:0ffda2a7-27c9-45ec-8bc5-704a343f8479,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.391320 kubelet[2752]: E0906 00:06:25.389791 2752 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.391320 kubelet[2752]: E0906 00:06:25.389900 2752 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6df8d98b58-2jfmb" Sep 6 00:06:25.391320 kubelet[2752]: E0906 00:06:25.389939 2752 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6df8d98b58-2jfmb" Sep 6 00:06:25.391320 kubelet[2752]: E0906 00:06:25.390016 2752 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-6df8d98b58-2jfmb_calico-apiserver(0ffda2a7-27c9-45ec-8bc5-704a343f8479)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-6df8d98b58-2jfmb_calico-apiserver(0ffda2a7-27c9-45ec-8bc5-704a343f8479)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6df8d98b58-2jfmb" podUID="0ffda2a7-27c9-45ec-8bc5-704a343f8479" Sep 6 00:06:25.420023 env[1646]: time="2025-09-06T00:06:25.419931755Z" level=error msg="Failed to destroy network for sandbox \"e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.420702 env[1646]: time="2025-09-06T00:06:25.420625040Z" level=error msg="encountered an error cleaning up failed sandbox \"e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.420807 env[1646]: time="2025-09-06T00:06:25.420723213Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6df8d98b58-z8s4t,Uid:7191207d-0cc6-4bca-8195-a5e86eef3210,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.422654 kubelet[2752]: E0906 00:06:25.421182 2752 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.422654 kubelet[2752]: E0906 00:06:25.421275 2752 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6df8d98b58-z8s4t" Sep 6 00:06:25.422654 kubelet[2752]: E0906 00:06:25.421314 2752 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6df8d98b58-z8s4t" Sep 6 00:06:25.422654 kubelet[2752]: E0906 00:06:25.421389 2752 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-6df8d98b58-z8s4t_calico-apiserver(7191207d-0cc6-4bca-8195-a5e86eef3210)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-6df8d98b58-z8s4t_calico-apiserver(7191207d-0cc6-4bca-8195-a5e86eef3210)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6df8d98b58-z8s4t" podUID="7191207d-0cc6-4bca-8195-a5e86eef3210" Sep 6 00:06:25.441907 env[1646]: time="2025-09-06T00:06:25.441817164Z" level=error msg="Failed to destroy network for sandbox \"22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.442787 env[1646]: time="2025-09-06T00:06:25.442556650Z" level=error msg="encountered an error cleaning up failed sandbox \"22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.442787 env[1646]: time="2025-09-06T00:06:25.442679946Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7488f86fd4-b5kz9,Uid:2807de6d-3101-4685-bb25-ce6118c040a2,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.446184 kubelet[2752]: E0906 00:06:25.443442 2752 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.446184 kubelet[2752]: E0906 00:06:25.443591 2752 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-7488f86fd4-b5kz9" Sep 6 00:06:25.446184 kubelet[2752]: E0906 00:06:25.443655 2752 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-7488f86fd4-b5kz9" Sep 6 00:06:25.446184 kubelet[2752]: E0906 00:06:25.443770 2752 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-7488f86fd4-b5kz9_calico-system(2807de6d-3101-4685-bb25-ce6118c040a2)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-7488f86fd4-b5kz9_calico-system(2807de6d-3101-4685-bb25-ce6118c040a2)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-7488f86fd4-b5kz9" podUID="2807de6d-3101-4685-bb25-ce6118c040a2" Sep 6 00:06:25.474688 env[1646]: time="2025-09-06T00:06:25.473922443Z" level=error msg="Failed to destroy network for sandbox \"8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.475406 env[1646]: time="2025-09-06T00:06:25.475322342Z" level=error msg="encountered an error cleaning up failed sandbox \"8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.475566 env[1646]: time="2025-09-06T00:06:25.475431745Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-4jk72,Uid:5c12b22f-4b8f-447e-b91b-6664f072632b,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.475842 kubelet[2752]: E0906 00:06:25.475767 2752 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:25.476018 kubelet[2752]: E0906 00:06:25.475858 2752 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-54d579b49d-4jk72" Sep 6 00:06:25.476018 kubelet[2752]: E0906 00:06:25.475905 2752 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-54d579b49d-4jk72" Sep 6 00:06:25.476018 kubelet[2752]: E0906 00:06:25.475984 2752 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-54d579b49d-4jk72_calico-system(5c12b22f-4b8f-447e-b91b-6664f072632b)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-54d579b49d-4jk72_calico-system(5c12b22f-4b8f-447e-b91b-6664f072632b)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-54d579b49d-4jk72" podUID="5c12b22f-4b8f-447e-b91b-6664f072632b" Sep 6 00:06:25.769459 kubelet[2752]: I0906 00:06:25.768444 2752 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" Sep 6 00:06:25.770531 env[1646]: time="2025-09-06T00:06:25.770474303Z" level=info msg="StopPodSandbox for \"22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b\"" Sep 6 00:06:25.774558 kubelet[2752]: I0906 00:06:25.773698 2752 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" Sep 6 00:06:25.775067 env[1646]: time="2025-09-06T00:06:25.775020254Z" level=info msg="StopPodSandbox for \"4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8\"" Sep 6 00:06:25.777972 kubelet[2752]: I0906 00:06:25.777093 2752 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" Sep 6 00:06:25.781965 env[1646]: time="2025-09-06T00:06:25.781864205Z" level=info msg="StopPodSandbox for \"9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1\"" Sep 6 00:06:25.787820 kubelet[2752]: I0906 00:06:25.787476 2752 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" Sep 6 00:06:25.788837 env[1646]: time="2025-09-06T00:06:25.788763308Z" level=info msg="StopPodSandbox for \"8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79\"" Sep 6 00:06:25.794294 kubelet[2752]: I0906 00:06:25.793500 2752 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" Sep 6 00:06:25.795049 env[1646]: time="2025-09-06T00:06:25.794991189Z" level=info msg="StopPodSandbox for \"e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714\"" Sep 6 00:06:25.800237 kubelet[2752]: I0906 00:06:25.799516 2752 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" Sep 6 00:06:25.801187 env[1646]: time="2025-09-06T00:06:25.801129283Z" level=info msg="StopPodSandbox for \"10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2\"" Sep 6 00:06:25.806151 kubelet[2752]: I0906 00:06:25.805236 2752 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" Sep 6 00:06:25.811266 env[1646]: time="2025-09-06T00:06:25.811177592Z" level=info msg="StopPodSandbox for \"d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78\"" Sep 6 00:06:25.814570 kubelet[2752]: I0906 00:06:25.813645 2752 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" Sep 6 00:06:25.817061 env[1646]: time="2025-09-06T00:06:25.815791339Z" level=info msg="StopPodSandbox for \"eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b\"" Sep 6 00:06:25.976272 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79-shm.mount: Deactivated successfully. Sep 6 00:06:25.976467 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b-shm.mount: Deactivated successfully. Sep 6 00:06:25.976601 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714-shm.mount: Deactivated successfully. Sep 6 00:06:25.976730 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8-shm.mount: Deactivated successfully. Sep 6 00:06:25.976877 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b-shm.mount: Deactivated successfully. Sep 6 00:06:25.977006 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78-shm.mount: Deactivated successfully. Sep 6 00:06:26.056362 env[1646]: time="2025-09-06T00:06:26.056165808Z" level=error msg="StopPodSandbox for \"4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8\" failed" error="failed to destroy network for sandbox \"4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:26.057944 kubelet[2752]: E0906 00:06:26.057460 2752 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" Sep 6 00:06:26.057944 kubelet[2752]: E0906 00:06:26.057659 2752 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8"} Sep 6 00:06:26.057944 kubelet[2752]: E0906 00:06:26.057764 2752 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"0ffda2a7-27c9-45ec-8bc5-704a343f8479\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:06:26.057944 kubelet[2752]: E0906 00:06:26.057829 2752 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"0ffda2a7-27c9-45ec-8bc5-704a343f8479\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6df8d98b58-2jfmb" podUID="0ffda2a7-27c9-45ec-8bc5-704a343f8479" Sep 6 00:06:26.075456 env[1646]: time="2025-09-06T00:06:26.075380604Z" level=error msg="StopPodSandbox for \"10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2\" failed" error="failed to destroy network for sandbox \"10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:26.076240 kubelet[2752]: E0906 00:06:26.075921 2752 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" Sep 6 00:06:26.076240 kubelet[2752]: E0906 00:06:26.075990 2752 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2"} Sep 6 00:06:26.076240 kubelet[2752]: E0906 00:06:26.076060 2752 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a3b5e26a-8037-44a1-b60c-ca22c74c201c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:06:26.076240 kubelet[2752]: E0906 00:06:26.076102 2752 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a3b5e26a-8037-44a1-b60c-ca22c74c201c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-747d8dffd6-vmfb7" podUID="a3b5e26a-8037-44a1-b60c-ca22c74c201c" Sep 6 00:06:26.109639 env[1646]: time="2025-09-06T00:06:26.109560602Z" level=error msg="StopPodSandbox for \"9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1\" failed" error="failed to destroy network for sandbox \"9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:26.110453 kubelet[2752]: E0906 00:06:26.110193 2752 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" Sep 6 00:06:26.110453 kubelet[2752]: E0906 00:06:26.110289 2752 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1"} Sep 6 00:06:26.110453 kubelet[2752]: E0906 00:06:26.110346 2752 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"f9b12e81-24af-41a3-9679-1c0d02641bbd\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:06:26.110453 kubelet[2752]: E0906 00:06:26.110394 2752 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"f9b12e81-24af-41a3-9679-1c0d02641bbd\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-gb45h" podUID="f9b12e81-24af-41a3-9679-1c0d02641bbd" Sep 6 00:06:26.123174 env[1646]: time="2025-09-06T00:06:26.123072431Z" level=error msg="StopPodSandbox for \"22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b\" failed" error="failed to destroy network for sandbox \"22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:26.123939 kubelet[2752]: E0906 00:06:26.123676 2752 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" Sep 6 00:06:26.123939 kubelet[2752]: E0906 00:06:26.123766 2752 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b"} Sep 6 00:06:26.123939 kubelet[2752]: E0906 00:06:26.123819 2752 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"2807de6d-3101-4685-bb25-ce6118c040a2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:06:26.123939 kubelet[2752]: E0906 00:06:26.123867 2752 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"2807de6d-3101-4685-bb25-ce6118c040a2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-7488f86fd4-b5kz9" podUID="2807de6d-3101-4685-bb25-ce6118c040a2" Sep 6 00:06:26.132374 env[1646]: time="2025-09-06T00:06:26.132298973Z" level=error msg="StopPodSandbox for \"d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78\" failed" error="failed to destroy network for sandbox \"d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:26.132976 kubelet[2752]: E0906 00:06:26.132879 2752 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" Sep 6 00:06:26.133181 kubelet[2752]: E0906 00:06:26.133011 2752 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78"} Sep 6 00:06:26.133181 kubelet[2752]: E0906 00:06:26.133093 2752 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"4cbde096-0468-49f9-9aa1-f35dc9847a16\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:06:26.133389 kubelet[2752]: E0906 00:06:26.133180 2752 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"4cbde096-0468-49f9-9aa1-f35dc9847a16\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-8tmgs" podUID="4cbde096-0468-49f9-9aa1-f35dc9847a16" Sep 6 00:06:26.133679 env[1646]: time="2025-09-06T00:06:26.133609228Z" level=error msg="StopPodSandbox for \"eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b\" failed" error="failed to destroy network for sandbox \"eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:26.134361 kubelet[2752]: E0906 00:06:26.134084 2752 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" Sep 6 00:06:26.134361 kubelet[2752]: E0906 00:06:26.134183 2752 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b"} Sep 6 00:06:26.134361 kubelet[2752]: E0906 00:06:26.134237 2752 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"cefa6dd1-365c-4b02-b17f-1f1b3edee0dd\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:06:26.134361 kubelet[2752]: E0906 00:06:26.134302 2752 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"cefa6dd1-365c-4b02-b17f-1f1b3edee0dd\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-t8r6b" podUID="cefa6dd1-365c-4b02-b17f-1f1b3edee0dd" Sep 6 00:06:26.139937 env[1646]: time="2025-09-06T00:06:26.139849749Z" level=error msg="StopPodSandbox for \"e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714\" failed" error="failed to destroy network for sandbox \"e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:26.140362 kubelet[2752]: E0906 00:06:26.140266 2752 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" Sep 6 00:06:26.140473 kubelet[2752]: E0906 00:06:26.140376 2752 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714"} Sep 6 00:06:26.140571 kubelet[2752]: E0906 00:06:26.140461 2752 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"7191207d-0cc6-4bca-8195-a5e86eef3210\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:06:26.140571 kubelet[2752]: E0906 00:06:26.140532 2752 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"7191207d-0cc6-4bca-8195-a5e86eef3210\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6df8d98b58-z8s4t" podUID="7191207d-0cc6-4bca-8195-a5e86eef3210" Sep 6 00:06:26.142342 env[1646]: time="2025-09-06T00:06:26.142248992Z" level=error msg="StopPodSandbox for \"8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79\" failed" error="failed to destroy network for sandbox \"8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:06:26.143160 kubelet[2752]: E0906 00:06:26.143041 2752 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" Sep 6 00:06:26.143325 kubelet[2752]: E0906 00:06:26.143184 2752 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79"} Sep 6 00:06:26.143325 kubelet[2752]: E0906 00:06:26.143262 2752 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"5c12b22f-4b8f-447e-b91b-6664f072632b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:06:26.143527 kubelet[2752]: E0906 00:06:26.143334 2752 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"5c12b22f-4b8f-447e-b91b-6664f072632b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-54d579b49d-4jk72" podUID="5c12b22f-4b8f-447e-b91b-6664f072632b" Sep 6 00:06:30.004604 kernel: kauditd_printk_skb: 58 callbacks suppressed Sep 6 00:06:30.004821 kernel: audit: type=1400 audit(1757117189.989:1036): avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:06:29.989000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:06:29.989000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40017f51a0 a2=fc6 a3=0 items=0 ppid=2249 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 key=(null) Sep 6 00:06:30.018371 kernel: audit: type=1300 audit(1757117189.989:1036): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40017f51a0 a2=fc6 a3=0 items=0 ppid=2249 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 key=(null) Sep 6 00:06:29.989000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:06:30.029465 kernel: audit: type=1327 audit(1757117189.989:1036): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:06:30.001000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:06:30.039521 kernel: audit: type=1400 audit(1757117190.001:1038): avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:06:30.001000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:06:30.040149 kernel: audit: type=1400 audit(1757117190.001:1037): avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:06:30.001000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400177dbc0 a2=fc6 a3=0 items=0 ppid=2249 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 key=(null) Sep 6 00:06:30.001000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40017f5440 a2=fc6 a3=0 items=0 ppid=2249 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 key=(null) Sep 6 00:06:30.064194 kernel: audit: type=1300 audit(1757117190.001:1037): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400177dbc0 a2=fc6 a3=0 items=0 ppid=2249 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 key=(null) Sep 6 00:06:30.001000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:06:30.077209 kernel: audit: type=1300 audit(1757117190.001:1038): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40017f5440 a2=fc6 a3=0 items=0 ppid=2249 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 key=(null) Sep 6 00:06:30.001000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:06:30.098582 kernel: audit: type=1327 audit(1757117190.001:1037): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:06:30.098722 kernel: audit: type=1327 audit(1757117190.001:1038): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:06:30.002000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:06:30.109070 kernel: audit: type=1400 audit(1757117190.002:1039): avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:06:30.002000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400177dc00 a2=fc6 a3=0 items=0 ppid=2249 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 key=(null) Sep 6 00:06:30.002000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:06:33.176911 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount760200949.mount: Deactivated successfully. Sep 6 00:06:33.241430 env[1646]: time="2025-09-06T00:06:33.241276978Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:33.256489 env[1646]: time="2025-09-06T00:06:33.256424729Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2b8abd2140fc4464ed664d225fe38e5b90bbfcf62996b484b0fc0e0537b6a4a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:33.260275 env[1646]: time="2025-09-06T00:06:33.260199876Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:33.264463 env[1646]: time="2025-09-06T00:06:33.264399956Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:bcb8146fcaeced1e1c88fad3eaa697f1680746bd23c3e7e8d4535bc484c6f2a1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:33.265815 env[1646]: time="2025-09-06T00:06:33.265712417Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\" returns image reference \"sha256:2b8abd2140fc4464ed664d225fe38e5b90bbfcf62996b484b0fc0e0537b6a4a9\"" Sep 6 00:06:33.308249 env[1646]: time="2025-09-06T00:06:33.308156244Z" level=info msg="CreateContainer within sandbox \"5985b34aa5664a0a8ea75dee660f470a2f5f4f83714a50c7e8b31cff504580de\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Sep 6 00:06:33.348182 env[1646]: time="2025-09-06T00:06:33.348081258Z" level=info msg="CreateContainer within sandbox \"5985b34aa5664a0a8ea75dee660f470a2f5f4f83714a50c7e8b31cff504580de\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"c6a2acb69a70a3ae65c19c181429a477a85838184c46b1159dd7548b48321083\"" Sep 6 00:06:33.348917 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount927497383.mount: Deactivated successfully. Sep 6 00:06:33.351344 env[1646]: time="2025-09-06T00:06:33.351281629Z" level=info msg="StartContainer for \"c6a2acb69a70a3ae65c19c181429a477a85838184c46b1159dd7548b48321083\"" Sep 6 00:06:33.400552 systemd[1]: Started cri-containerd-c6a2acb69a70a3ae65c19c181429a477a85838184c46b1159dd7548b48321083.scope. Sep 6 00:06:33.469000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:33.469000 audit[3874]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3273 pid=3874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:33.469000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336613261636236396137306133616536356331396331383134323961 Sep 6 00:06:33.469000 audit[3874]: AVC avc: denied { bpf } for pid=3874 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:33.469000 audit[3874]: AVC avc: denied { bpf } for pid=3874 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:33.469000 audit[3874]: AVC avc: denied { bpf } for pid=3874 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:33.469000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:33.469000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:33.469000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:33.469000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:33.469000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:33.469000 audit[3874]: AVC avc: denied { bpf } for pid=3874 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:33.469000 audit[3874]: AVC avc: denied { bpf } for pid=3874 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:33.469000 audit: BPF prog-id=142 op=LOAD Sep 6 00:06:33.469000 audit[3874]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3273 pid=3874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:33.469000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336613261636236396137306133616536356331396331383134323961 Sep 6 00:06:33.469000 audit[3874]: AVC avc: denied { bpf } for pid=3874 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:33.469000 audit[3874]: AVC avc: denied { bpf } for pid=3874 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:33.469000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:33.469000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:33.469000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:33.469000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:33.469000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:33.469000 audit[3874]: AVC avc: denied { bpf } for pid=3874 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:33.469000 audit[3874]: AVC avc: denied { bpf } for pid=3874 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:33.469000 audit: BPF prog-id=143 op=LOAD Sep 6 00:06:33.469000 audit[3874]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3273 pid=3874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:33.469000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336613261636236396137306133616536356331396331383134323961 Sep 6 00:06:33.469000 audit: BPF prog-id=143 op=UNLOAD Sep 6 00:06:33.470000 audit: BPF prog-id=142 op=UNLOAD Sep 6 00:06:33.470000 audit[3874]: AVC avc: denied { bpf } for pid=3874 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:33.470000 audit[3874]: AVC avc: denied { bpf } for pid=3874 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:33.470000 audit[3874]: AVC avc: denied { bpf } for pid=3874 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:33.470000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:33.470000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:33.470000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:33.470000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:33.470000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:33.470000 audit[3874]: AVC avc: denied { bpf } for pid=3874 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:33.470000 audit[3874]: AVC avc: denied { bpf } for pid=3874 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:33.470000 audit: BPF prog-id=144 op=LOAD Sep 6 00:06:33.470000 audit[3874]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3273 pid=3874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:33.470000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336613261636236396137306133616536356331396331383134323961 Sep 6 00:06:33.525335 env[1646]: time="2025-09-06T00:06:33.525040835Z" level=info msg="StartContainer for \"c6a2acb69a70a3ae65c19c181429a477a85838184c46b1159dd7548b48321083\" returns successfully" Sep 6 00:06:33.963651 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Sep 6 00:06:33.963874 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Sep 6 00:06:34.220961 kubelet[2752]: I0906 00:06:34.220737 2752 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-5zrzm" podStartSLOduration=3.087222084 podStartE2EDuration="23.220711665s" podCreationTimestamp="2025-09-06 00:06:11 +0000 UTC" firstStartedPulling="2025-09-06 00:06:13.134703435 +0000 UTC m=+44.009153753" lastFinishedPulling="2025-09-06 00:06:33.268193016 +0000 UTC m=+64.142643334" observedRunningTime="2025-09-06 00:06:33.885621543 +0000 UTC m=+64.760071885" watchObservedRunningTime="2025-09-06 00:06:34.220711665 +0000 UTC m=+65.095161983" Sep 6 00:06:34.223945 env[1646]: time="2025-09-06T00:06:34.223890929Z" level=info msg="StopPodSandbox for \"22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b\"" Sep 6 00:06:35.816103 env[1646]: 2025-09-06 00:06:35.644 [INFO][3951] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" Sep 6 00:06:35.816103 env[1646]: 2025-09-06 00:06:35.676 [INFO][3951] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" iface="eth0" netns="/var/run/netns/cni-5622410c-8597-e167-b16b-bab49ad9d369" Sep 6 00:06:35.816103 env[1646]: 2025-09-06 00:06:35.677 [INFO][3951] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" iface="eth0" netns="/var/run/netns/cni-5622410c-8597-e167-b16b-bab49ad9d369" Sep 6 00:06:35.816103 env[1646]: 2025-09-06 00:06:35.709 [INFO][3951] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" iface="eth0" netns="/var/run/netns/cni-5622410c-8597-e167-b16b-bab49ad9d369" Sep 6 00:06:35.816103 env[1646]: 2025-09-06 00:06:35.709 [INFO][3951] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" Sep 6 00:06:35.816103 env[1646]: 2025-09-06 00:06:35.709 [INFO][3951] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" Sep 6 00:06:35.816103 env[1646]: 2025-09-06 00:06:35.784 [INFO][3993] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" HandleID="k8s-pod-network.22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" Workload="ip--172--31--29--17-k8s-whisker--7488f86fd4--b5kz9-eth0" Sep 6 00:06:35.816103 env[1646]: 2025-09-06 00:06:35.787 [INFO][3993] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:06:35.816103 env[1646]: 2025-09-06 00:06:35.787 [INFO][3993] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:06:35.816103 env[1646]: 2025-09-06 00:06:35.804 [WARNING][3993] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" HandleID="k8s-pod-network.22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" Workload="ip--172--31--29--17-k8s-whisker--7488f86fd4--b5kz9-eth0" Sep 6 00:06:35.816103 env[1646]: 2025-09-06 00:06:35.804 [INFO][3993] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" HandleID="k8s-pod-network.22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" Workload="ip--172--31--29--17-k8s-whisker--7488f86fd4--b5kz9-eth0" Sep 6 00:06:35.816103 env[1646]: 2025-09-06 00:06:35.807 [INFO][3993] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:06:35.816103 env[1646]: 2025-09-06 00:06:35.813 [INFO][3951] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" Sep 6 00:06:35.826001 systemd[1]: run-netns-cni\x2d5622410c\x2d8597\x2de167\x2db16b\x2dbab49ad9d369.mount: Deactivated successfully. Sep 6 00:06:35.852469 env[1646]: time="2025-09-06T00:06:35.852355269Z" level=info msg="TearDown network for sandbox \"22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b\" successfully" Sep 6 00:06:35.852469 env[1646]: time="2025-09-06T00:06:35.852439712Z" level=info msg="StopPodSandbox for \"22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b\" returns successfully" Sep 6 00:06:35.905907 kernel: kauditd_printk_skb: 45 callbacks suppressed Sep 6 00:06:35.906074 kernel: audit: type=1400 audit(1757117195.895:1046): avc: denied { write } for pid=4039 comm="tee" name="fd" dev="proc" ino=22310 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 00:06:35.895000 audit[4039]: AVC avc: denied { write } for pid=4039 comm="tee" name="fd" dev="proc" ino=22310 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 00:06:35.895000 audit[4039]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffec6167d9 a2=241 a3=1b6 items=1 ppid=4005 pid=4039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:35.922383 kernel: audit: type=1300 audit(1757117195.895:1046): arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffec6167d9 a2=241 a3=1b6 items=1 ppid=4005 pid=4039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:35.895000 audit: CWD cwd="/etc/service/enabled/bird6/log" Sep 6 00:06:35.929056 kernel: audit: type=1307 audit(1757117195.895:1046): cwd="/etc/service/enabled/bird6/log" Sep 6 00:06:35.895000 audit: PATH item=0 name="/dev/fd/63" inode=21306 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:06:35.939272 kernel: audit: type=1302 audit(1757117195.895:1046): item=0 name="/dev/fd/63" inode=21306 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:06:35.895000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 00:06:35.946443 kernel: audit: type=1327 audit(1757117195.895:1046): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 00:06:35.946568 kubelet[2752]: I0906 00:06:35.945663 2752 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-fqpgc\" (UniqueName: \"kubernetes.io/projected/2807de6d-3101-4685-bb25-ce6118c040a2-kube-api-access-fqpgc\") pod \"2807de6d-3101-4685-bb25-ce6118c040a2\" (UID: \"2807de6d-3101-4685-bb25-ce6118c040a2\") " Sep 6 00:06:35.946568 kubelet[2752]: I0906 00:06:35.945750 2752 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/2807de6d-3101-4685-bb25-ce6118c040a2-whisker-backend-key-pair\") pod \"2807de6d-3101-4685-bb25-ce6118c040a2\" (UID: \"2807de6d-3101-4685-bb25-ce6118c040a2\") " Sep 6 00:06:35.946568 kubelet[2752]: I0906 00:06:35.945802 2752 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/2807de6d-3101-4685-bb25-ce6118c040a2-whisker-ca-bundle\") pod \"2807de6d-3101-4685-bb25-ce6118c040a2\" (UID: \"2807de6d-3101-4685-bb25-ce6118c040a2\") " Sep 6 00:06:35.946568 kubelet[2752]: I0906 00:06:35.946511 2752 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/2807de6d-3101-4685-bb25-ce6118c040a2-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "2807de6d-3101-4685-bb25-ce6118c040a2" (UID: "2807de6d-3101-4685-bb25-ce6118c040a2"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Sep 6 00:06:35.963811 kernel: audit: type=1400 audit(1757117195.898:1047): avc: denied { write } for pid=4041 comm="tee" name="fd" dev="proc" ino=22314 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 00:06:35.898000 audit[4041]: AVC avc: denied { write } for pid=4041 comm="tee" name="fd" dev="proc" ino=22314 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 00:06:35.958098 systemd[1]: var-lib-kubelet-pods-2807de6d\x2d3101\x2d4685\x2dbb25\x2dce6118c040a2-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Sep 6 00:06:35.898000 audit[4041]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff74ce7ca a2=241 a3=1b6 items=1 ppid=4017 pid=4041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:35.977132 kernel: audit: type=1300 audit(1757117195.898:1047): arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff74ce7ca a2=241 a3=1b6 items=1 ppid=4017 pid=4041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:35.973624 systemd[1]: var-lib-kubelet-pods-2807de6d\x2d3101\x2d4685\x2dbb25\x2dce6118c040a2-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dfqpgc.mount: Deactivated successfully. Sep 6 00:06:35.979764 kubelet[2752]: I0906 00:06:35.979695 2752 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/2807de6d-3101-4685-bb25-ce6118c040a2-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "2807de6d-3101-4685-bb25-ce6118c040a2" (UID: "2807de6d-3101-4685-bb25-ce6118c040a2"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Sep 6 00:06:35.898000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Sep 6 00:06:35.981390 kubelet[2752]: I0906 00:06:35.981318 2752 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/2807de6d-3101-4685-bb25-ce6118c040a2-kube-api-access-fqpgc" (OuterVolumeSpecName: "kube-api-access-fqpgc") pod "2807de6d-3101-4685-bb25-ce6118c040a2" (UID: "2807de6d-3101-4685-bb25-ce6118c040a2"). InnerVolumeSpecName "kube-api-access-fqpgc". PluginName "kubernetes.io/projected", VolumeGIDValue "" Sep 6 00:06:35.898000 audit: PATH item=0 name="/dev/fd/63" inode=22307 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:06:35.993305 kernel: audit: type=1307 audit(1757117195.898:1047): cwd="/etc/service/enabled/node-status-reporter/log" Sep 6 00:06:35.993449 kernel: audit: type=1302 audit(1757117195.898:1047): item=0 name="/dev/fd/63" inode=22307 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:06:35.898000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 00:06:36.001705 kernel: audit: type=1327 audit(1757117195.898:1047): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 00:06:35.948000 audit[4047]: AVC avc: denied { write } for pid=4047 comm="tee" name="fd" dev="proc" ino=22339 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 00:06:35.948000 audit[4047]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd6c377c9 a2=241 a3=1b6 items=1 ppid=4015 pid=4047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:35.948000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Sep 6 00:06:35.948000 audit: PATH item=0 name="/dev/fd/63" inode=22326 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:06:35.948000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 00:06:35.980000 audit[4052]: AVC avc: denied { write } for pid=4052 comm="tee" name="fd" dev="proc" ino=21314 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 00:06:35.980000 audit[4052]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffff0677d9 a2=241 a3=1b6 items=1 ppid=4007 pid=4052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:35.980000 audit: CWD cwd="/etc/service/enabled/felix/log" Sep 6 00:06:35.980000 audit: PATH item=0 name="/dev/fd/63" inode=21309 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:06:35.980000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 00:06:36.046626 kubelet[2752]: I0906 00:06:36.046580 2752 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/2807de6d-3101-4685-bb25-ce6118c040a2-whisker-ca-bundle\") on node \"ip-172-31-29-17\" DevicePath \"\"" Sep 6 00:06:36.046884 kubelet[2752]: I0906 00:06:36.046858 2752 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-fqpgc\" (UniqueName: \"kubernetes.io/projected/2807de6d-3101-4685-bb25-ce6118c040a2-kube-api-access-fqpgc\") on node \"ip-172-31-29-17\" DevicePath \"\"" Sep 6 00:06:36.047075 kubelet[2752]: I0906 00:06:36.047050 2752 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/2807de6d-3101-4685-bb25-ce6118c040a2-whisker-backend-key-pair\") on node \"ip-172-31-29-17\" DevicePath \"\"" Sep 6 00:06:36.061000 audit[4068]: AVC avc: denied { write } for pid=4068 comm="tee" name="fd" dev="proc" ino=22348 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 00:06:36.061000 audit[4068]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd55407d9 a2=241 a3=1b6 items=1 ppid=4026 pid=4068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:36.061000 audit: CWD cwd="/etc/service/enabled/confd/log" Sep 6 00:06:36.061000 audit: PATH item=0 name="/dev/fd/63" inode=22345 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:06:36.061000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 00:06:36.133000 audit[4082]: AVC avc: denied { write } for pid=4082 comm="tee" name="fd" dev="proc" ino=22352 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 00:06:36.133000 audit[4082]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc6c6e7db a2=241 a3=1b6 items=1 ppid=4021 pid=4082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:36.133000 audit: CWD cwd="/etc/service/enabled/cni/log" Sep 6 00:06:36.133000 audit: PATH item=0 name="/dev/fd/63" inode=21333 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:06:36.133000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 00:06:36.134000 audit[4080]: AVC avc: denied { write } for pid=4080 comm="tee" name="fd" dev="proc" ino=22354 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 00:06:36.134000 audit[4080]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff633a7da a2=241 a3=1b6 items=1 ppid=4023 pid=4080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:36.134000 audit: CWD cwd="/etc/service/enabled/bird/log" Sep 6 00:06:36.134000 audit: PATH item=0 name="/dev/fd/63" inode=21332 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:06:36.134000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 00:06:36.797000 audit[4119]: AVC avc: denied { bpf } for pid=4119 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.797000 audit[4119]: AVC avc: denied { bpf } for pid=4119 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.797000 audit[4119]: AVC avc: denied { perfmon } for pid=4119 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.797000 audit[4119]: AVC avc: denied { perfmon } for pid=4119 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.797000 audit[4119]: AVC avc: denied { perfmon } for pid=4119 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.797000 audit[4119]: AVC avc: denied { perfmon } for pid=4119 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.797000 audit[4119]: AVC avc: denied { perfmon } for pid=4119 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.797000 audit[4119]: AVC avc: denied { bpf } for pid=4119 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.797000 audit[4119]: AVC avc: denied { bpf } for pid=4119 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.797000 audit: BPF prog-id=145 op=LOAD Sep 6 00:06:36.797000 audit[4119]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe3b1b838 a2=98 a3=ffffe3b1b828 items=0 ppid=4008 pid=4119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:36.797000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 6 00:06:36.799000 audit: BPF prog-id=145 op=UNLOAD Sep 6 00:06:36.800000 audit[4119]: AVC avc: denied { bpf } for pid=4119 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.800000 audit[4119]: AVC avc: denied { bpf } for pid=4119 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.800000 audit[4119]: AVC avc: denied { perfmon } for pid=4119 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.800000 audit[4119]: AVC avc: denied { perfmon } for pid=4119 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.800000 audit[4119]: AVC avc: denied { perfmon } for pid=4119 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.800000 audit[4119]: AVC avc: denied { perfmon } for pid=4119 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.800000 audit[4119]: AVC avc: denied { perfmon } for pid=4119 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.800000 audit[4119]: AVC avc: denied { bpf } for pid=4119 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.800000 audit[4119]: AVC avc: denied { bpf } for pid=4119 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.800000 audit: BPF prog-id=146 op=LOAD Sep 6 00:06:36.800000 audit[4119]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe3b1b6e8 a2=74 a3=95 items=0 ppid=4008 pid=4119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:36.800000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 6 00:06:36.801000 audit: BPF prog-id=146 op=UNLOAD Sep 6 00:06:36.801000 audit[4119]: AVC avc: denied { bpf } for pid=4119 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.801000 audit[4119]: AVC avc: denied { bpf } for pid=4119 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.801000 audit[4119]: AVC avc: denied { perfmon } for pid=4119 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.801000 audit[4119]: AVC avc: denied { perfmon } for pid=4119 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.801000 audit[4119]: AVC avc: denied { perfmon } for pid=4119 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.801000 audit[4119]: AVC avc: denied { perfmon } for pid=4119 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.801000 audit[4119]: AVC avc: denied { perfmon } for pid=4119 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.801000 audit[4119]: AVC avc: denied { bpf } for pid=4119 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.801000 audit[4119]: AVC avc: denied { bpf } for pid=4119 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.801000 audit: BPF prog-id=147 op=LOAD Sep 6 00:06:36.801000 audit[4119]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe3b1b718 a2=40 a3=ffffe3b1b748 items=0 ppid=4008 pid=4119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:36.801000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 6 00:06:36.803000 audit: BPF prog-id=147 op=UNLOAD Sep 6 00:06:36.803000 audit[4119]: AVC avc: denied { perfmon } for pid=4119 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.803000 audit[4119]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffe3b1b830 a2=50 a3=0 items=0 ppid=4008 pid=4119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:36.803000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 6 00:06:36.806000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.806000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.806000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.806000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.806000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.806000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.806000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.806000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.806000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.806000 audit: BPF prog-id=148 op=LOAD Sep 6 00:06:36.806000 audit[4120]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc3b046c8 a2=98 a3=ffffc3b046b8 items=0 ppid=4008 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:36.806000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:06:36.807000 audit: BPF prog-id=148 op=UNLOAD Sep 6 00:06:36.807000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.807000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.807000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.807000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.807000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.807000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.807000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.807000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.807000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.807000 audit: BPF prog-id=149 op=LOAD Sep 6 00:06:36.807000 audit[4120]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc3b04358 a2=74 a3=95 items=0 ppid=4008 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:36.807000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:06:36.807000 audit: BPF prog-id=149 op=UNLOAD Sep 6 00:06:36.807000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.807000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.807000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.807000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.807000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.807000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.807000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.807000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.807000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:36.807000 audit: BPF prog-id=150 op=LOAD Sep 6 00:06:36.807000 audit[4120]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc3b043b8 a2=94 a3=2 items=0 ppid=4008 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:36.807000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:06:36.807000 audit: BPF prog-id=150 op=UNLOAD Sep 6 00:06:36.863372 systemd[1]: Removed slice kubepods-besteffort-pod2807de6d_3101_4685_bb25_ce6118c040a2.slice. Sep 6 00:06:37.006294 systemd[1]: Created slice kubepods-besteffort-podc6cdf10e_7059_4b34_b3ee_100f044de3e0.slice. Sep 6 00:06:37.057835 kubelet[2752]: I0906 00:06:37.057673 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/c6cdf10e-7059-4b34-b3ee-100f044de3e0-whisker-ca-bundle\") pod \"whisker-754d5b8ff5-xnwcz\" (UID: \"c6cdf10e-7059-4b34-b3ee-100f044de3e0\") " pod="calico-system/whisker-754d5b8ff5-xnwcz" Sep 6 00:06:37.057835 kubelet[2752]: I0906 00:06:37.057779 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/c6cdf10e-7059-4b34-b3ee-100f044de3e0-whisker-backend-key-pair\") pod \"whisker-754d5b8ff5-xnwcz\" (UID: \"c6cdf10e-7059-4b34-b3ee-100f044de3e0\") " pod="calico-system/whisker-754d5b8ff5-xnwcz" Sep 6 00:06:37.058648 kubelet[2752]: I0906 00:06:37.057878 2752 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tnqnj\" (UniqueName: \"kubernetes.io/projected/c6cdf10e-7059-4b34-b3ee-100f044de3e0-kube-api-access-tnqnj\") pod \"whisker-754d5b8ff5-xnwcz\" (UID: \"c6cdf10e-7059-4b34-b3ee-100f044de3e0\") " pod="calico-system/whisker-754d5b8ff5-xnwcz" Sep 6 00:06:37.121000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.121000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.121000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.121000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.121000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.121000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.121000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.121000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.121000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.121000 audit: BPF prog-id=151 op=LOAD Sep 6 00:06:37.121000 audit[4120]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc3b04378 a2=40 a3=ffffc3b043a8 items=0 ppid=4008 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.121000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:06:37.121000 audit: BPF prog-id=151 op=UNLOAD Sep 6 00:06:37.121000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.121000 audit[4120]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffc3b04490 a2=50 a3=0 items=0 ppid=4008 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.121000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:06:37.138000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.138000 audit[4120]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc3b043e8 a2=28 a3=ffffc3b04518 items=0 ppid=4008 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.138000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:06:37.138000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.138000 audit[4120]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc3b04418 a2=28 a3=ffffc3b04548 items=0 ppid=4008 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.138000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:06:37.138000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.138000 audit[4120]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc3b042c8 a2=28 a3=ffffc3b043f8 items=0 ppid=4008 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.138000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:06:37.138000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.138000 audit[4120]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc3b04438 a2=28 a3=ffffc3b04568 items=0 ppid=4008 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.138000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:06:37.138000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.138000 audit[4120]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc3b04418 a2=28 a3=ffffc3b04548 items=0 ppid=4008 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.138000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:06:37.138000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.138000 audit[4120]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc3b04408 a2=28 a3=ffffc3b04538 items=0 ppid=4008 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.138000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:06:37.138000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.138000 audit[4120]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc3b04438 a2=28 a3=ffffc3b04568 items=0 ppid=4008 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.138000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:06:37.138000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.138000 audit[4120]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc3b04418 a2=28 a3=ffffc3b04548 items=0 ppid=4008 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.138000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:06:37.138000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.138000 audit[4120]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc3b04438 a2=28 a3=ffffc3b04568 items=0 ppid=4008 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.138000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:06:37.138000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.138000 audit[4120]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc3b04408 a2=28 a3=ffffc3b04538 items=0 ppid=4008 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.138000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:06:37.138000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.138000 audit[4120]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc3b04488 a2=28 a3=ffffc3b045c8 items=0 ppid=4008 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.138000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:06:37.139000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.139000 audit[4120]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffc3b041c0 a2=50 a3=0 items=0 ppid=4008 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.139000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:06:37.139000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.139000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.139000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.139000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.139000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.139000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.139000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.139000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.139000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.139000 audit: BPF prog-id=152 op=LOAD Sep 6 00:06:37.139000 audit[4120]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffc3b041c8 a2=94 a3=5 items=0 ppid=4008 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.139000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:06:37.139000 audit: BPF prog-id=152 op=UNLOAD Sep 6 00:06:37.139000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.139000 audit[4120]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffc3b042d0 a2=50 a3=0 items=0 ppid=4008 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.139000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:06:37.139000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.139000 audit[4120]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffc3b04418 a2=4 a3=3 items=0 ppid=4008 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.139000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:06:37.139000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.139000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.139000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.139000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.139000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.139000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.139000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.139000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.139000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.139000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.139000 audit[4120]: AVC avc: denied { confidentiality } for pid=4120 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 00:06:37.139000 audit[4120]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc3b043f8 a2=94 a3=6 items=0 ppid=4008 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.139000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:06:37.140000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.140000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.140000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.140000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.140000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.140000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.140000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.140000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.140000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.140000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.140000 audit[4120]: AVC avc: denied { confidentiality } for pid=4120 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 00:06:37.140000 audit[4120]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc3b03bc8 a2=94 a3=83 items=0 ppid=4008 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.140000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:06:37.141000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.141000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.141000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.141000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.141000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.141000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.141000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.141000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.141000 audit[4120]: AVC avc: denied { perfmon } for pid=4120 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.141000 audit[4120]: AVC avc: denied { bpf } for pid=4120 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.141000 audit[4120]: AVC avc: denied { confidentiality } for pid=4120 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 00:06:37.141000 audit[4120]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc3b03bc8 a2=94 a3=83 items=0 ppid=4008 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.141000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:06:37.219000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.219000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.219000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.219000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.219000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.219000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.219000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.219000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.219000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.219000 audit: BPF prog-id=153 op=LOAD Sep 6 00:06:37.219000 audit[4127]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe5c9cdc8 a2=98 a3=ffffe5c9cdb8 items=0 ppid=4008 pid=4127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.219000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 6 00:06:37.219000 audit: BPF prog-id=153 op=UNLOAD Sep 6 00:06:37.219000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.219000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.219000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.219000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.219000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.219000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.219000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.219000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.219000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.219000 audit: BPF prog-id=154 op=LOAD Sep 6 00:06:37.219000 audit[4127]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe5c9cc78 a2=74 a3=95 items=0 ppid=4008 pid=4127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.219000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 6 00:06:37.219000 audit: BPF prog-id=154 op=UNLOAD Sep 6 00:06:37.219000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.219000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.219000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.219000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.219000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.219000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.219000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.219000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.219000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.219000 audit: BPF prog-id=155 op=LOAD Sep 6 00:06:37.219000 audit[4127]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe5c9cca8 a2=40 a3=ffffe5c9ccd8 items=0 ppid=4008 pid=4127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.219000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 6 00:06:37.220000 audit: BPF prog-id=155 op=UNLOAD Sep 6 00:06:37.316097 env[1646]: time="2025-09-06T00:06:37.315925211Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-754d5b8ff5-xnwcz,Uid:c6cdf10e-7059-4b34-b3ee-100f044de3e0,Namespace:calico-system,Attempt:0,}" Sep 6 00:06:37.376926 kubelet[2752]: I0906 00:06:37.376858 2752 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="2807de6d-3101-4685-bb25-ce6118c040a2" path="/var/lib/kubelet/pods/2807de6d-3101-4685-bb25-ce6118c040a2/volumes" Sep 6 00:06:37.382632 env[1646]: time="2025-09-06T00:06:37.380411998Z" level=info msg="StopPodSandbox for \"10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2\"" Sep 6 00:06:37.577939 (udev-worker)[4138]: Network interface NamePolicy= disabled on kernel command line. Sep 6 00:06:37.594450 systemd-networkd[1361]: vxlan.calico: Link UP Sep 6 00:06:37.594466 systemd-networkd[1361]: vxlan.calico: Gained carrier Sep 6 00:06:37.766752 (udev-worker)[4175]: Network interface NamePolicy= disabled on kernel command line. Sep 6 00:06:37.769000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.769000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.769000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.769000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.769000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.769000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.769000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.769000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.769000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.769000 audit: BPF prog-id=156 op=LOAD Sep 6 00:06:37.769000 audit[4195]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffb02d978 a2=98 a3=fffffb02d968 items=0 ppid=4008 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.769000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:06:37.769000 audit: BPF prog-id=156 op=UNLOAD Sep 6 00:06:37.769000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.769000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.769000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.769000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.769000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.769000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.769000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.769000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.769000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.769000 audit: BPF prog-id=157 op=LOAD Sep 6 00:06:37.769000 audit[4195]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffb02d658 a2=74 a3=95 items=0 ppid=4008 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.769000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:06:37.769000 audit: BPF prog-id=157 op=UNLOAD Sep 6 00:06:37.769000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.769000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.769000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.769000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.769000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.769000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.769000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.769000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.769000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.769000 audit: BPF prog-id=158 op=LOAD Sep 6 00:06:37.769000 audit[4195]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffb02d6b8 a2=94 a3=2 items=0 ppid=4008 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.769000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:06:37.770000 audit: BPF prog-id=158 op=UNLOAD Sep 6 00:06:37.770000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.770000 audit[4195]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffffb02d6e8 a2=28 a3=fffffb02d818 items=0 ppid=4008 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.770000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:06:37.770000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.770000 audit[4195]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffb02d718 a2=28 a3=fffffb02d848 items=0 ppid=4008 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.770000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:06:37.770000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.770000 audit[4195]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffb02d5c8 a2=28 a3=fffffb02d6f8 items=0 ppid=4008 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.770000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:06:37.770000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.770000 audit[4195]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffffb02d738 a2=28 a3=fffffb02d868 items=0 ppid=4008 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.770000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:06:37.770000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.770000 audit[4195]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffffb02d718 a2=28 a3=fffffb02d848 items=0 ppid=4008 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.770000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:06:37.770000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.770000 audit[4195]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffffb02d708 a2=28 a3=fffffb02d838 items=0 ppid=4008 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.770000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:06:37.770000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.770000 audit[4195]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffffb02d738 a2=28 a3=fffffb02d868 items=0 ppid=4008 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.770000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:06:37.770000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.770000 audit[4195]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffb02d718 a2=28 a3=fffffb02d848 items=0 ppid=4008 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.770000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:06:37.770000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.770000 audit[4195]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffb02d738 a2=28 a3=fffffb02d868 items=0 ppid=4008 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.770000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:06:37.770000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.770000 audit[4195]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffb02d708 a2=28 a3=fffffb02d838 items=0 ppid=4008 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.770000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:06:37.770000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.770000 audit[4195]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffffb02d788 a2=28 a3=fffffb02d8c8 items=0 ppid=4008 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.770000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:06:37.770000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.770000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.770000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.770000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.770000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.770000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.770000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.770000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.770000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.770000 audit: BPF prog-id=159 op=LOAD Sep 6 00:06:37.770000 audit[4195]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffffb02d5a8 a2=40 a3=fffffb02d5d8 items=0 ppid=4008 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.770000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:06:37.770000 audit: BPF prog-id=159 op=UNLOAD Sep 6 00:06:37.771000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.771000 audit[4195]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=fffffb02d5d0 a2=50 a3=0 items=0 ppid=4008 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.771000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:06:37.773000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.773000 audit[4195]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=fffffb02d5d0 a2=50 a3=0 items=0 ppid=4008 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.773000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:06:37.773000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.773000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.773000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.773000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.773000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.773000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.773000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.773000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.773000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.773000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.773000 audit: BPF prog-id=160 op=LOAD Sep 6 00:06:37.773000 audit[4195]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffffb02cd38 a2=94 a3=2 items=0 ppid=4008 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.773000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:06:37.773000 audit: BPF prog-id=160 op=UNLOAD Sep 6 00:06:37.773000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.773000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.773000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.773000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.773000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.773000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.773000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.773000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.773000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.773000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.773000 audit: BPF prog-id=161 op=LOAD Sep 6 00:06:37.773000 audit[4195]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffffb02cec8 a2=94 a3=30 items=0 ppid=4008 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.773000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:06:37.797000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.797000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.797000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.797000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.797000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.797000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.797000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.797000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.797000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.797000 audit: BPF prog-id=162 op=LOAD Sep 6 00:06:37.797000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd2c081d8 a2=98 a3=ffffd2c081c8 items=0 ppid=4008 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.797000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:06:37.798000 audit: BPF prog-id=162 op=UNLOAD Sep 6 00:06:37.798000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.798000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.798000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.798000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.798000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.798000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.798000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.798000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.798000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.798000 audit: BPF prog-id=163 op=LOAD Sep 6 00:06:37.798000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd2c07e68 a2=74 a3=95 items=0 ppid=4008 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.798000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:06:37.802000 audit: BPF prog-id=163 op=UNLOAD Sep 6 00:06:37.802000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.802000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.802000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.802000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.802000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.802000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.802000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.802000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.802000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:37.802000 audit: BPF prog-id=164 op=LOAD Sep 6 00:06:37.802000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd2c07ec8 a2=94 a3=2 items=0 ppid=4008 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:37.802000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:06:37.802000 audit: BPF prog-id=164 op=UNLOAD Sep 6 00:06:37.772433 (udev-worker)[4193]: Network interface NamePolicy= disabled on kernel command line. Sep 6 00:06:37.873866 systemd-networkd[1361]: cali10412628e4f: Link UP Sep 6 00:06:37.877161 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali10412628e4f: link becomes ready Sep 6 00:06:37.877531 systemd-networkd[1361]: cali10412628e4f: Gained carrier Sep 6 00:06:37.877543 (udev-worker)[4200]: Network interface NamePolicy= disabled on kernel command line. Sep 6 00:06:37.919279 env[1646]: 2025-09-06 00:06:37.672 [INFO][4158] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" Sep 6 00:06:37.919279 env[1646]: 2025-09-06 00:06:37.673 [INFO][4158] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" iface="eth0" netns="/var/run/netns/cni-2e535718-b878-39b1-df09-af301bace826" Sep 6 00:06:37.919279 env[1646]: 2025-09-06 00:06:37.673 [INFO][4158] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" iface="eth0" netns="/var/run/netns/cni-2e535718-b878-39b1-df09-af301bace826" Sep 6 00:06:37.919279 env[1646]: 2025-09-06 00:06:37.675 [INFO][4158] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" iface="eth0" netns="/var/run/netns/cni-2e535718-b878-39b1-df09-af301bace826" Sep 6 00:06:37.919279 env[1646]: 2025-09-06 00:06:37.675 [INFO][4158] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" Sep 6 00:06:37.919279 env[1646]: 2025-09-06 00:06:37.676 [INFO][4158] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" Sep 6 00:06:37.919279 env[1646]: 2025-09-06 00:06:37.757 [INFO][4183] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" HandleID="k8s-pod-network.10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" Workload="ip--172--31--29--17-k8s-calico--kube--controllers--747d8dffd6--vmfb7-eth0" Sep 6 00:06:37.919279 env[1646]: 2025-09-06 00:06:37.759 [INFO][4183] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:06:37.919279 env[1646]: 2025-09-06 00:06:37.844 [INFO][4183] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:06:37.919279 env[1646]: 2025-09-06 00:06:37.895 [WARNING][4183] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" HandleID="k8s-pod-network.10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" Workload="ip--172--31--29--17-k8s-calico--kube--controllers--747d8dffd6--vmfb7-eth0" Sep 6 00:06:37.919279 env[1646]: 2025-09-06 00:06:37.895 [INFO][4183] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" HandleID="k8s-pod-network.10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" Workload="ip--172--31--29--17-k8s-calico--kube--controllers--747d8dffd6--vmfb7-eth0" Sep 6 00:06:37.919279 env[1646]: 2025-09-06 00:06:37.898 [INFO][4183] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:06:37.919279 env[1646]: 2025-09-06 00:06:37.907 [INFO][4158] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" Sep 6 00:06:37.927083 systemd[1]: run-netns-cni\x2d2e535718\x2db878\x2d39b1\x2ddf09\x2daf301bace826.mount: Deactivated successfully. Sep 6 00:06:37.930148 env[1646]: time="2025-09-06T00:06:37.930031659Z" level=info msg="TearDown network for sandbox \"10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2\" successfully" Sep 6 00:06:37.930148 env[1646]: time="2025-09-06T00:06:37.930100121Z" level=info msg="StopPodSandbox for \"10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2\" returns successfully" Sep 6 00:06:37.931438 env[1646]: time="2025-09-06T00:06:37.931357580Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-747d8dffd6-vmfb7,Uid:a3b5e26a-8037-44a1-b60c-ca22c74c201c,Namespace:calico-system,Attempt:1,}" Sep 6 00:06:38.036822 env[1646]: 2025-09-06 00:06:37.528 [INFO][4139] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--29--17-k8s-whisker--754d5b8ff5--xnwcz-eth0 whisker-754d5b8ff5- calico-system c6cdf10e-7059-4b34-b3ee-100f044de3e0 989 0 2025-09-06 00:06:36 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:754d5b8ff5 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s ip-172-31-29-17 whisker-754d5b8ff5-xnwcz eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali10412628e4f [] [] }} ContainerID="1367f63384b5c789c1a5dffa322b4de8cbe598f91056ed1c1d76a9d0d8d986b8" Namespace="calico-system" Pod="whisker-754d5b8ff5-xnwcz" WorkloadEndpoint="ip--172--31--29--17-k8s-whisker--754d5b8ff5--xnwcz-" Sep 6 00:06:38.036822 env[1646]: 2025-09-06 00:06:37.528 [INFO][4139] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="1367f63384b5c789c1a5dffa322b4de8cbe598f91056ed1c1d76a9d0d8d986b8" Namespace="calico-system" Pod="whisker-754d5b8ff5-xnwcz" WorkloadEndpoint="ip--172--31--29--17-k8s-whisker--754d5b8ff5--xnwcz-eth0" Sep 6 00:06:38.036822 env[1646]: 2025-09-06 00:06:37.688 [INFO][4169] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="1367f63384b5c789c1a5dffa322b4de8cbe598f91056ed1c1d76a9d0d8d986b8" HandleID="k8s-pod-network.1367f63384b5c789c1a5dffa322b4de8cbe598f91056ed1c1d76a9d0d8d986b8" Workload="ip--172--31--29--17-k8s-whisker--754d5b8ff5--xnwcz-eth0" Sep 6 00:06:38.036822 env[1646]: 2025-09-06 00:06:37.692 [INFO][4169] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="1367f63384b5c789c1a5dffa322b4de8cbe598f91056ed1c1d76a9d0d8d986b8" HandleID="k8s-pod-network.1367f63384b5c789c1a5dffa322b4de8cbe598f91056ed1c1d76a9d0d8d986b8" Workload="ip--172--31--29--17-k8s-whisker--754d5b8ff5--xnwcz-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400036ce90), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-29-17", "pod":"whisker-754d5b8ff5-xnwcz", "timestamp":"2025-09-06 00:06:37.688608103 +0000 UTC"}, Hostname:"ip-172-31-29-17", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:06:38.036822 env[1646]: 2025-09-06 00:06:37.692 [INFO][4169] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:06:38.036822 env[1646]: 2025-09-06 00:06:37.692 [INFO][4169] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:06:38.036822 env[1646]: 2025-09-06 00:06:37.692 [INFO][4169] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-29-17' Sep 6 00:06:38.036822 env[1646]: 2025-09-06 00:06:37.711 [INFO][4169] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.1367f63384b5c789c1a5dffa322b4de8cbe598f91056ed1c1d76a9d0d8d986b8" host="ip-172-31-29-17" Sep 6 00:06:38.036822 env[1646]: 2025-09-06 00:06:37.752 [INFO][4169] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-29-17" Sep 6 00:06:38.036822 env[1646]: 2025-09-06 00:06:37.761 [INFO][4169] ipam/ipam.go 511: Trying affinity for 192.168.120.0/26 host="ip-172-31-29-17" Sep 6 00:06:38.036822 env[1646]: 2025-09-06 00:06:37.787 [INFO][4169] ipam/ipam.go 158: Attempting to load block cidr=192.168.120.0/26 host="ip-172-31-29-17" Sep 6 00:06:38.036822 env[1646]: 2025-09-06 00:06:37.793 [INFO][4169] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.120.0/26 host="ip-172-31-29-17" Sep 6 00:06:38.036822 env[1646]: 2025-09-06 00:06:37.793 [INFO][4169] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.120.0/26 handle="k8s-pod-network.1367f63384b5c789c1a5dffa322b4de8cbe598f91056ed1c1d76a9d0d8d986b8" host="ip-172-31-29-17" Sep 6 00:06:38.036822 env[1646]: 2025-09-06 00:06:37.800 [INFO][4169] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.1367f63384b5c789c1a5dffa322b4de8cbe598f91056ed1c1d76a9d0d8d986b8 Sep 6 00:06:38.036822 env[1646]: 2025-09-06 00:06:37.812 [INFO][4169] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.120.0/26 handle="k8s-pod-network.1367f63384b5c789c1a5dffa322b4de8cbe598f91056ed1c1d76a9d0d8d986b8" host="ip-172-31-29-17" Sep 6 00:06:38.036822 env[1646]: 2025-09-06 00:06:37.829 [INFO][4169] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.120.1/26] block=192.168.120.0/26 handle="k8s-pod-network.1367f63384b5c789c1a5dffa322b4de8cbe598f91056ed1c1d76a9d0d8d986b8" host="ip-172-31-29-17" Sep 6 00:06:38.036822 env[1646]: 2025-09-06 00:06:37.835 [INFO][4169] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.120.1/26] handle="k8s-pod-network.1367f63384b5c789c1a5dffa322b4de8cbe598f91056ed1c1d76a9d0d8d986b8" host="ip-172-31-29-17" Sep 6 00:06:38.036822 env[1646]: 2025-09-06 00:06:37.835 [INFO][4169] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:06:38.036822 env[1646]: 2025-09-06 00:06:37.835 [INFO][4169] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.120.1/26] IPv6=[] ContainerID="1367f63384b5c789c1a5dffa322b4de8cbe598f91056ed1c1d76a9d0d8d986b8" HandleID="k8s-pod-network.1367f63384b5c789c1a5dffa322b4de8cbe598f91056ed1c1d76a9d0d8d986b8" Workload="ip--172--31--29--17-k8s-whisker--754d5b8ff5--xnwcz-eth0" Sep 6 00:06:38.038581 env[1646]: 2025-09-06 00:06:37.861 [INFO][4139] cni-plugin/k8s.go 418: Populated endpoint ContainerID="1367f63384b5c789c1a5dffa322b4de8cbe598f91056ed1c1d76a9d0d8d986b8" Namespace="calico-system" Pod="whisker-754d5b8ff5-xnwcz" WorkloadEndpoint="ip--172--31--29--17-k8s-whisker--754d5b8ff5--xnwcz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--29--17-k8s-whisker--754d5b8ff5--xnwcz-eth0", GenerateName:"whisker-754d5b8ff5-", Namespace:"calico-system", SelfLink:"", UID:"c6cdf10e-7059-4b34-b3ee-100f044de3e0", ResourceVersion:"989", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 6, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"754d5b8ff5", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-29-17", ContainerID:"", Pod:"whisker-754d5b8ff5-xnwcz", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.120.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali10412628e4f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:06:38.038581 env[1646]: 2025-09-06 00:06:37.861 [INFO][4139] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.120.1/32] ContainerID="1367f63384b5c789c1a5dffa322b4de8cbe598f91056ed1c1d76a9d0d8d986b8" Namespace="calico-system" Pod="whisker-754d5b8ff5-xnwcz" WorkloadEndpoint="ip--172--31--29--17-k8s-whisker--754d5b8ff5--xnwcz-eth0" Sep 6 00:06:38.038581 env[1646]: 2025-09-06 00:06:37.862 [INFO][4139] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali10412628e4f ContainerID="1367f63384b5c789c1a5dffa322b4de8cbe598f91056ed1c1d76a9d0d8d986b8" Namespace="calico-system" Pod="whisker-754d5b8ff5-xnwcz" WorkloadEndpoint="ip--172--31--29--17-k8s-whisker--754d5b8ff5--xnwcz-eth0" Sep 6 00:06:38.038581 env[1646]: 2025-09-06 00:06:37.906 [INFO][4139] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="1367f63384b5c789c1a5dffa322b4de8cbe598f91056ed1c1d76a9d0d8d986b8" Namespace="calico-system" Pod="whisker-754d5b8ff5-xnwcz" WorkloadEndpoint="ip--172--31--29--17-k8s-whisker--754d5b8ff5--xnwcz-eth0" Sep 6 00:06:38.038581 env[1646]: 2025-09-06 00:06:37.906 [INFO][4139] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="1367f63384b5c789c1a5dffa322b4de8cbe598f91056ed1c1d76a9d0d8d986b8" Namespace="calico-system" Pod="whisker-754d5b8ff5-xnwcz" WorkloadEndpoint="ip--172--31--29--17-k8s-whisker--754d5b8ff5--xnwcz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--29--17-k8s-whisker--754d5b8ff5--xnwcz-eth0", GenerateName:"whisker-754d5b8ff5-", Namespace:"calico-system", SelfLink:"", UID:"c6cdf10e-7059-4b34-b3ee-100f044de3e0", ResourceVersion:"989", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 6, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"754d5b8ff5", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-29-17", ContainerID:"1367f63384b5c789c1a5dffa322b4de8cbe598f91056ed1c1d76a9d0d8d986b8", Pod:"whisker-754d5b8ff5-xnwcz", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.120.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali10412628e4f", MAC:"86:82:7a:42:e1:a6", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:06:38.038581 env[1646]: 2025-09-06 00:06:38.021 [INFO][4139] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="1367f63384b5c789c1a5dffa322b4de8cbe598f91056ed1c1d76a9d0d8d986b8" Namespace="calico-system" Pod="whisker-754d5b8ff5-xnwcz" WorkloadEndpoint="ip--172--31--29--17-k8s-whisker--754d5b8ff5--xnwcz-eth0" Sep 6 00:06:38.101859 env[1646]: time="2025-09-06T00:06:38.101689566Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:06:38.102085 env[1646]: time="2025-09-06T00:06:38.101803911Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:06:38.102085 env[1646]: time="2025-09-06T00:06:38.101867286Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:06:38.110072 env[1646]: time="2025-09-06T00:06:38.102619573Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1367f63384b5c789c1a5dffa322b4de8cbe598f91056ed1c1d76a9d0d8d986b8 pid=4225 runtime=io.containerd.runc.v2 Sep 6 00:06:38.153798 systemd[1]: Started cri-containerd-1367f63384b5c789c1a5dffa322b4de8cbe598f91056ed1c1d76a9d0d8d986b8.scope. Sep 6 00:06:38.207000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.207000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.207000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.207000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.207000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.207000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.207000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.207000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.207000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.207000 audit: BPF prog-id=165 op=LOAD Sep 6 00:06:38.207000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd2c07e88 a2=40 a3=ffffd2c07eb8 items=0 ppid=4008 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.207000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:06:38.213000 audit: BPF prog-id=165 op=UNLOAD Sep 6 00:06:38.213000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.213000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffd2c07fa0 a2=50 a3=0 items=0 ppid=4008 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.213000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:06:38.244000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.244000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd2c07ef8 a2=28 a3=ffffd2c08028 items=0 ppid=4008 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.244000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:06:38.245000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.245000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd2c07f28 a2=28 a3=ffffd2c08058 items=0 ppid=4008 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.245000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:06:38.245000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.245000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd2c07dd8 a2=28 a3=ffffd2c07f08 items=0 ppid=4008 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.245000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:06:38.245000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.245000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd2c07f48 a2=28 a3=ffffd2c08078 items=0 ppid=4008 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.245000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:06:38.246000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.246000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd2c07f28 a2=28 a3=ffffd2c08058 items=0 ppid=4008 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.246000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:06:38.246000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.246000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd2c07f18 a2=28 a3=ffffd2c08048 items=0 ppid=4008 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.246000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:06:38.246000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.246000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd2c07f48 a2=28 a3=ffffd2c08078 items=0 ppid=4008 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.246000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:06:38.246000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.246000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd2c07f28 a2=28 a3=ffffd2c08058 items=0 ppid=4008 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.246000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:06:38.246000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.246000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd2c07f48 a2=28 a3=ffffd2c08078 items=0 ppid=4008 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.246000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:06:38.246000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.246000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd2c07f18 a2=28 a3=ffffd2c08048 items=0 ppid=4008 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.246000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:06:38.254000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.254000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd2c07f98 a2=28 a3=ffffd2c080d8 items=0 ppid=4008 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.254000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:06:38.255000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.255000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffd2c07cd0 a2=50 a3=0 items=0 ppid=4008 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.255000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:06:38.255000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.255000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.255000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.255000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.255000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.255000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.255000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.255000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.255000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.255000 audit: BPF prog-id=166 op=LOAD Sep 6 00:06:38.255000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffd2c07cd8 a2=94 a3=5 items=0 ppid=4008 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.255000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:06:38.255000 audit: BPF prog-id=166 op=UNLOAD Sep 6 00:06:38.255000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.255000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffd2c07de0 a2=50 a3=0 items=0 ppid=4008 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.255000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:06:38.255000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.255000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffd2c07f28 a2=4 a3=3 items=0 ppid=4008 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.255000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:06:38.255000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.255000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.255000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.255000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.255000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.255000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.255000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.255000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.255000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.255000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.255000 audit[4198]: AVC avc: denied { confidentiality } for pid=4198 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 00:06:38.255000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd2c07f08 a2=94 a3=6 items=0 ppid=4008 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.255000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:06:38.256000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.256000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.256000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.256000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.256000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.256000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.256000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.256000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.256000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.256000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.256000 audit[4198]: AVC avc: denied { confidentiality } for pid=4198 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 00:06:38.256000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd2c076d8 a2=94 a3=83 items=0 ppid=4008 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.256000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:06:38.257000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.257000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.257000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.257000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.257000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.257000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.257000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.257000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.257000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.257000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.257000 audit[4198]: AVC avc: denied { confidentiality } for pid=4198 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 00:06:38.257000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd2c076d8 a2=94 a3=83 items=0 ppid=4008 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.257000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:06:38.258000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.258000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffd2c09118 a2=10 a3=ffffd2c09208 items=0 ppid=4008 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.258000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:06:38.258000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.258000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffd2c08fd8 a2=10 a3=ffffd2c090c8 items=0 ppid=4008 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.258000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:06:38.260000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.260000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffd2c08f48 a2=10 a3=ffffd2c090c8 items=0 ppid=4008 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.260000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:06:38.260000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.260000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffd2c08f48 a2=10 a3=ffffd2c090c8 items=0 ppid=4008 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.260000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:06:38.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.274000 audit: BPF prog-id=161 op=UNLOAD Sep 6 00:06:38.274000 audit[1316]: SYSCALL arch=c00000b7 syscall=56 success=no exit=-2 a0=ffffffffffffff9c a1=aaab02094aa0 a2=80802 a3=0 items=0 ppid=1 pid=1316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.274000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Sep 6 00:06:38.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.275000 audit: BPF prog-id=167 op=LOAD Sep 6 00:06:38.276000 audit[4235]: AVC avc: denied { bpf } for pid=4235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.276000 audit[4235]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4225 pid=4235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.276000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133363766363333383462356337383963316135646666613332326234 Sep 6 00:06:38.276000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.276000 audit[4235]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4225 pid=4235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.276000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133363766363333383462356337383963316135646666613332326234 Sep 6 00:06:38.277000 audit[4235]: AVC avc: denied { bpf } for pid=4235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.277000 audit[4235]: AVC avc: denied { bpf } for pid=4235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.277000 audit[4235]: AVC avc: denied { bpf } for pid=4235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.277000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.277000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.277000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.277000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.277000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.277000 audit[4235]: AVC avc: denied { bpf } for pid=4235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.277000 audit[4235]: AVC avc: denied { bpf } for pid=4235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.277000 audit: BPF prog-id=168 op=LOAD Sep 6 00:06:38.277000 audit[4235]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4225 pid=4235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133363766363333383462356337383963316135646666613332326234 Sep 6 00:06:38.277000 audit[4235]: AVC avc: denied { bpf } for pid=4235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.277000 audit[4235]: AVC avc: denied { bpf } for pid=4235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.277000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.277000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.277000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.277000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.277000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.277000 audit[4235]: AVC avc: denied { bpf } for pid=4235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.277000 audit[4235]: AVC avc: denied { bpf } for pid=4235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.277000 audit: BPF prog-id=169 op=LOAD Sep 6 00:06:38.277000 audit[4235]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4225 pid=4235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133363766363333383462356337383963316135646666613332326234 Sep 6 00:06:38.278000 audit: BPF prog-id=169 op=UNLOAD Sep 6 00:06:38.279000 audit: BPF prog-id=168 op=UNLOAD Sep 6 00:06:38.279000 audit[4235]: AVC avc: denied { bpf } for pid=4235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.279000 audit[4235]: AVC avc: denied { bpf } for pid=4235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.279000 audit[4235]: AVC avc: denied { bpf } for pid=4235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.279000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.279000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.279000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.279000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.279000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.279000 audit[4235]: AVC avc: denied { bpf } for pid=4235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.279000 audit[4235]: AVC avc: denied { bpf } for pid=4235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.279000 audit: BPF prog-id=170 op=LOAD Sep 6 00:06:38.279000 audit[4235]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4225 pid=4235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133363766363333383462356337383963316135646666613332326234 Sep 6 00:06:38.370159 env[1646]: time="2025-09-06T00:06:38.369965951Z" level=info msg="StopPodSandbox for \"eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b\"" Sep 6 00:06:38.378547 env[1646]: time="2025-09-06T00:06:38.378472983Z" level=info msg="StopPodSandbox for \"d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78\"" Sep 6 00:06:38.396047 env[1646]: time="2025-09-06T00:06:38.395964763Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-754d5b8ff5-xnwcz,Uid:c6cdf10e-7059-4b34-b3ee-100f044de3e0,Namespace:calico-system,Attempt:0,} returns sandbox id \"1367f63384b5c789c1a5dffa322b4de8cbe598f91056ed1c1d76a9d0d8d986b8\"" Sep 6 00:06:38.403788 env[1646]: time="2025-09-06T00:06:38.403728267Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\"" Sep 6 00:06:38.442721 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie8fe5890349: link becomes ready Sep 6 00:06:38.442615 systemd-networkd[1361]: calie8fe5890349: Link UP Sep 6 00:06:38.443134 systemd-networkd[1361]: calie8fe5890349: Gained carrier Sep 6 00:06:38.523139 env[1646]: 2025-09-06 00:06:38.188 [INFO][4206] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--29--17-k8s-calico--kube--controllers--747d8dffd6--vmfb7-eth0 calico-kube-controllers-747d8dffd6- calico-system a3b5e26a-8037-44a1-b60c-ca22c74c201c 995 0 2025-09-06 00:06:12 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:747d8dffd6 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ip-172-31-29-17 calico-kube-controllers-747d8dffd6-vmfb7 eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calie8fe5890349 [] [] }} ContainerID="7819d251e35ecfa581cd8cad03696c31a17a4704d7eb7451d57138ce66099ec1" Namespace="calico-system" Pod="calico-kube-controllers-747d8dffd6-vmfb7" WorkloadEndpoint="ip--172--31--29--17-k8s-calico--kube--controllers--747d8dffd6--vmfb7-" Sep 6 00:06:38.523139 env[1646]: 2025-09-06 00:06:38.189 [INFO][4206] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="7819d251e35ecfa581cd8cad03696c31a17a4704d7eb7451d57138ce66099ec1" Namespace="calico-system" Pod="calico-kube-controllers-747d8dffd6-vmfb7" WorkloadEndpoint="ip--172--31--29--17-k8s-calico--kube--controllers--747d8dffd6--vmfb7-eth0" Sep 6 00:06:38.523139 env[1646]: 2025-09-06 00:06:38.290 [INFO][4248] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="7819d251e35ecfa581cd8cad03696c31a17a4704d7eb7451d57138ce66099ec1" HandleID="k8s-pod-network.7819d251e35ecfa581cd8cad03696c31a17a4704d7eb7451d57138ce66099ec1" Workload="ip--172--31--29--17-k8s-calico--kube--controllers--747d8dffd6--vmfb7-eth0" Sep 6 00:06:38.523139 env[1646]: 2025-09-06 00:06:38.291 [INFO][4248] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="7819d251e35ecfa581cd8cad03696c31a17a4704d7eb7451d57138ce66099ec1" HandleID="k8s-pod-network.7819d251e35ecfa581cd8cad03696c31a17a4704d7eb7451d57138ce66099ec1" Workload="ip--172--31--29--17-k8s-calico--kube--controllers--747d8dffd6--vmfb7-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d3600), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-29-17", "pod":"calico-kube-controllers-747d8dffd6-vmfb7", "timestamp":"2025-09-06 00:06:38.290875551 +0000 UTC"}, Hostname:"ip-172-31-29-17", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:06:38.523139 env[1646]: 2025-09-06 00:06:38.293 [INFO][4248] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:06:38.523139 env[1646]: 2025-09-06 00:06:38.293 [INFO][4248] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:06:38.523139 env[1646]: 2025-09-06 00:06:38.293 [INFO][4248] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-29-17' Sep 6 00:06:38.523139 env[1646]: 2025-09-06 00:06:38.320 [INFO][4248] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.7819d251e35ecfa581cd8cad03696c31a17a4704d7eb7451d57138ce66099ec1" host="ip-172-31-29-17" Sep 6 00:06:38.523139 env[1646]: 2025-09-06 00:06:38.330 [INFO][4248] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-29-17" Sep 6 00:06:38.523139 env[1646]: 2025-09-06 00:06:38.352 [INFO][4248] ipam/ipam.go 511: Trying affinity for 192.168.120.0/26 host="ip-172-31-29-17" Sep 6 00:06:38.523139 env[1646]: 2025-09-06 00:06:38.356 [INFO][4248] ipam/ipam.go 158: Attempting to load block cidr=192.168.120.0/26 host="ip-172-31-29-17" Sep 6 00:06:38.523139 env[1646]: 2025-09-06 00:06:38.364 [INFO][4248] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.120.0/26 host="ip-172-31-29-17" Sep 6 00:06:38.523139 env[1646]: 2025-09-06 00:06:38.364 [INFO][4248] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.120.0/26 handle="k8s-pod-network.7819d251e35ecfa581cd8cad03696c31a17a4704d7eb7451d57138ce66099ec1" host="ip-172-31-29-17" Sep 6 00:06:38.523139 env[1646]: 2025-09-06 00:06:38.367 [INFO][4248] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.7819d251e35ecfa581cd8cad03696c31a17a4704d7eb7451d57138ce66099ec1 Sep 6 00:06:38.523139 env[1646]: 2025-09-06 00:06:38.402 [INFO][4248] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.120.0/26 handle="k8s-pod-network.7819d251e35ecfa581cd8cad03696c31a17a4704d7eb7451d57138ce66099ec1" host="ip-172-31-29-17" Sep 6 00:06:38.523139 env[1646]: 2025-09-06 00:06:38.425 [INFO][4248] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.120.2/26] block=192.168.120.0/26 handle="k8s-pod-network.7819d251e35ecfa581cd8cad03696c31a17a4704d7eb7451d57138ce66099ec1" host="ip-172-31-29-17" Sep 6 00:06:38.523139 env[1646]: 2025-09-06 00:06:38.425 [INFO][4248] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.120.2/26] handle="k8s-pod-network.7819d251e35ecfa581cd8cad03696c31a17a4704d7eb7451d57138ce66099ec1" host="ip-172-31-29-17" Sep 6 00:06:38.523139 env[1646]: 2025-09-06 00:06:38.425 [INFO][4248] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:06:38.523139 env[1646]: 2025-09-06 00:06:38.425 [INFO][4248] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.120.2/26] IPv6=[] ContainerID="7819d251e35ecfa581cd8cad03696c31a17a4704d7eb7451d57138ce66099ec1" HandleID="k8s-pod-network.7819d251e35ecfa581cd8cad03696c31a17a4704d7eb7451d57138ce66099ec1" Workload="ip--172--31--29--17-k8s-calico--kube--controllers--747d8dffd6--vmfb7-eth0" Sep 6 00:06:38.525172 env[1646]: 2025-09-06 00:06:38.432 [INFO][4206] cni-plugin/k8s.go 418: Populated endpoint ContainerID="7819d251e35ecfa581cd8cad03696c31a17a4704d7eb7451d57138ce66099ec1" Namespace="calico-system" Pod="calico-kube-controllers-747d8dffd6-vmfb7" WorkloadEndpoint="ip--172--31--29--17-k8s-calico--kube--controllers--747d8dffd6--vmfb7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--29--17-k8s-calico--kube--controllers--747d8dffd6--vmfb7-eth0", GenerateName:"calico-kube-controllers-747d8dffd6-", Namespace:"calico-system", SelfLink:"", UID:"a3b5e26a-8037-44a1-b60c-ca22c74c201c", ResourceVersion:"995", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 6, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"747d8dffd6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-29-17", ContainerID:"", Pod:"calico-kube-controllers-747d8dffd6-vmfb7", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.120.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calie8fe5890349", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:06:38.525172 env[1646]: 2025-09-06 00:06:38.432 [INFO][4206] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.120.2/32] ContainerID="7819d251e35ecfa581cd8cad03696c31a17a4704d7eb7451d57138ce66099ec1" Namespace="calico-system" Pod="calico-kube-controllers-747d8dffd6-vmfb7" WorkloadEndpoint="ip--172--31--29--17-k8s-calico--kube--controllers--747d8dffd6--vmfb7-eth0" Sep 6 00:06:38.525172 env[1646]: 2025-09-06 00:06:38.432 [INFO][4206] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calie8fe5890349 ContainerID="7819d251e35ecfa581cd8cad03696c31a17a4704d7eb7451d57138ce66099ec1" Namespace="calico-system" Pod="calico-kube-controllers-747d8dffd6-vmfb7" WorkloadEndpoint="ip--172--31--29--17-k8s-calico--kube--controllers--747d8dffd6--vmfb7-eth0" Sep 6 00:06:38.525172 env[1646]: 2025-09-06 00:06:38.455 [INFO][4206] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="7819d251e35ecfa581cd8cad03696c31a17a4704d7eb7451d57138ce66099ec1" Namespace="calico-system" Pod="calico-kube-controllers-747d8dffd6-vmfb7" WorkloadEndpoint="ip--172--31--29--17-k8s-calico--kube--controllers--747d8dffd6--vmfb7-eth0" Sep 6 00:06:38.525172 env[1646]: 2025-09-06 00:06:38.458 [INFO][4206] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="7819d251e35ecfa581cd8cad03696c31a17a4704d7eb7451d57138ce66099ec1" Namespace="calico-system" Pod="calico-kube-controllers-747d8dffd6-vmfb7" WorkloadEndpoint="ip--172--31--29--17-k8s-calico--kube--controllers--747d8dffd6--vmfb7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--29--17-k8s-calico--kube--controllers--747d8dffd6--vmfb7-eth0", GenerateName:"calico-kube-controllers-747d8dffd6-", Namespace:"calico-system", SelfLink:"", UID:"a3b5e26a-8037-44a1-b60c-ca22c74c201c", ResourceVersion:"995", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 6, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"747d8dffd6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-29-17", ContainerID:"7819d251e35ecfa581cd8cad03696c31a17a4704d7eb7451d57138ce66099ec1", Pod:"calico-kube-controllers-747d8dffd6-vmfb7", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.120.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calie8fe5890349", MAC:"56:9d:62:e4:f4:83", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:06:38.525172 env[1646]: 2025-09-06 00:06:38.517 [INFO][4206] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="7819d251e35ecfa581cd8cad03696c31a17a4704d7eb7451d57138ce66099ec1" Namespace="calico-system" Pod="calico-kube-controllers-747d8dffd6-vmfb7" WorkloadEndpoint="ip--172--31--29--17-k8s-calico--kube--controllers--747d8dffd6--vmfb7-eth0" Sep 6 00:06:38.652621 env[1646]: time="2025-09-06T00:06:38.652347680Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:06:38.652621 env[1646]: time="2025-09-06T00:06:38.652435904Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:06:38.655294 env[1646]: time="2025-09-06T00:06:38.652480706Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:06:38.655907 env[1646]: time="2025-09-06T00:06:38.655774490Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7819d251e35ecfa581cd8cad03696c31a17a4704d7eb7451d57138ce66099ec1 pid=4321 runtime=io.containerd.runc.v2 Sep 6 00:06:38.712393 systemd[1]: Started cri-containerd-7819d251e35ecfa581cd8cad03696c31a17a4704d7eb7451d57138ce66099ec1.scope. Sep 6 00:06:38.895000 audit[4348]: NETFILTER_CFG table=raw:101 family=2 entries=21 op=nft_register_chain pid=4348 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:06:38.895000 audit[4348]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=fffff1e8f140 a2=0 a3=ffffbb07cfa8 items=0 ppid=4008 pid=4348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.895000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:06:38.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.928000 audit: BPF prog-id=171 op=LOAD Sep 6 00:06:38.931000 audit[4331]: AVC avc: denied { bpf } for pid=4331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.931000 audit[4331]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4321 pid=4331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.931000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738313964323531653335656366613538316364386361643033363936 Sep 6 00:06:38.931000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.931000 audit[4331]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4321 pid=4331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.931000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738313964323531653335656366613538316364386361643033363936 Sep 6 00:06:38.931000 audit[4331]: AVC avc: denied { bpf } for pid=4331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.931000 audit[4331]: AVC avc: denied { bpf } for pid=4331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.931000 audit[4331]: AVC avc: denied { bpf } for pid=4331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.931000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.931000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.931000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.931000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.931000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.931000 audit[4331]: AVC avc: denied { bpf } for pid=4331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.931000 audit[4331]: AVC avc: denied { bpf } for pid=4331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.931000 audit: BPF prog-id=172 op=LOAD Sep 6 00:06:38.931000 audit[4331]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4321 pid=4331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.931000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738313964323531653335656366613538316364386361643033363936 Sep 6 00:06:38.931000 audit[4331]: AVC avc: denied { bpf } for pid=4331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.931000 audit[4331]: AVC avc: denied { bpf } for pid=4331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.931000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.931000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.931000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.931000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.931000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.931000 audit[4331]: AVC avc: denied { bpf } for pid=4331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.931000 audit[4331]: AVC avc: denied { bpf } for pid=4331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.931000 audit: BPF prog-id=173 op=LOAD Sep 6 00:06:38.931000 audit[4331]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4321 pid=4331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.931000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738313964323531653335656366613538316364386361643033363936 Sep 6 00:06:38.931000 audit: BPF prog-id=173 op=UNLOAD Sep 6 00:06:38.932000 audit: BPF prog-id=172 op=UNLOAD Sep 6 00:06:38.932000 audit[4331]: AVC avc: denied { bpf } for pid=4331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.932000 audit[4331]: AVC avc: denied { bpf } for pid=4331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.932000 audit[4331]: AVC avc: denied { bpf } for pid=4331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.932000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.932000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.932000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.932000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.932000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.932000 audit[4331]: AVC avc: denied { bpf } for pid=4331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.932000 audit[4331]: AVC avc: denied { bpf } for pid=4331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:38.932000 audit: BPF prog-id=174 op=LOAD Sep 6 00:06:38.932000 audit[4331]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4321 pid=4331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.932000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738313964323531653335656366613538316364386361643033363936 Sep 6 00:06:38.975000 audit[4371]: NETFILTER_CFG table=nat:102 family=2 entries=15 op=nft_register_chain pid=4371 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:06:38.975000 audit[4371]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffc89520d0 a2=0 a3=ffffa7535fa8 items=0 ppid=4008 pid=4371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.975000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:06:38.987000 audit[4372]: NETFILTER_CFG table=mangle:103 family=2 entries=16 op=nft_register_chain pid=4372 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:06:38.987000 audit[4372]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=fffffbd8ea90 a2=0 a3=ffffa858cfa8 items=0 ppid=4008 pid=4372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:38.987000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:06:39.029654 env[1646]: 2025-09-06 00:06:38.719 [INFO][4294] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" Sep 6 00:06:39.029654 env[1646]: 2025-09-06 00:06:38.720 [INFO][4294] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" iface="eth0" netns="/var/run/netns/cni-2fe8b42e-7719-ef06-f56d-2ad1b28e071d" Sep 6 00:06:39.029654 env[1646]: 2025-09-06 00:06:38.725 [INFO][4294] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" iface="eth0" netns="/var/run/netns/cni-2fe8b42e-7719-ef06-f56d-2ad1b28e071d" Sep 6 00:06:39.029654 env[1646]: 2025-09-06 00:06:38.726 [INFO][4294] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" iface="eth0" netns="/var/run/netns/cni-2fe8b42e-7719-ef06-f56d-2ad1b28e071d" Sep 6 00:06:39.029654 env[1646]: 2025-09-06 00:06:38.726 [INFO][4294] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" Sep 6 00:06:39.029654 env[1646]: 2025-09-06 00:06:38.726 [INFO][4294] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" Sep 6 00:06:39.029654 env[1646]: 2025-09-06 00:06:38.951 [INFO][4346] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" HandleID="k8s-pod-network.eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" Workload="ip--172--31--29--17-k8s-csi--node--driver--t8r6b-eth0" Sep 6 00:06:39.029654 env[1646]: 2025-09-06 00:06:38.955 [INFO][4346] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:06:39.029654 env[1646]: 2025-09-06 00:06:38.955 [INFO][4346] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:06:39.029654 env[1646]: 2025-09-06 00:06:39.003 [WARNING][4346] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" HandleID="k8s-pod-network.eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" Workload="ip--172--31--29--17-k8s-csi--node--driver--t8r6b-eth0" Sep 6 00:06:39.029654 env[1646]: 2025-09-06 00:06:39.003 [INFO][4346] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" HandleID="k8s-pod-network.eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" Workload="ip--172--31--29--17-k8s-csi--node--driver--t8r6b-eth0" Sep 6 00:06:39.029654 env[1646]: 2025-09-06 00:06:39.007 [INFO][4346] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:06:39.029654 env[1646]: 2025-09-06 00:06:39.010 [INFO][4294] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" Sep 6 00:06:39.041183 env[1646]: time="2025-09-06T00:06:39.030786915Z" level=info msg="TearDown network for sandbox \"eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b\" successfully" Sep 6 00:06:39.041183 env[1646]: time="2025-09-06T00:06:39.030850387Z" level=info msg="StopPodSandbox for \"eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b\" returns successfully" Sep 6 00:06:39.041082 systemd[1]: run-netns-cni\x2d2fe8b42e\x2d7719\x2def06\x2df56d\x2d2ad1b28e071d.mount: Deactivated successfully. Sep 6 00:06:39.050148 env[1646]: time="2025-09-06T00:06:39.049884669Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-t8r6b,Uid:cefa6dd1-365c-4b02-b17f-1f1b3edee0dd,Namespace:calico-system,Attempt:1,}" Sep 6 00:06:39.105371 env[1646]: time="2025-09-06T00:06:39.105296739Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-747d8dffd6-vmfb7,Uid:a3b5e26a-8037-44a1-b60c-ca22c74c201c,Namespace:calico-system,Attempt:1,} returns sandbox id \"7819d251e35ecfa581cd8cad03696c31a17a4704d7eb7451d57138ce66099ec1\"" Sep 6 00:06:39.119000 audit[4379]: NETFILTER_CFG table=filter:104 family=2 entries=39 op=nft_register_chain pid=4379 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:06:39.119000 audit[4379]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=18968 a0=3 a1=ffffcd1777f0 a2=0 a3=ffff84755fa8 items=0 ppid=4008 pid=4379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:39.119000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:06:39.148509 env[1646]: 2025-09-06 00:06:38.794 [INFO][4293] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" Sep 6 00:06:39.148509 env[1646]: 2025-09-06 00:06:38.794 [INFO][4293] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" iface="eth0" netns="/var/run/netns/cni-8ef1d1bc-760b-229a-61b4-aca12d05c83d" Sep 6 00:06:39.148509 env[1646]: 2025-09-06 00:06:38.794 [INFO][4293] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" iface="eth0" netns="/var/run/netns/cni-8ef1d1bc-760b-229a-61b4-aca12d05c83d" Sep 6 00:06:39.148509 env[1646]: 2025-09-06 00:06:38.795 [INFO][4293] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" iface="eth0" netns="/var/run/netns/cni-8ef1d1bc-760b-229a-61b4-aca12d05c83d" Sep 6 00:06:39.148509 env[1646]: 2025-09-06 00:06:38.795 [INFO][4293] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" Sep 6 00:06:39.148509 env[1646]: 2025-09-06 00:06:38.795 [INFO][4293] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" Sep 6 00:06:39.148509 env[1646]: 2025-09-06 00:06:39.014 [INFO][4354] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" HandleID="k8s-pod-network.d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" Workload="ip--172--31--29--17-k8s-coredns--674b8bbfcf--8tmgs-eth0" Sep 6 00:06:39.148509 env[1646]: 2025-09-06 00:06:39.014 [INFO][4354] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:06:39.148509 env[1646]: 2025-09-06 00:06:39.014 [INFO][4354] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:06:39.148509 env[1646]: 2025-09-06 00:06:39.091 [WARNING][4354] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" HandleID="k8s-pod-network.d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" Workload="ip--172--31--29--17-k8s-coredns--674b8bbfcf--8tmgs-eth0" Sep 6 00:06:39.148509 env[1646]: 2025-09-06 00:06:39.091 [INFO][4354] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" HandleID="k8s-pod-network.d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" Workload="ip--172--31--29--17-k8s-coredns--674b8bbfcf--8tmgs-eth0" Sep 6 00:06:39.148509 env[1646]: 2025-09-06 00:06:39.116 [INFO][4354] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:06:39.148509 env[1646]: 2025-09-06 00:06:39.138 [INFO][4293] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" Sep 6 00:06:39.149491 env[1646]: time="2025-09-06T00:06:39.148762888Z" level=info msg="TearDown network for sandbox \"d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78\" successfully" Sep 6 00:06:39.149491 env[1646]: time="2025-09-06T00:06:39.148815514Z" level=info msg="StopPodSandbox for \"d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78\" returns successfully" Sep 6 00:06:39.160505 env[1646]: time="2025-09-06T00:06:39.151068906Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-8tmgs,Uid:4cbde096-0468-49f9-9aa1-f35dc9847a16,Namespace:kube-system,Attempt:1,}" Sep 6 00:06:39.186744 systemd[1]: run-netns-cni\x2d8ef1d1bc\x2d760b\x2d229a\x2d61b4\x2daca12d05c83d.mount: Deactivated successfully. Sep 6 00:06:39.256376 systemd-networkd[1361]: vxlan.calico: Gained IPv6LL Sep 6 00:06:39.380215 env[1646]: time="2025-09-06T00:06:39.379906659Z" level=info msg="StopPodSandbox for \"8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79\"" Sep 6 00:06:39.401386 env[1646]: time="2025-09-06T00:06:39.401024388Z" level=info msg="StopPodSandbox for \"9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1\"" Sep 6 00:06:39.417000 audit[4418]: NETFILTER_CFG table=filter:105 family=2 entries=87 op=nft_register_chain pid=4418 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:06:39.417000 audit[4418]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=52536 a0=3 a1=ffffc5fe8620 a2=0 a3=ffff94467fa8 items=0 ppid=4008 pid=4418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:39.417000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:06:39.641678 systemd-networkd[1361]: cali10412628e4f: Gained IPv6LL Sep 6 00:06:39.913014 systemd-networkd[1361]: cali7cbe6348786: Link UP Sep 6 00:06:39.923374 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 6 00:06:39.923541 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali7cbe6348786: link becomes ready Sep 6 00:06:39.924398 systemd-networkd[1361]: cali7cbe6348786: Gained carrier Sep 6 00:06:40.046856 env[1646]: 2025-09-06 00:06:39.375 [INFO][4391] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--29--17-k8s-csi--node--driver--t8r6b-eth0 csi-node-driver- calico-system cefa6dd1-365c-4b02-b17f-1f1b3edee0dd 1008 0 2025-09-06 00:06:11 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:6c96d95cc7 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s ip-172-31-29-17 csi-node-driver-t8r6b eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali7cbe6348786 [] [] }} ContainerID="05a17f9462fa09c33df76eff04514c05d0f0167559d2bd957c58e63ac5c50a31" Namespace="calico-system" Pod="csi-node-driver-t8r6b" WorkloadEndpoint="ip--172--31--29--17-k8s-csi--node--driver--t8r6b-" Sep 6 00:06:40.046856 env[1646]: 2025-09-06 00:06:39.375 [INFO][4391] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="05a17f9462fa09c33df76eff04514c05d0f0167559d2bd957c58e63ac5c50a31" Namespace="calico-system" Pod="csi-node-driver-t8r6b" WorkloadEndpoint="ip--172--31--29--17-k8s-csi--node--driver--t8r6b-eth0" Sep 6 00:06:40.046856 env[1646]: 2025-09-06 00:06:39.590 [INFO][4433] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="05a17f9462fa09c33df76eff04514c05d0f0167559d2bd957c58e63ac5c50a31" HandleID="k8s-pod-network.05a17f9462fa09c33df76eff04514c05d0f0167559d2bd957c58e63ac5c50a31" Workload="ip--172--31--29--17-k8s-csi--node--driver--t8r6b-eth0" Sep 6 00:06:40.046856 env[1646]: 2025-09-06 00:06:39.593 [INFO][4433] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="05a17f9462fa09c33df76eff04514c05d0f0167559d2bd957c58e63ac5c50a31" HandleID="k8s-pod-network.05a17f9462fa09c33df76eff04514c05d0f0167559d2bd957c58e63ac5c50a31" Workload="ip--172--31--29--17-k8s-csi--node--driver--t8r6b-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000372080), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-29-17", "pod":"csi-node-driver-t8r6b", "timestamp":"2025-09-06 00:06:39.590497877 +0000 UTC"}, Hostname:"ip-172-31-29-17", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:06:40.046856 env[1646]: 2025-09-06 00:06:39.595 [INFO][4433] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:06:40.046856 env[1646]: 2025-09-06 00:06:39.596 [INFO][4433] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:06:40.046856 env[1646]: 2025-09-06 00:06:39.598 [INFO][4433] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-29-17' Sep 6 00:06:40.046856 env[1646]: 2025-09-06 00:06:39.651 [INFO][4433] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.05a17f9462fa09c33df76eff04514c05d0f0167559d2bd957c58e63ac5c50a31" host="ip-172-31-29-17" Sep 6 00:06:40.046856 env[1646]: 2025-09-06 00:06:39.686 [INFO][4433] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-29-17" Sep 6 00:06:40.046856 env[1646]: 2025-09-06 00:06:39.718 [INFO][4433] ipam/ipam.go 511: Trying affinity for 192.168.120.0/26 host="ip-172-31-29-17" Sep 6 00:06:40.046856 env[1646]: 2025-09-06 00:06:39.742 [INFO][4433] ipam/ipam.go 158: Attempting to load block cidr=192.168.120.0/26 host="ip-172-31-29-17" Sep 6 00:06:40.046856 env[1646]: 2025-09-06 00:06:39.749 [INFO][4433] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.120.0/26 host="ip-172-31-29-17" Sep 6 00:06:40.046856 env[1646]: 2025-09-06 00:06:39.749 [INFO][4433] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.120.0/26 handle="k8s-pod-network.05a17f9462fa09c33df76eff04514c05d0f0167559d2bd957c58e63ac5c50a31" host="ip-172-31-29-17" Sep 6 00:06:40.046856 env[1646]: 2025-09-06 00:06:39.760 [INFO][4433] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.05a17f9462fa09c33df76eff04514c05d0f0167559d2bd957c58e63ac5c50a31 Sep 6 00:06:40.046856 env[1646]: 2025-09-06 00:06:39.802 [INFO][4433] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.120.0/26 handle="k8s-pod-network.05a17f9462fa09c33df76eff04514c05d0f0167559d2bd957c58e63ac5c50a31" host="ip-172-31-29-17" Sep 6 00:06:40.046856 env[1646]: 2025-09-06 00:06:39.848 [INFO][4433] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.120.3/26] block=192.168.120.0/26 handle="k8s-pod-network.05a17f9462fa09c33df76eff04514c05d0f0167559d2bd957c58e63ac5c50a31" host="ip-172-31-29-17" Sep 6 00:06:40.046856 env[1646]: 2025-09-06 00:06:39.851 [INFO][4433] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.120.3/26] handle="k8s-pod-network.05a17f9462fa09c33df76eff04514c05d0f0167559d2bd957c58e63ac5c50a31" host="ip-172-31-29-17" Sep 6 00:06:40.046856 env[1646]: 2025-09-06 00:06:39.852 [INFO][4433] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:06:40.046856 env[1646]: 2025-09-06 00:06:39.852 [INFO][4433] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.120.3/26] IPv6=[] ContainerID="05a17f9462fa09c33df76eff04514c05d0f0167559d2bd957c58e63ac5c50a31" HandleID="k8s-pod-network.05a17f9462fa09c33df76eff04514c05d0f0167559d2bd957c58e63ac5c50a31" Workload="ip--172--31--29--17-k8s-csi--node--driver--t8r6b-eth0" Sep 6 00:06:40.048432 env[1646]: 2025-09-06 00:06:39.875 [INFO][4391] cni-plugin/k8s.go 418: Populated endpoint ContainerID="05a17f9462fa09c33df76eff04514c05d0f0167559d2bd957c58e63ac5c50a31" Namespace="calico-system" Pod="csi-node-driver-t8r6b" WorkloadEndpoint="ip--172--31--29--17-k8s-csi--node--driver--t8r6b-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--29--17-k8s-csi--node--driver--t8r6b-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"cefa6dd1-365c-4b02-b17f-1f1b3edee0dd", ResourceVersion:"1008", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 6, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-29-17", ContainerID:"", Pod:"csi-node-driver-t8r6b", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.120.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali7cbe6348786", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:06:40.048432 env[1646]: 2025-09-06 00:06:39.876 [INFO][4391] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.120.3/32] ContainerID="05a17f9462fa09c33df76eff04514c05d0f0167559d2bd957c58e63ac5c50a31" Namespace="calico-system" Pod="csi-node-driver-t8r6b" WorkloadEndpoint="ip--172--31--29--17-k8s-csi--node--driver--t8r6b-eth0" Sep 6 00:06:40.048432 env[1646]: 2025-09-06 00:06:39.876 [INFO][4391] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali7cbe6348786 ContainerID="05a17f9462fa09c33df76eff04514c05d0f0167559d2bd957c58e63ac5c50a31" Namespace="calico-system" Pod="csi-node-driver-t8r6b" WorkloadEndpoint="ip--172--31--29--17-k8s-csi--node--driver--t8r6b-eth0" Sep 6 00:06:40.048432 env[1646]: 2025-09-06 00:06:39.963 [INFO][4391] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="05a17f9462fa09c33df76eff04514c05d0f0167559d2bd957c58e63ac5c50a31" Namespace="calico-system" Pod="csi-node-driver-t8r6b" WorkloadEndpoint="ip--172--31--29--17-k8s-csi--node--driver--t8r6b-eth0" Sep 6 00:06:40.048432 env[1646]: 2025-09-06 00:06:39.968 [INFO][4391] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="05a17f9462fa09c33df76eff04514c05d0f0167559d2bd957c58e63ac5c50a31" Namespace="calico-system" Pod="csi-node-driver-t8r6b" WorkloadEndpoint="ip--172--31--29--17-k8s-csi--node--driver--t8r6b-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--29--17-k8s-csi--node--driver--t8r6b-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"cefa6dd1-365c-4b02-b17f-1f1b3edee0dd", ResourceVersion:"1008", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 6, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-29-17", ContainerID:"05a17f9462fa09c33df76eff04514c05d0f0167559d2bd957c58e63ac5c50a31", Pod:"csi-node-driver-t8r6b", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.120.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali7cbe6348786", MAC:"42:67:71:0c:e2:33", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:06:40.048432 env[1646]: 2025-09-06 00:06:40.033 [INFO][4391] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="05a17f9462fa09c33df76eff04514c05d0f0167559d2bd957c58e63ac5c50a31" Namespace="calico-system" Pod="csi-node-driver-t8r6b" WorkloadEndpoint="ip--172--31--29--17-k8s-csi--node--driver--t8r6b-eth0" Sep 6 00:06:40.130552 env[1646]: time="2025-09-06T00:06:40.127699757Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:06:40.130552 env[1646]: time="2025-09-06T00:06:40.127831045Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:06:40.130552 env[1646]: time="2025-09-06T00:06:40.127860345Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:06:40.130552 env[1646]: time="2025-09-06T00:06:40.128220205Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/05a17f9462fa09c33df76eff04514c05d0f0167559d2bd957c58e63ac5c50a31 pid=4491 runtime=io.containerd.runc.v2 Sep 6 00:06:40.185876 systemd-networkd[1361]: cali0477a9ab9e6: Link UP Sep 6 00:06:40.194772 systemd-networkd[1361]: cali0477a9ab9e6: Gained carrier Sep 6 00:06:40.195542 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali0477a9ab9e6: link becomes ready Sep 6 00:06:40.242682 env[1646]: 2025-09-06 00:06:39.317 [INFO][4399] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--29--17-k8s-coredns--674b8bbfcf--8tmgs-eth0 coredns-674b8bbfcf- kube-system 4cbde096-0468-49f9-9aa1-f35dc9847a16 1009 0 2025-09-06 00:05:34 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-29-17 coredns-674b8bbfcf-8tmgs eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali0477a9ab9e6 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="c83c81c7d8bba98657dde9226a791ae534da6ed796b0bd9c532d823a088f8eb4" Namespace="kube-system" Pod="coredns-674b8bbfcf-8tmgs" WorkloadEndpoint="ip--172--31--29--17-k8s-coredns--674b8bbfcf--8tmgs-" Sep 6 00:06:40.242682 env[1646]: 2025-09-06 00:06:39.317 [INFO][4399] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="c83c81c7d8bba98657dde9226a791ae534da6ed796b0bd9c532d823a088f8eb4" Namespace="kube-system" Pod="coredns-674b8bbfcf-8tmgs" WorkloadEndpoint="ip--172--31--29--17-k8s-coredns--674b8bbfcf--8tmgs-eth0" Sep 6 00:06:40.242682 env[1646]: 2025-09-06 00:06:39.597 [INFO][4416] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="c83c81c7d8bba98657dde9226a791ae534da6ed796b0bd9c532d823a088f8eb4" HandleID="k8s-pod-network.c83c81c7d8bba98657dde9226a791ae534da6ed796b0bd9c532d823a088f8eb4" Workload="ip--172--31--29--17-k8s-coredns--674b8bbfcf--8tmgs-eth0" Sep 6 00:06:40.242682 env[1646]: 2025-09-06 00:06:39.602 [INFO][4416] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="c83c81c7d8bba98657dde9226a791ae534da6ed796b0bd9c532d823a088f8eb4" HandleID="k8s-pod-network.c83c81c7d8bba98657dde9226a791ae534da6ed796b0bd9c532d823a088f8eb4" Workload="ip--172--31--29--17-k8s-coredns--674b8bbfcf--8tmgs-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000235700), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-29-17", "pod":"coredns-674b8bbfcf-8tmgs", "timestamp":"2025-09-06 00:06:39.588659499 +0000 UTC"}, Hostname:"ip-172-31-29-17", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:06:40.242682 env[1646]: 2025-09-06 00:06:39.603 [INFO][4416] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:06:40.242682 env[1646]: 2025-09-06 00:06:39.852 [INFO][4416] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:06:40.242682 env[1646]: 2025-09-06 00:06:39.853 [INFO][4416] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-29-17' Sep 6 00:06:40.242682 env[1646]: 2025-09-06 00:06:40.001 [INFO][4416] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.c83c81c7d8bba98657dde9226a791ae534da6ed796b0bd9c532d823a088f8eb4" host="ip-172-31-29-17" Sep 6 00:06:40.242682 env[1646]: 2025-09-06 00:06:40.023 [INFO][4416] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-29-17" Sep 6 00:06:40.242682 env[1646]: 2025-09-06 00:06:40.045 [INFO][4416] ipam/ipam.go 511: Trying affinity for 192.168.120.0/26 host="ip-172-31-29-17" Sep 6 00:06:40.242682 env[1646]: 2025-09-06 00:06:40.058 [INFO][4416] ipam/ipam.go 158: Attempting to load block cidr=192.168.120.0/26 host="ip-172-31-29-17" Sep 6 00:06:40.242682 env[1646]: 2025-09-06 00:06:40.074 [INFO][4416] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.120.0/26 host="ip-172-31-29-17" Sep 6 00:06:40.242682 env[1646]: 2025-09-06 00:06:40.074 [INFO][4416] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.120.0/26 handle="k8s-pod-network.c83c81c7d8bba98657dde9226a791ae534da6ed796b0bd9c532d823a088f8eb4" host="ip-172-31-29-17" Sep 6 00:06:40.242682 env[1646]: 2025-09-06 00:06:40.084 [INFO][4416] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.c83c81c7d8bba98657dde9226a791ae534da6ed796b0bd9c532d823a088f8eb4 Sep 6 00:06:40.242682 env[1646]: 2025-09-06 00:06:40.116 [INFO][4416] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.120.0/26 handle="k8s-pod-network.c83c81c7d8bba98657dde9226a791ae534da6ed796b0bd9c532d823a088f8eb4" host="ip-172-31-29-17" Sep 6 00:06:40.242682 env[1646]: 2025-09-06 00:06:40.158 [INFO][4416] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.120.4/26] block=192.168.120.0/26 handle="k8s-pod-network.c83c81c7d8bba98657dde9226a791ae534da6ed796b0bd9c532d823a088f8eb4" host="ip-172-31-29-17" Sep 6 00:06:40.242682 env[1646]: 2025-09-06 00:06:40.158 [INFO][4416] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.120.4/26] handle="k8s-pod-network.c83c81c7d8bba98657dde9226a791ae534da6ed796b0bd9c532d823a088f8eb4" host="ip-172-31-29-17" Sep 6 00:06:40.242682 env[1646]: 2025-09-06 00:06:40.158 [INFO][4416] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:06:40.242682 env[1646]: 2025-09-06 00:06:40.158 [INFO][4416] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.120.4/26] IPv6=[] ContainerID="c83c81c7d8bba98657dde9226a791ae534da6ed796b0bd9c532d823a088f8eb4" HandleID="k8s-pod-network.c83c81c7d8bba98657dde9226a791ae534da6ed796b0bd9c532d823a088f8eb4" Workload="ip--172--31--29--17-k8s-coredns--674b8bbfcf--8tmgs-eth0" Sep 6 00:06:40.245520 env[1646]: 2025-09-06 00:06:40.172 [INFO][4399] cni-plugin/k8s.go 418: Populated endpoint ContainerID="c83c81c7d8bba98657dde9226a791ae534da6ed796b0bd9c532d823a088f8eb4" Namespace="kube-system" Pod="coredns-674b8bbfcf-8tmgs" WorkloadEndpoint="ip--172--31--29--17-k8s-coredns--674b8bbfcf--8tmgs-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--29--17-k8s-coredns--674b8bbfcf--8tmgs-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"4cbde096-0468-49f9-9aa1-f35dc9847a16", ResourceVersion:"1009", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 5, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-29-17", ContainerID:"", Pod:"coredns-674b8bbfcf-8tmgs", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.120.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0477a9ab9e6", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:06:40.245520 env[1646]: 2025-09-06 00:06:40.172 [INFO][4399] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.120.4/32] ContainerID="c83c81c7d8bba98657dde9226a791ae534da6ed796b0bd9c532d823a088f8eb4" Namespace="kube-system" Pod="coredns-674b8bbfcf-8tmgs" WorkloadEndpoint="ip--172--31--29--17-k8s-coredns--674b8bbfcf--8tmgs-eth0" Sep 6 00:06:40.245520 env[1646]: 2025-09-06 00:06:40.172 [INFO][4399] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali0477a9ab9e6 ContainerID="c83c81c7d8bba98657dde9226a791ae534da6ed796b0bd9c532d823a088f8eb4" Namespace="kube-system" Pod="coredns-674b8bbfcf-8tmgs" WorkloadEndpoint="ip--172--31--29--17-k8s-coredns--674b8bbfcf--8tmgs-eth0" Sep 6 00:06:40.245520 env[1646]: 2025-09-06 00:06:40.197 [INFO][4399] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="c83c81c7d8bba98657dde9226a791ae534da6ed796b0bd9c532d823a088f8eb4" Namespace="kube-system" Pod="coredns-674b8bbfcf-8tmgs" WorkloadEndpoint="ip--172--31--29--17-k8s-coredns--674b8bbfcf--8tmgs-eth0" Sep 6 00:06:40.245520 env[1646]: 2025-09-06 00:06:40.208 [INFO][4399] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="c83c81c7d8bba98657dde9226a791ae534da6ed796b0bd9c532d823a088f8eb4" Namespace="kube-system" Pod="coredns-674b8bbfcf-8tmgs" WorkloadEndpoint="ip--172--31--29--17-k8s-coredns--674b8bbfcf--8tmgs-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--29--17-k8s-coredns--674b8bbfcf--8tmgs-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"4cbde096-0468-49f9-9aa1-f35dc9847a16", ResourceVersion:"1009", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 5, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-29-17", ContainerID:"c83c81c7d8bba98657dde9226a791ae534da6ed796b0bd9c532d823a088f8eb4", Pod:"coredns-674b8bbfcf-8tmgs", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.120.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0477a9ab9e6", MAC:"be:40:e5:b0:e3:ef", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:06:40.245520 env[1646]: 2025-09-06 00:06:40.236 [INFO][4399] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="c83c81c7d8bba98657dde9226a791ae534da6ed796b0bd9c532d823a088f8eb4" Namespace="kube-system" Pod="coredns-674b8bbfcf-8tmgs" WorkloadEndpoint="ip--172--31--29--17-k8s-coredns--674b8bbfcf--8tmgs-eth0" Sep 6 00:06:40.305000 audit[4514]: NETFILTER_CFG table=filter:106 family=2 entries=40 op=nft_register_chain pid=4514 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:06:40.305000 audit[4514]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20764 a0=3 a1=ffffc5ad32c0 a2=0 a3=ffffa6862fa8 items=0 ppid=4008 pid=4514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:40.305000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:06:40.324994 systemd[1]: run-containerd-runc-k8s.io-05a17f9462fa09c33df76eff04514c05d0f0167559d2bd957c58e63ac5c50a31-runc.FB4evq.mount: Deactivated successfully. Sep 6 00:06:40.343784 systemd[1]: Started cri-containerd-05a17f9462fa09c33df76eff04514c05d0f0167559d2bd957c58e63ac5c50a31.scope. Sep 6 00:06:40.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.417000 audit: BPF prog-id=175 op=LOAD Sep 6 00:06:40.420000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.420000 audit[4502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4491 pid=4502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:40.420000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035613137663934363266613039633333646637366566663034353134 Sep 6 00:06:40.420000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.420000 audit[4502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4491 pid=4502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:40.420000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035613137663934363266613039633333646637366566663034353134 Sep 6 00:06:40.420000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.420000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.420000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.420000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.420000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.420000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.420000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.420000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.420000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.420000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.420000 audit: BPF prog-id=176 op=LOAD Sep 6 00:06:40.420000 audit[4502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4491 pid=4502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:40.420000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035613137663934363266613039633333646637366566663034353134 Sep 6 00:06:40.421000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.421000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.421000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.421000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.421000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.421000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.421000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.421000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.421000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.421000 audit: BPF prog-id=177 op=LOAD Sep 6 00:06:40.421000 audit[4502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4491 pid=4502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:40.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035613137663934363266613039633333646637366566663034353134 Sep 6 00:06:40.421000 audit: BPF prog-id=177 op=UNLOAD Sep 6 00:06:40.421000 audit: BPF prog-id=176 op=UNLOAD Sep 6 00:06:40.421000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.421000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.421000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.421000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.421000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.421000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.421000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.421000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.421000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.421000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.421000 audit: BPF prog-id=178 op=LOAD Sep 6 00:06:40.421000 audit[4502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4491 pid=4502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:40.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035613137663934363266613039633333646637366566663034353134 Sep 6 00:06:40.472378 systemd-networkd[1361]: calie8fe5890349: Gained IPv6LL Sep 6 00:06:40.485559 env[1646]: time="2025-09-06T00:06:40.485427170Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-t8r6b,Uid:cefa6dd1-365c-4b02-b17f-1f1b3edee0dd,Namespace:calico-system,Attempt:1,} returns sandbox id \"05a17f9462fa09c33df76eff04514c05d0f0167559d2bd957c58e63ac5c50a31\"" Sep 6 00:06:40.511058 env[1646]: time="2025-09-06T00:06:40.508292156Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:06:40.511058 env[1646]: time="2025-09-06T00:06:40.508387004Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:06:40.511058 env[1646]: time="2025-09-06T00:06:40.508416641Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:06:40.511058 env[1646]: time="2025-09-06T00:06:40.508707965Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c83c81c7d8bba98657dde9226a791ae534da6ed796b0bd9c532d823a088f8eb4 pid=4536 runtime=io.containerd.runc.v2 Sep 6 00:06:40.511587 env[1646]: 2025-09-06 00:06:39.918 [INFO][4450] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" Sep 6 00:06:40.511587 env[1646]: 2025-09-06 00:06:39.918 [INFO][4450] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" iface="eth0" netns="/var/run/netns/cni-bcb49b15-250d-9179-81b5-63e7eccc7d64" Sep 6 00:06:40.511587 env[1646]: 2025-09-06 00:06:39.923 [INFO][4450] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" iface="eth0" netns="/var/run/netns/cni-bcb49b15-250d-9179-81b5-63e7eccc7d64" Sep 6 00:06:40.511587 env[1646]: 2025-09-06 00:06:39.926 [INFO][4450] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" iface="eth0" netns="/var/run/netns/cni-bcb49b15-250d-9179-81b5-63e7eccc7d64" Sep 6 00:06:40.511587 env[1646]: 2025-09-06 00:06:39.926 [INFO][4450] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" Sep 6 00:06:40.511587 env[1646]: 2025-09-06 00:06:39.926 [INFO][4450] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" Sep 6 00:06:40.511587 env[1646]: 2025-09-06 00:06:40.404 [INFO][4470] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" HandleID="k8s-pod-network.9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" Workload="ip--172--31--29--17-k8s-coredns--674b8bbfcf--gb45h-eth0" Sep 6 00:06:40.511587 env[1646]: 2025-09-06 00:06:40.410 [INFO][4470] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:06:40.511587 env[1646]: 2025-09-06 00:06:40.411 [INFO][4470] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:06:40.511587 env[1646]: 2025-09-06 00:06:40.452 [WARNING][4470] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" HandleID="k8s-pod-network.9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" Workload="ip--172--31--29--17-k8s-coredns--674b8bbfcf--gb45h-eth0" Sep 6 00:06:40.511587 env[1646]: 2025-09-06 00:06:40.453 [INFO][4470] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" HandleID="k8s-pod-network.9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" Workload="ip--172--31--29--17-k8s-coredns--674b8bbfcf--gb45h-eth0" Sep 6 00:06:40.511587 env[1646]: 2025-09-06 00:06:40.469 [INFO][4470] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:06:40.511587 env[1646]: 2025-09-06 00:06:40.501 [INFO][4450] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" Sep 6 00:06:40.524378 systemd[1]: run-netns-cni\x2dbcb49b15\x2d250d\x2d9179\x2d81b5\x2d63e7eccc7d64.mount: Deactivated successfully. Sep 6 00:06:40.526444 env[1646]: time="2025-09-06T00:06:40.526373297Z" level=info msg="TearDown network for sandbox \"9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1\" successfully" Sep 6 00:06:40.526660 env[1646]: time="2025-09-06T00:06:40.526611756Z" level=info msg="StopPodSandbox for \"9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1\" returns successfully" Sep 6 00:06:40.527918 env[1646]: time="2025-09-06T00:06:40.527846247Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-gb45h,Uid:f9b12e81-24af-41a3-9679-1c0d02641bbd,Namespace:kube-system,Attempt:1,}" Sep 6 00:06:40.570430 env[1646]: 2025-09-06 00:06:39.937 [INFO][4451] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" Sep 6 00:06:40.570430 env[1646]: 2025-09-06 00:06:39.937 [INFO][4451] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" iface="eth0" netns="/var/run/netns/cni-79389150-4d53-1185-a1c0-248491f36493" Sep 6 00:06:40.570430 env[1646]: 2025-09-06 00:06:39.938 [INFO][4451] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" iface="eth0" netns="/var/run/netns/cni-79389150-4d53-1185-a1c0-248491f36493" Sep 6 00:06:40.570430 env[1646]: 2025-09-06 00:06:39.939 [INFO][4451] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" iface="eth0" netns="/var/run/netns/cni-79389150-4d53-1185-a1c0-248491f36493" Sep 6 00:06:40.570430 env[1646]: 2025-09-06 00:06:39.939 [INFO][4451] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" Sep 6 00:06:40.570430 env[1646]: 2025-09-06 00:06:39.939 [INFO][4451] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" Sep 6 00:06:40.570430 env[1646]: 2025-09-06 00:06:40.428 [INFO][4475] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" HandleID="k8s-pod-network.8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" Workload="ip--172--31--29--17-k8s-goldmane--54d579b49d--4jk72-eth0" Sep 6 00:06:40.570430 env[1646]: 2025-09-06 00:06:40.429 [INFO][4475] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:06:40.570430 env[1646]: 2025-09-06 00:06:40.471 [INFO][4475] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:06:40.570430 env[1646]: 2025-09-06 00:06:40.527 [WARNING][4475] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" HandleID="k8s-pod-network.8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" Workload="ip--172--31--29--17-k8s-goldmane--54d579b49d--4jk72-eth0" Sep 6 00:06:40.570430 env[1646]: 2025-09-06 00:06:40.528 [INFO][4475] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" HandleID="k8s-pod-network.8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" Workload="ip--172--31--29--17-k8s-goldmane--54d579b49d--4jk72-eth0" Sep 6 00:06:40.570430 env[1646]: 2025-09-06 00:06:40.538 [INFO][4475] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:06:40.570430 env[1646]: 2025-09-06 00:06:40.559 [INFO][4451] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" Sep 6 00:06:40.575138 env[1646]: time="2025-09-06T00:06:40.575044610Z" level=info msg="TearDown network for sandbox \"8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79\" successfully" Sep 6 00:06:40.592731 env[1646]: time="2025-09-06T00:06:40.592659753Z" level=info msg="StopPodSandbox for \"8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79\" returns successfully" Sep 6 00:06:40.595000 audit[4557]: NETFILTER_CFG table=filter:107 family=2 entries=50 op=nft_register_chain pid=4557 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:06:40.595000 audit[4557]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24928 a0=3 a1=ffffe8973850 a2=0 a3=ffff8b707fa8 items=0 ppid=4008 pid=4557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:40.595000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:06:40.603618 env[1646]: time="2025-09-06T00:06:40.603545192Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-4jk72,Uid:5c12b22f-4b8f-447e-b91b-6664f072632b,Namespace:calico-system,Attempt:1,}" Sep 6 00:06:40.659815 systemd[1]: Started cri-containerd-c83c81c7d8bba98657dde9226a791ae534da6ed796b0bd9c532d823a088f8eb4.scope. Sep 6 00:06:40.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.782000 audit: BPF prog-id=179 op=LOAD Sep 6 00:06:40.787000 audit[4558]: AVC avc: denied { bpf } for pid=4558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.787000 audit[4558]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4536 pid=4558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:40.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338336338316337643862626139383635376464653932323661373931 Sep 6 00:06:40.788000 audit[4558]: AVC avc: denied { perfmon } for pid=4558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.788000 audit[4558]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4536 pid=4558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:40.788000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338336338316337643862626139383635376464653932323661373931 Sep 6 00:06:40.788000 audit[4558]: AVC avc: denied { bpf } for pid=4558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.788000 audit[4558]: AVC avc: denied { bpf } for pid=4558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.788000 audit[4558]: AVC avc: denied { bpf } for pid=4558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.788000 audit[4558]: AVC avc: denied { perfmon } for pid=4558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.788000 audit[4558]: AVC avc: denied { perfmon } for pid=4558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.788000 audit[4558]: AVC avc: denied { perfmon } for pid=4558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.788000 audit[4558]: AVC avc: denied { perfmon } for pid=4558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.788000 audit[4558]: AVC avc: denied { perfmon } for pid=4558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.788000 audit[4558]: AVC avc: denied { bpf } for pid=4558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.788000 audit[4558]: AVC avc: denied { bpf } for pid=4558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.788000 audit: BPF prog-id=180 op=LOAD Sep 6 00:06:40.788000 audit[4558]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4536 pid=4558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:40.788000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338336338316337643862626139383635376464653932323661373931 Sep 6 00:06:40.788000 audit[4558]: AVC avc: denied { bpf } for pid=4558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.788000 audit[4558]: AVC avc: denied { bpf } for pid=4558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.788000 audit[4558]: AVC avc: denied { perfmon } for pid=4558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.788000 audit[4558]: AVC avc: denied { perfmon } for pid=4558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.788000 audit[4558]: AVC avc: denied { perfmon } for pid=4558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.788000 audit[4558]: AVC avc: denied { perfmon } for pid=4558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.788000 audit[4558]: AVC avc: denied { perfmon } for pid=4558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.788000 audit[4558]: AVC avc: denied { bpf } for pid=4558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.788000 audit[4558]: AVC avc: denied { bpf } for pid=4558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.788000 audit: BPF prog-id=181 op=LOAD Sep 6 00:06:40.788000 audit[4558]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4536 pid=4558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:40.788000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338336338316337643862626139383635376464653932323661373931 Sep 6 00:06:40.788000 audit: BPF prog-id=181 op=UNLOAD Sep 6 00:06:40.788000 audit: BPF prog-id=180 op=UNLOAD Sep 6 00:06:40.788000 audit[4558]: AVC avc: denied { bpf } for pid=4558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.788000 audit[4558]: AVC avc: denied { bpf } for pid=4558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.788000 audit[4558]: AVC avc: denied { bpf } for pid=4558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.788000 audit[4558]: AVC avc: denied { perfmon } for pid=4558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.788000 audit[4558]: AVC avc: denied { perfmon } for pid=4558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.788000 audit[4558]: AVC avc: denied { perfmon } for pid=4558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.788000 audit[4558]: AVC avc: denied { perfmon } for pid=4558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.788000 audit[4558]: AVC avc: denied { perfmon } for pid=4558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.788000 audit[4558]: AVC avc: denied { bpf } for pid=4558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.788000 audit[4558]: AVC avc: denied { bpf } for pid=4558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:40.788000 audit: BPF prog-id=182 op=LOAD Sep 6 00:06:40.788000 audit[4558]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4536 pid=4558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:40.788000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338336338316337643862626139383635376464653932323661373931 Sep 6 00:06:40.994533 env[1646]: time="2025-09-06T00:06:40.994442349Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-8tmgs,Uid:4cbde096-0468-49f9-9aa1-f35dc9847a16,Namespace:kube-system,Attempt:1,} returns sandbox id \"c83c81c7d8bba98657dde9226a791ae534da6ed796b0bd9c532d823a088f8eb4\"" Sep 6 00:06:41.016411 env[1646]: time="2025-09-06T00:06:41.016323479Z" level=info msg="CreateContainer within sandbox \"c83c81c7d8bba98657dde9226a791ae534da6ed796b0bd9c532d823a088f8eb4\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 6 00:06:41.052521 env[1646]: time="2025-09-06T00:06:41.049081312Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:41.066555 env[1646]: time="2025-09-06T00:06:41.066388954Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:270a0129ec34c3ad6ae6d56c0afce111eb0baa25dfdacb63722ec5887bafd3c5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:41.072989 env[1646]: time="2025-09-06T00:06:41.072873048Z" level=info msg="CreateContainer within sandbox \"c83c81c7d8bba98657dde9226a791ae534da6ed796b0bd9c532d823a088f8eb4\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"8124897511ab61e88b6e00bf1fdf27207591d420a1fdbe8c7272f246fbab1f7f\"" Sep 6 00:06:41.080361 env[1646]: time="2025-09-06T00:06:41.080257239Z" level=info msg="StartContainer for \"8124897511ab61e88b6e00bf1fdf27207591d420a1fdbe8c7272f246fbab1f7f\"" Sep 6 00:06:41.085352 env[1646]: time="2025-09-06T00:06:41.085290813Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:41.113808 env[1646]: time="2025-09-06T00:06:41.113721249Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:e7113761fc7633d515882f0d48b5c8d0b8e62f3f9d34823f2ee194bb16d2ec44,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:41.122807 env[1646]: time="2025-09-06T00:06:41.122694544Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\" returns image reference \"sha256:270a0129ec34c3ad6ae6d56c0afce111eb0baa25dfdacb63722ec5887bafd3c5\"" Sep 6 00:06:41.126567 env[1646]: time="2025-09-06T00:06:41.126286656Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\"" Sep 6 00:06:41.141098 env[1646]: time="2025-09-06T00:06:41.140998237Z" level=info msg="CreateContainer within sandbox \"1367f63384b5c789c1a5dffa322b4de8cbe598f91056ed1c1d76a9d0d8d986b8\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Sep 6 00:06:41.164459 systemd[1]: Started cri-containerd-8124897511ab61e88b6e00bf1fdf27207591d420a1fdbe8c7272f246fbab1f7f.scope. Sep 6 00:06:41.200398 env[1646]: time="2025-09-06T00:06:41.200321698Z" level=info msg="CreateContainer within sandbox \"1367f63384b5c789c1a5dffa322b4de8cbe598f91056ed1c1d76a9d0d8d986b8\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"13b16f894114a7b98ed2a6f65d49e8f3fbd918fb375e0bb29fad71eb18021429\"" Sep 6 00:06:41.202154 env[1646]: time="2025-09-06T00:06:41.202065200Z" level=info msg="StartContainer for \"13b16f894114a7b98ed2a6f65d49e8f3fbd918fb375e0bb29fad71eb18021429\"" Sep 6 00:06:41.291034 systemd[1]: run-netns-cni\x2d79389150\x2d4d53\x2d1185\x2da1c0\x2d248491f36493.mount: Deactivated successfully. Sep 6 00:06:41.323852 systemd-networkd[1361]: calidba50b7c16e: Link UP Sep 6 00:06:41.341187 kernel: kauditd_printk_skb: 786 callbacks suppressed Sep 6 00:06:41.341322 kernel: audit: type=1400 audit(1757117201.327:1230): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.351213 kernel: audit: type=1400 audit(1757117201.337:1231): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.337000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.355258 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 6 00:06:41.362440 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calidba50b7c16e: link becomes ready Sep 6 00:06:41.361921 systemd-networkd[1361]: calidba50b7c16e: Gained carrier Sep 6 00:06:41.370791 kernel: audit: type=1400 audit(1757117201.337:1232): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.337000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.373269 systemd-networkd[1361]: cali0477a9ab9e6: Gained IPv6LL Sep 6 00:06:41.391552 kernel: audit: type=1400 audit(1757117201.337:1233): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.337000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.390038 systemd[1]: Started cri-containerd-13b16f894114a7b98ed2a6f65d49e8f3fbd918fb375e0bb29fad71eb18021429.scope. Sep 6 00:06:41.392384 env[1646]: time="2025-09-06T00:06:41.380076918Z" level=info msg="StopPodSandbox for \"e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714\"" Sep 6 00:06:41.413547 kernel: audit: type=1400 audit(1757117201.337:1234): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.337000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.414526 env[1646]: time="2025-09-06T00:06:41.414452784Z" level=info msg="StopPodSandbox for \"4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8\"" Sep 6 00:06:41.432739 kernel: audit: type=1400 audit(1757117201.337:1235): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.337000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.446583 kernel: audit: type=1400 audit(1757117201.337:1236): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.337000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.463562 kernel: audit: type=1400 audit(1757117201.337:1237): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.337000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.477134 kernel: audit: type=1400 audit(1757117201.337:1238): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.337000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.481158 env[1646]: 2025-09-06 00:06:40.864 [INFO][4556] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--29--17-k8s-coredns--674b8bbfcf--gb45h-eth0 coredns-674b8bbfcf- kube-system f9b12e81-24af-41a3-9679-1c0d02641bbd 1017 0 2025-09-06 00:05:34 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-29-17 coredns-674b8bbfcf-gb45h eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calidba50b7c16e [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="1e48a464470aa581251b4c6ef2d4b8ddcf658110ce0bc0d0d07231176ebd7fd5" Namespace="kube-system" Pod="coredns-674b8bbfcf-gb45h" WorkloadEndpoint="ip--172--31--29--17-k8s-coredns--674b8bbfcf--gb45h-" Sep 6 00:06:41.481158 env[1646]: 2025-09-06 00:06:40.864 [INFO][4556] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="1e48a464470aa581251b4c6ef2d4b8ddcf658110ce0bc0d0d07231176ebd7fd5" Namespace="kube-system" Pod="coredns-674b8bbfcf-gb45h" WorkloadEndpoint="ip--172--31--29--17-k8s-coredns--674b8bbfcf--gb45h-eth0" Sep 6 00:06:41.481158 env[1646]: 2025-09-06 00:06:41.083 [INFO][4605] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="1e48a464470aa581251b4c6ef2d4b8ddcf658110ce0bc0d0d07231176ebd7fd5" HandleID="k8s-pod-network.1e48a464470aa581251b4c6ef2d4b8ddcf658110ce0bc0d0d07231176ebd7fd5" Workload="ip--172--31--29--17-k8s-coredns--674b8bbfcf--gb45h-eth0" Sep 6 00:06:41.481158 env[1646]: 2025-09-06 00:06:41.084 [INFO][4605] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="1e48a464470aa581251b4c6ef2d4b8ddcf658110ce0bc0d0d07231176ebd7fd5" HandleID="k8s-pod-network.1e48a464470aa581251b4c6ef2d4b8ddcf658110ce0bc0d0d07231176ebd7fd5" Workload="ip--172--31--29--17-k8s-coredns--674b8bbfcf--gb45h-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000225760), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-29-17", "pod":"coredns-674b8bbfcf-gb45h", "timestamp":"2025-09-06 00:06:41.08355289 +0000 UTC"}, Hostname:"ip-172-31-29-17", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:06:41.481158 env[1646]: 2025-09-06 00:06:41.084 [INFO][4605] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:06:41.481158 env[1646]: 2025-09-06 00:06:41.085 [INFO][4605] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:06:41.481158 env[1646]: 2025-09-06 00:06:41.085 [INFO][4605] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-29-17' Sep 6 00:06:41.481158 env[1646]: 2025-09-06 00:06:41.104 [INFO][4605] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.1e48a464470aa581251b4c6ef2d4b8ddcf658110ce0bc0d0d07231176ebd7fd5" host="ip-172-31-29-17" Sep 6 00:06:41.481158 env[1646]: 2025-09-06 00:06:41.128 [INFO][4605] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-29-17" Sep 6 00:06:41.481158 env[1646]: 2025-09-06 00:06:41.150 [INFO][4605] ipam/ipam.go 511: Trying affinity for 192.168.120.0/26 host="ip-172-31-29-17" Sep 6 00:06:41.481158 env[1646]: 2025-09-06 00:06:41.155 [INFO][4605] ipam/ipam.go 158: Attempting to load block cidr=192.168.120.0/26 host="ip-172-31-29-17" Sep 6 00:06:41.481158 env[1646]: 2025-09-06 00:06:41.175 [INFO][4605] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.120.0/26 host="ip-172-31-29-17" Sep 6 00:06:41.481158 env[1646]: 2025-09-06 00:06:41.177 [INFO][4605] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.120.0/26 handle="k8s-pod-network.1e48a464470aa581251b4c6ef2d4b8ddcf658110ce0bc0d0d07231176ebd7fd5" host="ip-172-31-29-17" Sep 6 00:06:41.481158 env[1646]: 2025-09-06 00:06:41.183 [INFO][4605] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.1e48a464470aa581251b4c6ef2d4b8ddcf658110ce0bc0d0d07231176ebd7fd5 Sep 6 00:06:41.481158 env[1646]: 2025-09-06 00:06:41.195 [INFO][4605] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.120.0/26 handle="k8s-pod-network.1e48a464470aa581251b4c6ef2d4b8ddcf658110ce0bc0d0d07231176ebd7fd5" host="ip-172-31-29-17" Sep 6 00:06:41.481158 env[1646]: 2025-09-06 00:06:41.236 [INFO][4605] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.120.5/26] block=192.168.120.0/26 handle="k8s-pod-network.1e48a464470aa581251b4c6ef2d4b8ddcf658110ce0bc0d0d07231176ebd7fd5" host="ip-172-31-29-17" Sep 6 00:06:41.481158 env[1646]: 2025-09-06 00:06:41.237 [INFO][4605] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.120.5/26] handle="k8s-pod-network.1e48a464470aa581251b4c6ef2d4b8ddcf658110ce0bc0d0d07231176ebd7fd5" host="ip-172-31-29-17" Sep 6 00:06:41.481158 env[1646]: 2025-09-06 00:06:41.237 [INFO][4605] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:06:41.481158 env[1646]: 2025-09-06 00:06:41.237 [INFO][4605] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.120.5/26] IPv6=[] ContainerID="1e48a464470aa581251b4c6ef2d4b8ddcf658110ce0bc0d0d07231176ebd7fd5" HandleID="k8s-pod-network.1e48a464470aa581251b4c6ef2d4b8ddcf658110ce0bc0d0d07231176ebd7fd5" Workload="ip--172--31--29--17-k8s-coredns--674b8bbfcf--gb45h-eth0" Sep 6 00:06:41.482583 env[1646]: 2025-09-06 00:06:41.246 [INFO][4556] cni-plugin/k8s.go 418: Populated endpoint ContainerID="1e48a464470aa581251b4c6ef2d4b8ddcf658110ce0bc0d0d07231176ebd7fd5" Namespace="kube-system" Pod="coredns-674b8bbfcf-gb45h" WorkloadEndpoint="ip--172--31--29--17-k8s-coredns--674b8bbfcf--gb45h-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--29--17-k8s-coredns--674b8bbfcf--gb45h-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"f9b12e81-24af-41a3-9679-1c0d02641bbd", ResourceVersion:"1017", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 5, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-29-17", ContainerID:"", Pod:"coredns-674b8bbfcf-gb45h", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.120.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calidba50b7c16e", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:06:41.482583 env[1646]: 2025-09-06 00:06:41.247 [INFO][4556] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.120.5/32] ContainerID="1e48a464470aa581251b4c6ef2d4b8ddcf658110ce0bc0d0d07231176ebd7fd5" Namespace="kube-system" Pod="coredns-674b8bbfcf-gb45h" WorkloadEndpoint="ip--172--31--29--17-k8s-coredns--674b8bbfcf--gb45h-eth0" Sep 6 00:06:41.482583 env[1646]: 2025-09-06 00:06:41.247 [INFO][4556] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calidba50b7c16e ContainerID="1e48a464470aa581251b4c6ef2d4b8ddcf658110ce0bc0d0d07231176ebd7fd5" Namespace="kube-system" Pod="coredns-674b8bbfcf-gb45h" WorkloadEndpoint="ip--172--31--29--17-k8s-coredns--674b8bbfcf--gb45h-eth0" Sep 6 00:06:41.482583 env[1646]: 2025-09-06 00:06:41.381 [INFO][4556] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="1e48a464470aa581251b4c6ef2d4b8ddcf658110ce0bc0d0d07231176ebd7fd5" Namespace="kube-system" Pod="coredns-674b8bbfcf-gb45h" WorkloadEndpoint="ip--172--31--29--17-k8s-coredns--674b8bbfcf--gb45h-eth0" Sep 6 00:06:41.482583 env[1646]: 2025-09-06 00:06:41.423 [INFO][4556] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="1e48a464470aa581251b4c6ef2d4b8ddcf658110ce0bc0d0d07231176ebd7fd5" Namespace="kube-system" Pod="coredns-674b8bbfcf-gb45h" WorkloadEndpoint="ip--172--31--29--17-k8s-coredns--674b8bbfcf--gb45h-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--29--17-k8s-coredns--674b8bbfcf--gb45h-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"f9b12e81-24af-41a3-9679-1c0d02641bbd", ResourceVersion:"1017", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 5, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-29-17", ContainerID:"1e48a464470aa581251b4c6ef2d4b8ddcf658110ce0bc0d0d07231176ebd7fd5", Pod:"coredns-674b8bbfcf-gb45h", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.120.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calidba50b7c16e", MAC:"3a:eb:cb:ed:db:76", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:06:41.482583 env[1646]: 2025-09-06 00:06:41.464 [INFO][4556] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="1e48a464470aa581251b4c6ef2d4b8ddcf658110ce0bc0d0d07231176ebd7fd5" Namespace="kube-system" Pod="coredns-674b8bbfcf-gb45h" WorkloadEndpoint="ip--172--31--29--17-k8s-coredns--674b8bbfcf--gb45h-eth0" Sep 6 00:06:41.494738 kernel: audit: type=1400 audit(1757117201.337:1239): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.337000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.337000 audit: BPF prog-id=183 op=LOAD Sep 6 00:06:41.338000 audit[4631]: AVC avc: denied { bpf } for pid=4631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.338000 audit[4631]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4536 pid=4631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:41.338000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831323438393735313161623631653838623665303062663166646632 Sep 6 00:06:41.338000 audit[4631]: AVC avc: denied { perfmon } for pid=4631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.338000 audit[4631]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4536 pid=4631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:41.338000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831323438393735313161623631653838623665303062663166646632 Sep 6 00:06:41.339000 audit[4631]: AVC avc: denied { bpf } for pid=4631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.339000 audit[4631]: AVC avc: denied { bpf } for pid=4631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.339000 audit[4631]: AVC avc: denied { bpf } for pid=4631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.339000 audit[4631]: AVC avc: denied { perfmon } for pid=4631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.339000 audit[4631]: AVC avc: denied { perfmon } for pid=4631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.339000 audit[4631]: AVC avc: denied { perfmon } for pid=4631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.339000 audit[4631]: AVC avc: denied { perfmon } for pid=4631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.339000 audit[4631]: AVC avc: denied { perfmon } for pid=4631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.339000 audit[4631]: AVC avc: denied { bpf } for pid=4631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.339000 audit[4631]: AVC avc: denied { bpf } for pid=4631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.339000 audit: BPF prog-id=184 op=LOAD Sep 6 00:06:41.339000 audit[4631]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4536 pid=4631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:41.339000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831323438393735313161623631653838623665303062663166646632 Sep 6 00:06:41.339000 audit[4631]: AVC avc: denied { bpf } for pid=4631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.339000 audit[4631]: AVC avc: denied { bpf } for pid=4631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.339000 audit[4631]: AVC avc: denied { perfmon } for pid=4631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.339000 audit[4631]: AVC avc: denied { perfmon } for pid=4631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.339000 audit[4631]: AVC avc: denied { perfmon } for pid=4631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.339000 audit[4631]: AVC avc: denied { perfmon } for pid=4631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.339000 audit[4631]: AVC avc: denied { perfmon } for pid=4631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.339000 audit[4631]: AVC avc: denied { bpf } for pid=4631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.339000 audit[4631]: AVC avc: denied { bpf } for pid=4631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.339000 audit: BPF prog-id=185 op=LOAD Sep 6 00:06:41.339000 audit[4631]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4536 pid=4631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:41.339000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831323438393735313161623631653838623665303062663166646632 Sep 6 00:06:41.339000 audit: BPF prog-id=185 op=UNLOAD Sep 6 00:06:41.339000 audit: BPF prog-id=184 op=UNLOAD Sep 6 00:06:41.339000 audit[4631]: AVC avc: denied { bpf } for pid=4631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.339000 audit[4631]: AVC avc: denied { bpf } for pid=4631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.339000 audit[4631]: AVC avc: denied { bpf } for pid=4631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.339000 audit[4631]: AVC avc: denied { perfmon } for pid=4631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.339000 audit[4631]: AVC avc: denied { perfmon } for pid=4631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.339000 audit[4631]: AVC avc: denied { perfmon } for pid=4631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.339000 audit[4631]: AVC avc: denied { perfmon } for pid=4631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.339000 audit[4631]: AVC avc: denied { perfmon } for pid=4631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.339000 audit[4631]: AVC avc: denied { bpf } for pid=4631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.339000 audit[4631]: AVC avc: denied { bpf } for pid=4631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.339000 audit: BPF prog-id=186 op=LOAD Sep 6 00:06:41.339000 audit[4631]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4536 pid=4631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:41.339000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831323438393735313161623631653838623665303062663166646632 Sep 6 00:06:41.522960 systemd-networkd[1361]: calida008288668: Link UP Sep 6 00:06:41.528814 systemd-networkd[1361]: calida008288668: Gained carrier Sep 6 00:06:41.529591 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calida008288668: link becomes ready Sep 6 00:06:41.593245 env[1646]: 2025-09-06 00:06:40.906 [INFO][4574] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--29--17-k8s-goldmane--54d579b49d--4jk72-eth0 goldmane-54d579b49d- calico-system 5c12b22f-4b8f-447e-b91b-6664f072632b 1018 0 2025-09-06 00:06:11 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:54d579b49d projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s ip-172-31-29-17 goldmane-54d579b49d-4jk72 eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] calida008288668 [] [] }} ContainerID="24fb2ad2b168b3518acfaeabd2755f0cd0731112dd46db1df3c5efcb62e6a66f" Namespace="calico-system" Pod="goldmane-54d579b49d-4jk72" WorkloadEndpoint="ip--172--31--29--17-k8s-goldmane--54d579b49d--4jk72-" Sep 6 00:06:41.593245 env[1646]: 2025-09-06 00:06:40.906 [INFO][4574] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="24fb2ad2b168b3518acfaeabd2755f0cd0731112dd46db1df3c5efcb62e6a66f" Namespace="calico-system" Pod="goldmane-54d579b49d-4jk72" WorkloadEndpoint="ip--172--31--29--17-k8s-goldmane--54d579b49d--4jk72-eth0" Sep 6 00:06:41.593245 env[1646]: 2025-09-06 00:06:41.110 [INFO][4614] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="24fb2ad2b168b3518acfaeabd2755f0cd0731112dd46db1df3c5efcb62e6a66f" HandleID="k8s-pod-network.24fb2ad2b168b3518acfaeabd2755f0cd0731112dd46db1df3c5efcb62e6a66f" Workload="ip--172--31--29--17-k8s-goldmane--54d579b49d--4jk72-eth0" Sep 6 00:06:41.593245 env[1646]: 2025-09-06 00:06:41.111 [INFO][4614] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="24fb2ad2b168b3518acfaeabd2755f0cd0731112dd46db1df3c5efcb62e6a66f" HandleID="k8s-pod-network.24fb2ad2b168b3518acfaeabd2755f0cd0731112dd46db1df3c5efcb62e6a66f" Workload="ip--172--31--29--17-k8s-goldmane--54d579b49d--4jk72-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004db20), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-29-17", "pod":"goldmane-54d579b49d-4jk72", "timestamp":"2025-09-06 00:06:41.110910905 +0000 UTC"}, Hostname:"ip-172-31-29-17", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:06:41.593245 env[1646]: 2025-09-06 00:06:41.111 [INFO][4614] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:06:41.593245 env[1646]: 2025-09-06 00:06:41.237 [INFO][4614] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:06:41.593245 env[1646]: 2025-09-06 00:06:41.237 [INFO][4614] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-29-17' Sep 6 00:06:41.593245 env[1646]: 2025-09-06 00:06:41.333 [INFO][4614] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.24fb2ad2b168b3518acfaeabd2755f0cd0731112dd46db1df3c5efcb62e6a66f" host="ip-172-31-29-17" Sep 6 00:06:41.593245 env[1646]: 2025-09-06 00:06:41.345 [INFO][4614] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-29-17" Sep 6 00:06:41.593245 env[1646]: 2025-09-06 00:06:41.386 [INFO][4614] ipam/ipam.go 511: Trying affinity for 192.168.120.0/26 host="ip-172-31-29-17" Sep 6 00:06:41.593245 env[1646]: 2025-09-06 00:06:41.413 [INFO][4614] ipam/ipam.go 158: Attempting to load block cidr=192.168.120.0/26 host="ip-172-31-29-17" Sep 6 00:06:41.593245 env[1646]: 2025-09-06 00:06:41.426 [INFO][4614] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.120.0/26 host="ip-172-31-29-17" Sep 6 00:06:41.593245 env[1646]: 2025-09-06 00:06:41.426 [INFO][4614] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.120.0/26 handle="k8s-pod-network.24fb2ad2b168b3518acfaeabd2755f0cd0731112dd46db1df3c5efcb62e6a66f" host="ip-172-31-29-17" Sep 6 00:06:41.593245 env[1646]: 2025-09-06 00:06:41.445 [INFO][4614] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.24fb2ad2b168b3518acfaeabd2755f0cd0731112dd46db1df3c5efcb62e6a66f Sep 6 00:06:41.593245 env[1646]: 2025-09-06 00:06:41.464 [INFO][4614] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.120.0/26 handle="k8s-pod-network.24fb2ad2b168b3518acfaeabd2755f0cd0731112dd46db1df3c5efcb62e6a66f" host="ip-172-31-29-17" Sep 6 00:06:41.593245 env[1646]: 2025-09-06 00:06:41.487 [INFO][4614] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.120.6/26] block=192.168.120.0/26 handle="k8s-pod-network.24fb2ad2b168b3518acfaeabd2755f0cd0731112dd46db1df3c5efcb62e6a66f" host="ip-172-31-29-17" Sep 6 00:06:41.593245 env[1646]: 2025-09-06 00:06:41.487 [INFO][4614] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.120.6/26] handle="k8s-pod-network.24fb2ad2b168b3518acfaeabd2755f0cd0731112dd46db1df3c5efcb62e6a66f" host="ip-172-31-29-17" Sep 6 00:06:41.593245 env[1646]: 2025-09-06 00:06:41.487 [INFO][4614] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:06:41.593245 env[1646]: 2025-09-06 00:06:41.487 [INFO][4614] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.120.6/26] IPv6=[] ContainerID="24fb2ad2b168b3518acfaeabd2755f0cd0731112dd46db1df3c5efcb62e6a66f" HandleID="k8s-pod-network.24fb2ad2b168b3518acfaeabd2755f0cd0731112dd46db1df3c5efcb62e6a66f" Workload="ip--172--31--29--17-k8s-goldmane--54d579b49d--4jk72-eth0" Sep 6 00:06:41.595024 env[1646]: 2025-09-06 00:06:41.513 [INFO][4574] cni-plugin/k8s.go 418: Populated endpoint ContainerID="24fb2ad2b168b3518acfaeabd2755f0cd0731112dd46db1df3c5efcb62e6a66f" Namespace="calico-system" Pod="goldmane-54d579b49d-4jk72" WorkloadEndpoint="ip--172--31--29--17-k8s-goldmane--54d579b49d--4jk72-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--29--17-k8s-goldmane--54d579b49d--4jk72-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"5c12b22f-4b8f-447e-b91b-6664f072632b", ResourceVersion:"1018", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 6, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-29-17", ContainerID:"", Pod:"goldmane-54d579b49d-4jk72", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.120.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calida008288668", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:06:41.595024 env[1646]: 2025-09-06 00:06:41.514 [INFO][4574] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.120.6/32] ContainerID="24fb2ad2b168b3518acfaeabd2755f0cd0731112dd46db1df3c5efcb62e6a66f" Namespace="calico-system" Pod="goldmane-54d579b49d-4jk72" WorkloadEndpoint="ip--172--31--29--17-k8s-goldmane--54d579b49d--4jk72-eth0" Sep 6 00:06:41.595024 env[1646]: 2025-09-06 00:06:41.514 [INFO][4574] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calida008288668 ContainerID="24fb2ad2b168b3518acfaeabd2755f0cd0731112dd46db1df3c5efcb62e6a66f" Namespace="calico-system" Pod="goldmane-54d579b49d-4jk72" WorkloadEndpoint="ip--172--31--29--17-k8s-goldmane--54d579b49d--4jk72-eth0" Sep 6 00:06:41.595024 env[1646]: 2025-09-06 00:06:41.530 [INFO][4574] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="24fb2ad2b168b3518acfaeabd2755f0cd0731112dd46db1df3c5efcb62e6a66f" Namespace="calico-system" Pod="goldmane-54d579b49d-4jk72" WorkloadEndpoint="ip--172--31--29--17-k8s-goldmane--54d579b49d--4jk72-eth0" Sep 6 00:06:41.595024 env[1646]: 2025-09-06 00:06:41.531 [INFO][4574] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="24fb2ad2b168b3518acfaeabd2755f0cd0731112dd46db1df3c5efcb62e6a66f" Namespace="calico-system" Pod="goldmane-54d579b49d-4jk72" WorkloadEndpoint="ip--172--31--29--17-k8s-goldmane--54d579b49d--4jk72-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--29--17-k8s-goldmane--54d579b49d--4jk72-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"5c12b22f-4b8f-447e-b91b-6664f072632b", ResourceVersion:"1018", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 6, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-29-17", ContainerID:"24fb2ad2b168b3518acfaeabd2755f0cd0731112dd46db1df3c5efcb62e6a66f", Pod:"goldmane-54d579b49d-4jk72", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.120.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calida008288668", MAC:"62:f9:95:81:7e:27", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:06:41.595024 env[1646]: 2025-09-06 00:06:41.576 [INFO][4574] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="24fb2ad2b168b3518acfaeabd2755f0cd0731112dd46db1df3c5efcb62e6a66f" Namespace="calico-system" Pod="goldmane-54d579b49d-4jk72" WorkloadEndpoint="ip--172--31--29--17-k8s-goldmane--54d579b49d--4jk72-eth0" Sep 6 00:06:41.609799 env[1646]: time="2025-09-06T00:06:41.609604908Z" level=info msg="StartContainer for \"8124897511ab61e88b6e00bf1fdf27207591d420a1fdbe8c7272f246fbab1f7f\" returns successfully" Sep 6 00:06:41.624533 systemd-networkd[1361]: cali7cbe6348786: Gained IPv6LL Sep 6 00:06:41.630284 env[1646]: time="2025-09-06T00:06:41.629893743Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:06:41.630284 env[1646]: time="2025-09-06T00:06:41.629964126Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:06:41.630284 env[1646]: time="2025-09-06T00:06:41.629989791Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:06:41.634492 env[1646]: time="2025-09-06T00:06:41.632951017Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1e48a464470aa581251b4c6ef2d4b8ddcf658110ce0bc0d0d07231176ebd7fd5 pid=4728 runtime=io.containerd.runc.v2 Sep 6 00:06:41.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.638000 audit: BPF prog-id=187 op=LOAD Sep 6 00:06:41.645000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.645000 audit[4658]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4225 pid=4658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:41.645000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133623136663839343131346137623938656432613666363564343965 Sep 6 00:06:41.645000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.645000 audit[4658]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4225 pid=4658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:41.645000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133623136663839343131346137623938656432613666363564343965 Sep 6 00:06:41.645000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.645000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.645000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.645000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.645000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.645000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.645000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.645000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.645000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.645000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.645000 audit: BPF prog-id=188 op=LOAD Sep 6 00:06:41.645000 audit[4658]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4225 pid=4658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:41.645000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133623136663839343131346137623938656432613666363564343965 Sep 6 00:06:41.645000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.645000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.645000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.645000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.645000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.645000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.645000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.645000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.645000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.645000 audit: BPF prog-id=189 op=LOAD Sep 6 00:06:41.645000 audit[4658]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4225 pid=4658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:41.645000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133623136663839343131346137623938656432613666363564343965 Sep 6 00:06:41.646000 audit: BPF prog-id=189 op=UNLOAD Sep 6 00:06:41.646000 audit: BPF prog-id=188 op=UNLOAD Sep 6 00:06:41.646000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.646000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.646000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.646000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.646000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.646000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.646000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.646000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.646000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.646000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.646000 audit: BPF prog-id=190 op=LOAD Sep 6 00:06:41.646000 audit[4658]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4225 pid=4658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:41.646000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133623136663839343131346137623938656432613666363564343965 Sep 6 00:06:41.752000 audit[4769]: NETFILTER_CFG table=filter:108 family=2 entries=44 op=nft_register_chain pid=4769 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:06:41.752000 audit[4769]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=21532 a0=3 a1=ffffc2f52440 a2=0 a3=ffff94105fa8 items=0 ppid=4008 pid=4769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:41.752000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:06:41.776984 env[1646]: time="2025-09-06T00:06:41.776774348Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:06:41.776984 env[1646]: time="2025-09-06T00:06:41.776851451Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:06:41.777715 env[1646]: time="2025-09-06T00:06:41.777336938Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:06:41.777923 systemd[1]: Started cri-containerd-1e48a464470aa581251b4c6ef2d4b8ddcf658110ce0bc0d0d07231176ebd7fd5.scope. Sep 6 00:06:41.781437 env[1646]: time="2025-09-06T00:06:41.781342520Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/24fb2ad2b168b3518acfaeabd2755f0cd0731112dd46db1df3c5efcb62e6a66f pid=4763 runtime=io.containerd.runc.v2 Sep 6 00:06:41.804453 env[1646]: time="2025-09-06T00:06:41.804383025Z" level=info msg="StartContainer for \"13b16f894114a7b98ed2a6f65d49e8f3fbd918fb375e0bb29fad71eb18021429\" returns successfully" Sep 6 00:06:41.859096 systemd[1]: Started cri-containerd-24fb2ad2b168b3518acfaeabd2755f0cd0731112dd46db1df3c5efcb62e6a66f.scope. Sep 6 00:06:41.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.882000 audit: BPF prog-id=191 op=LOAD Sep 6 00:06:41.883000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.883000 audit[4747]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4728 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:41.883000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165343861343634343730616135383132353162346336656632643462 Sep 6 00:06:41.883000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.883000 audit[4747]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4728 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:41.883000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165343861343634343730616135383132353162346336656632643462 Sep 6 00:06:41.883000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.883000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.883000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.883000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.883000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.883000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.883000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.883000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.883000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.883000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.883000 audit: BPF prog-id=192 op=LOAD Sep 6 00:06:41.883000 audit[4747]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4728 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:41.883000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165343861343634343730616135383132353162346336656632643462 Sep 6 00:06:41.884000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.884000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.884000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.884000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.884000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.884000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.884000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.884000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.884000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.884000 audit: BPF prog-id=193 op=LOAD Sep 6 00:06:41.884000 audit[4747]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4728 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:41.884000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165343861343634343730616135383132353162346336656632643462 Sep 6 00:06:41.884000 audit: BPF prog-id=193 op=UNLOAD Sep 6 00:06:41.884000 audit: BPF prog-id=192 op=UNLOAD Sep 6 00:06:41.884000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.884000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.884000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.884000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.884000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.884000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.884000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.884000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.884000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.884000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:41.884000 audit: BPF prog-id=194 op=LOAD Sep 6 00:06:41.884000 audit[4747]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4728 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:41.884000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165343861343634343730616135383132353162346336656632643462 Sep 6 00:06:41.927000 audit[4682]: AVC avc: denied { search } for pid=4682 comm="nginx" name="crypto" dev="proc" ino=24954 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c431 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Sep 6 00:06:41.927000 audit[4682]: SYSCALL arch=c00000b7 syscall=56 success=no exit=-13 a0=ffffffffffffff9c a1=ffff8a4e0958 a2=0 a3=0 items=0 ppid=4225 pid=4682 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c431 key=(null) Sep 6 00:06:41.927000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Sep 6 00:06:42.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.026000 audit: BPF prog-id=195 op=LOAD Sep 6 00:06:42.032000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.032000 audit[4791]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4763 pid=4791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:42.032000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234666232616432623136386233353138616366616561626432373535 Sep 6 00:06:42.034000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.034000 audit[4791]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4763 pid=4791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:42.034000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234666232616432623136386233353138616366616561626432373535 Sep 6 00:06:42.045000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.045000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.045000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.045000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.045000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.045000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.045000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.045000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.045000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.045000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.042000 audit[4828]: NETFILTER_CFG table=filter:109 family=2 entries=66 op=nft_register_chain pid=4828 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:06:42.042000 audit[4828]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=32784 a0=3 a1=ffffcbec4370 a2=0 a3=ffffa24e9fa8 items=0 ppid=4008 pid=4828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:42.042000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:06:42.045000 audit: BPF prog-id=196 op=LOAD Sep 6 00:06:42.045000 audit[4791]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4763 pid=4791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:42.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234666232616432623136386233353138616366616561626432373535 Sep 6 00:06:42.052000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.052000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.052000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.052000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.052000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.052000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.052000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.052000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.052000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.052000 audit: BPF prog-id=197 op=LOAD Sep 6 00:06:42.052000 audit[4791]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4763 pid=4791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:42.052000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234666232616432623136386233353138616366616561626432373535 Sep 6 00:06:42.053000 audit: BPF prog-id=197 op=UNLOAD Sep 6 00:06:42.053000 audit: BPF prog-id=196 op=UNLOAD Sep 6 00:06:42.053000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.053000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.053000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.053000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.053000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.053000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.053000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.053000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.053000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.053000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.053000 audit: BPF prog-id=198 op=LOAD Sep 6 00:06:42.053000 audit[4791]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4763 pid=4791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:42.053000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234666232616432623136386233353138616366616561626432373535 Sep 6 00:06:42.101453 env[1646]: time="2025-09-06T00:06:42.101274891Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-gb45h,Uid:f9b12e81-24af-41a3-9679-1c0d02641bbd,Namespace:kube-system,Attempt:1,} returns sandbox id \"1e48a464470aa581251b4c6ef2d4b8ddcf658110ce0bc0d0d07231176ebd7fd5\"" Sep 6 00:06:42.137711 env[1646]: time="2025-09-06T00:06:42.137513882Z" level=info msg="CreateContainer within sandbox \"1e48a464470aa581251b4c6ef2d4b8ddcf658110ce0bc0d0d07231176ebd7fd5\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 6 00:06:42.162603 kubelet[2752]: I0906 00:06:42.162510 2752 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-8tmgs" podStartSLOduration=68.162479954 podStartE2EDuration="1m8.162479954s" podCreationTimestamp="2025-09-06 00:05:34 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 00:06:42.147292057 +0000 UTC m=+73.021742399" watchObservedRunningTime="2025-09-06 00:06:42.162479954 +0000 UTC m=+73.036930272" Sep 6 00:06:42.213428 env[1646]: time="2025-09-06T00:06:42.213355804Z" level=info msg="CreateContainer within sandbox \"1e48a464470aa581251b4c6ef2d4b8ddcf658110ce0bc0d0d07231176ebd7fd5\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"6cfaed791d55c4d9e42ef5e152fc9b5fb532635c84c8e28be798f196e2f635d3\"" Sep 6 00:06:42.214690 env[1646]: time="2025-09-06T00:06:42.214628224Z" level=info msg="StartContainer for \"6cfaed791d55c4d9e42ef5e152fc9b5fb532635c84c8e28be798f196e2f635d3\"" Sep 6 00:06:42.283172 systemd[1]: run-containerd-runc-k8s.io-1e48a464470aa581251b4c6ef2d4b8ddcf658110ce0bc0d0d07231176ebd7fd5-runc.w0brxp.mount: Deactivated successfully. Sep 6 00:06:42.313653 systemd[1]: run-containerd-runc-k8s.io-6cfaed791d55c4d9e42ef5e152fc9b5fb532635c84c8e28be798f196e2f635d3-runc.aWH3js.mount: Deactivated successfully. Sep 6 00:06:42.321547 env[1646]: 2025-09-06 00:06:42.089 [INFO][4722] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" Sep 6 00:06:42.321547 env[1646]: 2025-09-06 00:06:42.090 [INFO][4722] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" iface="eth0" netns="/var/run/netns/cni-c641dcf3-76d0-0bfa-01d5-7eb17e3316a8" Sep 6 00:06:42.321547 env[1646]: 2025-09-06 00:06:42.090 [INFO][4722] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" iface="eth0" netns="/var/run/netns/cni-c641dcf3-76d0-0bfa-01d5-7eb17e3316a8" Sep 6 00:06:42.321547 env[1646]: 2025-09-06 00:06:42.091 [INFO][4722] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" iface="eth0" netns="/var/run/netns/cni-c641dcf3-76d0-0bfa-01d5-7eb17e3316a8" Sep 6 00:06:42.321547 env[1646]: 2025-09-06 00:06:42.091 [INFO][4722] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" Sep 6 00:06:42.321547 env[1646]: 2025-09-06 00:06:42.091 [INFO][4722] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" Sep 6 00:06:42.321547 env[1646]: 2025-09-06 00:06:42.224 [INFO][4830] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" HandleID="k8s-pod-network.e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" Workload="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--z8s4t-eth0" Sep 6 00:06:42.321547 env[1646]: 2025-09-06 00:06:42.224 [INFO][4830] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:06:42.321547 env[1646]: 2025-09-06 00:06:42.225 [INFO][4830] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:06:42.321547 env[1646]: 2025-09-06 00:06:42.255 [WARNING][4830] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" HandleID="k8s-pod-network.e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" Workload="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--z8s4t-eth0" Sep 6 00:06:42.321547 env[1646]: 2025-09-06 00:06:42.255 [INFO][4830] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" HandleID="k8s-pod-network.e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" Workload="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--z8s4t-eth0" Sep 6 00:06:42.321547 env[1646]: 2025-09-06 00:06:42.261 [INFO][4830] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:06:42.321547 env[1646]: 2025-09-06 00:06:42.267 [INFO][4722] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" Sep 6 00:06:42.327145 systemd[1]: run-netns-cni\x2dc641dcf3\x2d76d0\x2d0bfa\x2d01d5\x2d7eb17e3316a8.mount: Deactivated successfully. Sep 6 00:06:42.335999 env[1646]: time="2025-09-06T00:06:42.329949144Z" level=info msg="TearDown network for sandbox \"e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714\" successfully" Sep 6 00:06:42.335999 env[1646]: time="2025-09-06T00:06:42.330015364Z" level=info msg="StopPodSandbox for \"e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714\" returns successfully" Sep 6 00:06:42.340796 systemd[1]: Started cri-containerd-6cfaed791d55c4d9e42ef5e152fc9b5fb532635c84c8e28be798f196e2f635d3.scope. Sep 6 00:06:42.356324 env[1646]: time="2025-09-06T00:06:42.356142377Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6df8d98b58-z8s4t,Uid:7191207d-0cc6-4bca-8195-a5e86eef3210,Namespace:calico-apiserver,Attempt:1,}" Sep 6 00:06:42.412841 env[1646]: time="2025-09-06T00:06:42.412640720Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-4jk72,Uid:5c12b22f-4b8f-447e-b91b-6664f072632b,Namespace:calico-system,Attempt:1,} returns sandbox id \"24fb2ad2b168b3518acfaeabd2755f0cd0731112dd46db1df3c5efcb62e6a66f\"" Sep 6 00:06:42.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.445000 audit: BPF prog-id=199 op=LOAD Sep 6 00:06:42.446000 audit[4850]: AVC avc: denied { bpf } for pid=4850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.446000 audit[4850]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=4728 pid=4850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:42.446000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663666165643739316435356334643965343265663565313532666339 Sep 6 00:06:42.447000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.447000 audit[4850]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=4728 pid=4850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:42.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663666165643739316435356334643965343265663565313532666339 Sep 6 00:06:42.447000 audit[4850]: AVC avc: denied { bpf } for pid=4850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.447000 audit[4850]: AVC avc: denied { bpf } for pid=4850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.447000 audit[4850]: AVC avc: denied { bpf } for pid=4850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.447000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.447000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.447000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.447000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.447000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.447000 audit[4850]: AVC avc: denied { bpf } for pid=4850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.447000 audit[4850]: AVC avc: denied { bpf } for pid=4850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.447000 audit: BPF prog-id=200 op=LOAD Sep 6 00:06:42.447000 audit[4850]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=4728 pid=4850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:42.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663666165643739316435356334643965343265663565313532666339 Sep 6 00:06:42.447000 audit[4850]: AVC avc: denied { bpf } for pid=4850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.447000 audit[4850]: AVC avc: denied { bpf } for pid=4850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.447000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.447000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.447000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.447000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.447000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.447000 audit[4850]: AVC avc: denied { bpf } for pid=4850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.447000 audit[4850]: AVC avc: denied { bpf } for pid=4850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.447000 audit: BPF prog-id=201 op=LOAD Sep 6 00:06:42.447000 audit[4850]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=4728 pid=4850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:42.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663666165643739316435356334643965343265663565313532666339 Sep 6 00:06:42.447000 audit: BPF prog-id=201 op=UNLOAD Sep 6 00:06:42.448000 audit: BPF prog-id=200 op=UNLOAD Sep 6 00:06:42.448000 audit[4850]: AVC avc: denied { bpf } for pid=4850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.448000 audit[4850]: AVC avc: denied { bpf } for pid=4850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.448000 audit[4850]: AVC avc: denied { bpf } for pid=4850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.448000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.448000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.448000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.448000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.448000 audit[4850]: AVC avc: denied { perfmon } for pid=4850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.448000 audit[4850]: AVC avc: denied { bpf } for pid=4850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.448000 audit[4850]: AVC avc: denied { bpf } for pid=4850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:42.448000 audit: BPF prog-id=202 op=LOAD Sep 6 00:06:42.448000 audit[4850]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=4728 pid=4850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:42.448000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663666165643739316435356334643965343265663565313532666339 Sep 6 00:06:42.513406 env[1646]: 2025-09-06 00:06:42.166 [INFO][4718] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" Sep 6 00:06:42.513406 env[1646]: 2025-09-06 00:06:42.166 [INFO][4718] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" iface="eth0" netns="/var/run/netns/cni-ee94beee-dfb2-d117-7091-a1aa15dd4436" Sep 6 00:06:42.513406 env[1646]: 2025-09-06 00:06:42.167 [INFO][4718] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" iface="eth0" netns="/var/run/netns/cni-ee94beee-dfb2-d117-7091-a1aa15dd4436" Sep 6 00:06:42.513406 env[1646]: 2025-09-06 00:06:42.167 [INFO][4718] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" iface="eth0" netns="/var/run/netns/cni-ee94beee-dfb2-d117-7091-a1aa15dd4436" Sep 6 00:06:42.513406 env[1646]: 2025-09-06 00:06:42.167 [INFO][4718] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" Sep 6 00:06:42.513406 env[1646]: 2025-09-06 00:06:42.167 [INFO][4718] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" Sep 6 00:06:42.513406 env[1646]: 2025-09-06 00:06:42.471 [INFO][4836] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" HandleID="k8s-pod-network.4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" Workload="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--2jfmb-eth0" Sep 6 00:06:42.513406 env[1646]: 2025-09-06 00:06:42.471 [INFO][4836] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:06:42.513406 env[1646]: 2025-09-06 00:06:42.472 [INFO][4836] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:06:42.513406 env[1646]: 2025-09-06 00:06:42.501 [WARNING][4836] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" HandleID="k8s-pod-network.4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" Workload="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--2jfmb-eth0" Sep 6 00:06:42.513406 env[1646]: 2025-09-06 00:06:42.501 [INFO][4836] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" HandleID="k8s-pod-network.4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" Workload="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--2jfmb-eth0" Sep 6 00:06:42.513406 env[1646]: 2025-09-06 00:06:42.504 [INFO][4836] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:06:42.513406 env[1646]: 2025-09-06 00:06:42.509 [INFO][4718] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" Sep 6 00:06:42.514783 env[1646]: time="2025-09-06T00:06:42.514694270Z" level=info msg="TearDown network for sandbox \"4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8\" successfully" Sep 6 00:06:42.514783 env[1646]: time="2025-09-06T00:06:42.514766694Z" level=info msg="StopPodSandbox for \"4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8\" returns successfully" Sep 6 00:06:42.516049 env[1646]: time="2025-09-06T00:06:42.515976601Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6df8d98b58-2jfmb,Uid:0ffda2a7-27c9-45ec-8bc5-704a343f8479,Namespace:calico-apiserver,Attempt:1,}" Sep 6 00:06:42.537100 env[1646]: time="2025-09-06T00:06:42.536980673Z" level=info msg="StartContainer for \"6cfaed791d55c4d9e42ef5e152fc9b5fb532635c84c8e28be798f196e2f635d3\" returns successfully" Sep 6 00:06:42.648299 systemd-networkd[1361]: calidba50b7c16e: Gained IPv6LL Sep 6 00:06:42.663000 audit[4905]: NETFILTER_CFG table=filter:110 family=2 entries=20 op=nft_register_rule pid=4905 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:42.663000 audit[4905]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffcdb064a0 a2=0 a3=1 items=0 ppid=2863 pid=4905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:42.663000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:42.669000 audit[4905]: NETFILTER_CFG table=nat:111 family=2 entries=14 op=nft_register_rule pid=4905 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:42.669000 audit[4905]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffcdb064a0 a2=0 a3=1 items=0 ppid=2863 pid=4905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:42.669000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:42.822350 systemd-networkd[1361]: cali1268f5399eb: Link UP Sep 6 00:06:42.829204 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 6 00:06:42.829402 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali1268f5399eb: link becomes ready Sep 6 00:06:42.830473 systemd-networkd[1361]: cali1268f5399eb: Gained carrier Sep 6 00:06:42.880306 env[1646]: 2025-09-06 00:06:42.613 [INFO][4873] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--z8s4t-eth0 calico-apiserver-6df8d98b58- calico-apiserver 7191207d-0cc6-4bca-8195-a5e86eef3210 1044 0 2025-09-06 00:06:04 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:6df8d98b58 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-29-17 calico-apiserver-6df8d98b58-z8s4t eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali1268f5399eb [] [] }} ContainerID="4dc6522f3282b8c8fe723b056384205daadf6e24b593fdfb11adb7152e4c62c9" Namespace="calico-apiserver" Pod="calico-apiserver-6df8d98b58-z8s4t" WorkloadEndpoint="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--z8s4t-" Sep 6 00:06:42.880306 env[1646]: 2025-09-06 00:06:42.614 [INFO][4873] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="4dc6522f3282b8c8fe723b056384205daadf6e24b593fdfb11adb7152e4c62c9" Namespace="calico-apiserver" Pod="calico-apiserver-6df8d98b58-z8s4t" WorkloadEndpoint="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--z8s4t-eth0" Sep 6 00:06:42.880306 env[1646]: 2025-09-06 00:06:42.689 [INFO][4907] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="4dc6522f3282b8c8fe723b056384205daadf6e24b593fdfb11adb7152e4c62c9" HandleID="k8s-pod-network.4dc6522f3282b8c8fe723b056384205daadf6e24b593fdfb11adb7152e4c62c9" Workload="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--z8s4t-eth0" Sep 6 00:06:42.880306 env[1646]: 2025-09-06 00:06:42.690 [INFO][4907] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="4dc6522f3282b8c8fe723b056384205daadf6e24b593fdfb11adb7152e4c62c9" HandleID="k8s-pod-network.4dc6522f3282b8c8fe723b056384205daadf6e24b593fdfb11adb7152e4c62c9" Workload="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--z8s4t-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002c1600), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-29-17", "pod":"calico-apiserver-6df8d98b58-z8s4t", "timestamp":"2025-09-06 00:06:42.689594388 +0000 UTC"}, Hostname:"ip-172-31-29-17", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:06:42.880306 env[1646]: 2025-09-06 00:06:42.690 [INFO][4907] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:06:42.880306 env[1646]: 2025-09-06 00:06:42.691 [INFO][4907] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:06:42.880306 env[1646]: 2025-09-06 00:06:42.691 [INFO][4907] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-29-17' Sep 6 00:06:42.880306 env[1646]: 2025-09-06 00:06:42.722 [INFO][4907] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.4dc6522f3282b8c8fe723b056384205daadf6e24b593fdfb11adb7152e4c62c9" host="ip-172-31-29-17" Sep 6 00:06:42.880306 env[1646]: 2025-09-06 00:06:42.743 [INFO][4907] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-29-17" Sep 6 00:06:42.880306 env[1646]: 2025-09-06 00:06:42.764 [INFO][4907] ipam/ipam.go 511: Trying affinity for 192.168.120.0/26 host="ip-172-31-29-17" Sep 6 00:06:42.880306 env[1646]: 2025-09-06 00:06:42.770 [INFO][4907] ipam/ipam.go 158: Attempting to load block cidr=192.168.120.0/26 host="ip-172-31-29-17" Sep 6 00:06:42.880306 env[1646]: 2025-09-06 00:06:42.776 [INFO][4907] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.120.0/26 host="ip-172-31-29-17" Sep 6 00:06:42.880306 env[1646]: 2025-09-06 00:06:42.776 [INFO][4907] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.120.0/26 handle="k8s-pod-network.4dc6522f3282b8c8fe723b056384205daadf6e24b593fdfb11adb7152e4c62c9" host="ip-172-31-29-17" Sep 6 00:06:42.880306 env[1646]: 2025-09-06 00:06:42.781 [INFO][4907] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.4dc6522f3282b8c8fe723b056384205daadf6e24b593fdfb11adb7152e4c62c9 Sep 6 00:06:42.880306 env[1646]: 2025-09-06 00:06:42.792 [INFO][4907] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.120.0/26 handle="k8s-pod-network.4dc6522f3282b8c8fe723b056384205daadf6e24b593fdfb11adb7152e4c62c9" host="ip-172-31-29-17" Sep 6 00:06:42.880306 env[1646]: 2025-09-06 00:06:42.809 [INFO][4907] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.120.7/26] block=192.168.120.0/26 handle="k8s-pod-network.4dc6522f3282b8c8fe723b056384205daadf6e24b593fdfb11adb7152e4c62c9" host="ip-172-31-29-17" Sep 6 00:06:42.880306 env[1646]: 2025-09-06 00:06:42.809 [INFO][4907] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.120.7/26] handle="k8s-pod-network.4dc6522f3282b8c8fe723b056384205daadf6e24b593fdfb11adb7152e4c62c9" host="ip-172-31-29-17" Sep 6 00:06:42.880306 env[1646]: 2025-09-06 00:06:42.809 [INFO][4907] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:06:42.880306 env[1646]: 2025-09-06 00:06:42.810 [INFO][4907] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.120.7/26] IPv6=[] ContainerID="4dc6522f3282b8c8fe723b056384205daadf6e24b593fdfb11adb7152e4c62c9" HandleID="k8s-pod-network.4dc6522f3282b8c8fe723b056384205daadf6e24b593fdfb11adb7152e4c62c9" Workload="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--z8s4t-eth0" Sep 6 00:06:42.883584 env[1646]: 2025-09-06 00:06:42.812 [INFO][4873] cni-plugin/k8s.go 418: Populated endpoint ContainerID="4dc6522f3282b8c8fe723b056384205daadf6e24b593fdfb11adb7152e4c62c9" Namespace="calico-apiserver" Pod="calico-apiserver-6df8d98b58-z8s4t" WorkloadEndpoint="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--z8s4t-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--z8s4t-eth0", GenerateName:"calico-apiserver-6df8d98b58-", Namespace:"calico-apiserver", SelfLink:"", UID:"7191207d-0cc6-4bca-8195-a5e86eef3210", ResourceVersion:"1044", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 6, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6df8d98b58", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-29-17", ContainerID:"", Pod:"calico-apiserver-6df8d98b58-z8s4t", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.120.7/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1268f5399eb", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:06:42.883584 env[1646]: 2025-09-06 00:06:42.813 [INFO][4873] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.120.7/32] ContainerID="4dc6522f3282b8c8fe723b056384205daadf6e24b593fdfb11adb7152e4c62c9" Namespace="calico-apiserver" Pod="calico-apiserver-6df8d98b58-z8s4t" WorkloadEndpoint="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--z8s4t-eth0" Sep 6 00:06:42.883584 env[1646]: 2025-09-06 00:06:42.813 [INFO][4873] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali1268f5399eb ContainerID="4dc6522f3282b8c8fe723b056384205daadf6e24b593fdfb11adb7152e4c62c9" Namespace="calico-apiserver" Pod="calico-apiserver-6df8d98b58-z8s4t" WorkloadEndpoint="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--z8s4t-eth0" Sep 6 00:06:42.883584 env[1646]: 2025-09-06 00:06:42.840 [INFO][4873] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="4dc6522f3282b8c8fe723b056384205daadf6e24b593fdfb11adb7152e4c62c9" Namespace="calico-apiserver" Pod="calico-apiserver-6df8d98b58-z8s4t" WorkloadEndpoint="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--z8s4t-eth0" Sep 6 00:06:42.883584 env[1646]: 2025-09-06 00:06:42.841 [INFO][4873] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="4dc6522f3282b8c8fe723b056384205daadf6e24b593fdfb11adb7152e4c62c9" Namespace="calico-apiserver" Pod="calico-apiserver-6df8d98b58-z8s4t" WorkloadEndpoint="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--z8s4t-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--z8s4t-eth0", GenerateName:"calico-apiserver-6df8d98b58-", Namespace:"calico-apiserver", SelfLink:"", UID:"7191207d-0cc6-4bca-8195-a5e86eef3210", ResourceVersion:"1044", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 6, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6df8d98b58", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-29-17", ContainerID:"4dc6522f3282b8c8fe723b056384205daadf6e24b593fdfb11adb7152e4c62c9", Pod:"calico-apiserver-6df8d98b58-z8s4t", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.120.7/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1268f5399eb", MAC:"8a:24:1e:b0:8d:34", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:06:42.883584 env[1646]: 2025-09-06 00:06:42.875 [INFO][4873] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="4dc6522f3282b8c8fe723b056384205daadf6e24b593fdfb11adb7152e4c62c9" Namespace="calico-apiserver" Pod="calico-apiserver-6df8d98b58-z8s4t" WorkloadEndpoint="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--z8s4t-eth0" Sep 6 00:06:42.938294 env[1646]: time="2025-09-06T00:06:42.938035712Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:06:42.940805 env[1646]: time="2025-09-06T00:06:42.938249468Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:06:42.941035 env[1646]: time="2025-09-06T00:06:42.940894018Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:06:42.942016 env[1646]: time="2025-09-06T00:06:42.941889629Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4dc6522f3282b8c8fe723b056384205daadf6e24b593fdfb11adb7152e4c62c9 pid=4937 runtime=io.containerd.runc.v2 Sep 6 00:06:42.980655 systemd[1]: Started cri-containerd-4dc6522f3282b8c8fe723b056384205daadf6e24b593fdfb11adb7152e4c62c9.scope. Sep 6 00:06:43.030237 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali3862f3f99e4: link becomes ready Sep 6 00:06:43.025308 systemd-networkd[1361]: cali3862f3f99e4: Link UP Sep 6 00:06:43.027790 systemd-networkd[1361]: cali3862f3f99e4: Gained carrier Sep 6 00:06:43.109357 env[1646]: 2025-09-06 00:06:42.709 [INFO][4892] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--2jfmb-eth0 calico-apiserver-6df8d98b58- calico-apiserver 0ffda2a7-27c9-45ec-8bc5-704a343f8479 1046 0 2025-09-06 00:06:04 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:6df8d98b58 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-29-17 calico-apiserver-6df8d98b58-2jfmb eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali3862f3f99e4 [] [] }} ContainerID="e5c6daadd585b1482ac71d80abecc384586aab19c1cdbbeca015ec2a518aedbe" Namespace="calico-apiserver" Pod="calico-apiserver-6df8d98b58-2jfmb" WorkloadEndpoint="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--2jfmb-" Sep 6 00:06:43.109357 env[1646]: 2025-09-06 00:06:42.710 [INFO][4892] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="e5c6daadd585b1482ac71d80abecc384586aab19c1cdbbeca015ec2a518aedbe" Namespace="calico-apiserver" Pod="calico-apiserver-6df8d98b58-2jfmb" WorkloadEndpoint="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--2jfmb-eth0" Sep 6 00:06:43.109357 env[1646]: 2025-09-06 00:06:42.806 [INFO][4916] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="e5c6daadd585b1482ac71d80abecc384586aab19c1cdbbeca015ec2a518aedbe" HandleID="k8s-pod-network.e5c6daadd585b1482ac71d80abecc384586aab19c1cdbbeca015ec2a518aedbe" Workload="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--2jfmb-eth0" Sep 6 00:06:43.109357 env[1646]: 2025-09-06 00:06:42.806 [INFO][4916] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="e5c6daadd585b1482ac71d80abecc384586aab19c1cdbbeca015ec2a518aedbe" HandleID="k8s-pod-network.e5c6daadd585b1482ac71d80abecc384586aab19c1cdbbeca015ec2a518aedbe" Workload="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--2jfmb-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000398640), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-29-17", "pod":"calico-apiserver-6df8d98b58-2jfmb", "timestamp":"2025-09-06 00:06:42.80651877 +0000 UTC"}, Hostname:"ip-172-31-29-17", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:06:43.109357 env[1646]: 2025-09-06 00:06:42.806 [INFO][4916] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:06:43.109357 env[1646]: 2025-09-06 00:06:42.809 [INFO][4916] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:06:43.109357 env[1646]: 2025-09-06 00:06:42.810 [INFO][4916] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-29-17' Sep 6 00:06:43.109357 env[1646]: 2025-09-06 00:06:42.866 [INFO][4916] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.e5c6daadd585b1482ac71d80abecc384586aab19c1cdbbeca015ec2a518aedbe" host="ip-172-31-29-17" Sep 6 00:06:43.109357 env[1646]: 2025-09-06 00:06:42.891 [INFO][4916] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-29-17" Sep 6 00:06:43.109357 env[1646]: 2025-09-06 00:06:42.932 [INFO][4916] ipam/ipam.go 511: Trying affinity for 192.168.120.0/26 host="ip-172-31-29-17" Sep 6 00:06:43.109357 env[1646]: 2025-09-06 00:06:42.945 [INFO][4916] ipam/ipam.go 158: Attempting to load block cidr=192.168.120.0/26 host="ip-172-31-29-17" Sep 6 00:06:43.109357 env[1646]: 2025-09-06 00:06:42.955 [INFO][4916] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.120.0/26 host="ip-172-31-29-17" Sep 6 00:06:43.109357 env[1646]: 2025-09-06 00:06:42.955 [INFO][4916] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.120.0/26 handle="k8s-pod-network.e5c6daadd585b1482ac71d80abecc384586aab19c1cdbbeca015ec2a518aedbe" host="ip-172-31-29-17" Sep 6 00:06:43.109357 env[1646]: 2025-09-06 00:06:42.960 [INFO][4916] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.e5c6daadd585b1482ac71d80abecc384586aab19c1cdbbeca015ec2a518aedbe Sep 6 00:06:43.109357 env[1646]: 2025-09-06 00:06:42.986 [INFO][4916] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.120.0/26 handle="k8s-pod-network.e5c6daadd585b1482ac71d80abecc384586aab19c1cdbbeca015ec2a518aedbe" host="ip-172-31-29-17" Sep 6 00:06:43.109357 env[1646]: 2025-09-06 00:06:43.011 [INFO][4916] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.120.8/26] block=192.168.120.0/26 handle="k8s-pod-network.e5c6daadd585b1482ac71d80abecc384586aab19c1cdbbeca015ec2a518aedbe" host="ip-172-31-29-17" Sep 6 00:06:43.109357 env[1646]: 2025-09-06 00:06:43.012 [INFO][4916] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.120.8/26] handle="k8s-pod-network.e5c6daadd585b1482ac71d80abecc384586aab19c1cdbbeca015ec2a518aedbe" host="ip-172-31-29-17" Sep 6 00:06:43.109357 env[1646]: 2025-09-06 00:06:43.012 [INFO][4916] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:06:43.109357 env[1646]: 2025-09-06 00:06:43.012 [INFO][4916] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.120.8/26] IPv6=[] ContainerID="e5c6daadd585b1482ac71d80abecc384586aab19c1cdbbeca015ec2a518aedbe" HandleID="k8s-pod-network.e5c6daadd585b1482ac71d80abecc384586aab19c1cdbbeca015ec2a518aedbe" Workload="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--2jfmb-eth0" Sep 6 00:06:43.110783 env[1646]: 2025-09-06 00:06:43.017 [INFO][4892] cni-plugin/k8s.go 418: Populated endpoint ContainerID="e5c6daadd585b1482ac71d80abecc384586aab19c1cdbbeca015ec2a518aedbe" Namespace="calico-apiserver" Pod="calico-apiserver-6df8d98b58-2jfmb" WorkloadEndpoint="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--2jfmb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--2jfmb-eth0", GenerateName:"calico-apiserver-6df8d98b58-", Namespace:"calico-apiserver", SelfLink:"", UID:"0ffda2a7-27c9-45ec-8bc5-704a343f8479", ResourceVersion:"1046", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 6, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6df8d98b58", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-29-17", ContainerID:"", Pod:"calico-apiserver-6df8d98b58-2jfmb", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.120.8/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali3862f3f99e4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:06:43.110783 env[1646]: 2025-09-06 00:06:43.017 [INFO][4892] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.120.8/32] ContainerID="e5c6daadd585b1482ac71d80abecc384586aab19c1cdbbeca015ec2a518aedbe" Namespace="calico-apiserver" Pod="calico-apiserver-6df8d98b58-2jfmb" WorkloadEndpoint="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--2jfmb-eth0" Sep 6 00:06:43.110783 env[1646]: 2025-09-06 00:06:43.017 [INFO][4892] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali3862f3f99e4 ContainerID="e5c6daadd585b1482ac71d80abecc384586aab19c1cdbbeca015ec2a518aedbe" Namespace="calico-apiserver" Pod="calico-apiserver-6df8d98b58-2jfmb" WorkloadEndpoint="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--2jfmb-eth0" Sep 6 00:06:43.110783 env[1646]: 2025-09-06 00:06:43.065 [INFO][4892] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="e5c6daadd585b1482ac71d80abecc384586aab19c1cdbbeca015ec2a518aedbe" Namespace="calico-apiserver" Pod="calico-apiserver-6df8d98b58-2jfmb" WorkloadEndpoint="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--2jfmb-eth0" Sep 6 00:06:43.110783 env[1646]: 2025-09-06 00:06:43.066 [INFO][4892] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="e5c6daadd585b1482ac71d80abecc384586aab19c1cdbbeca015ec2a518aedbe" Namespace="calico-apiserver" Pod="calico-apiserver-6df8d98b58-2jfmb" WorkloadEndpoint="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--2jfmb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--2jfmb-eth0", GenerateName:"calico-apiserver-6df8d98b58-", Namespace:"calico-apiserver", SelfLink:"", UID:"0ffda2a7-27c9-45ec-8bc5-704a343f8479", ResourceVersion:"1046", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 6, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6df8d98b58", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-29-17", ContainerID:"e5c6daadd585b1482ac71d80abecc384586aab19c1cdbbeca015ec2a518aedbe", Pod:"calico-apiserver-6df8d98b58-2jfmb", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.120.8/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali3862f3f99e4", MAC:"0a:ba:4f:c5:bb:a3", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:06:43.110783 env[1646]: 2025-09-06 00:06:43.093 [INFO][4892] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="e5c6daadd585b1482ac71d80abecc384586aab19c1cdbbeca015ec2a518aedbe" Namespace="calico-apiserver" Pod="calico-apiserver-6df8d98b58-2jfmb" WorkloadEndpoint="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--2jfmb-eth0" Sep 6 00:06:43.148373 env[1646]: time="2025-09-06T00:06:43.147737000Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:06:43.148373 env[1646]: time="2025-09-06T00:06:43.147821507Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:06:43.148373 env[1646]: time="2025-09-06T00:06:43.147847232Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:06:43.148813 env[1646]: time="2025-09-06T00:06:43.148295264Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e5c6daadd585b1482ac71d80abecc384586aab19c1cdbbeca015ec2a518aedbe pid=4974 runtime=io.containerd.runc.v2 Sep 6 00:06:43.187969 systemd[1]: Started cri-containerd-e5c6daadd585b1482ac71d80abecc384586aab19c1cdbbeca015ec2a518aedbe.scope. Sep 6 00:06:43.192000 audit[4867]: AVC avc: denied { getattr } for pid=4867 comm="coredns" path="cgroup:[4026532778]" dev="nsfs" ino=4026532778 scontext=system_u:system_r:svirt_lxc_net_t:s0:c547,c1019 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 6 00:06:43.192000 audit[4867]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=400014a4c8 a2=400060c038 a3=0 items=0 ppid=4728 pid=4867 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c547,c1019 key=(null) Sep 6 00:06:43.192000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 6 00:06:43.202000 audit[4649]: AVC avc: denied { getattr } for pid=4649 comm="coredns" path="cgroup:[4026532899]" dev="nsfs" ino=4026532899 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c533 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 6 00:06:43.202000 audit[4649]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056390 a2=40000ac038 a3=0 items=0 ppid=4536 pid=4649 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c533 key=(null) Sep 6 00:06:43.202000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 6 00:06:43.241000 audit[4994]: NETFILTER_CFG table=filter:112 family=2 entries=72 op=nft_register_chain pid=4994 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:06:43.241000 audit[4994]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=35796 a0=3 a1=ffffea48cf90 a2=0 a3=ffffbceb0fa8 items=0 ppid=4008 pid=4994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:43.241000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:06:43.288282 systemd[1]: run-netns-cni\x2dee94beee\x2ddfb2\x2dd117\x2d7091\x2da1aa15dd4436.mount: Deactivated successfully. Sep 6 00:06:43.480453 systemd-networkd[1361]: calida008288668: Gained IPv6LL Sep 6 00:06:43.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.541000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.541000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.541000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.541000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.541000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.541000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.541000 audit: BPF prog-id=203 op=LOAD Sep 6 00:06:43.542000 audit[4983]: AVC avc: denied { bpf } for pid=4983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.542000 audit[4983]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4974 pid=4983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:43.542000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535633664616164643538356231343832616337316438306162656363 Sep 6 00:06:43.542000 audit[4983]: AVC avc: denied { perfmon } for pid=4983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.542000 audit[4983]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4974 pid=4983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:43.542000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535633664616164643538356231343832616337316438306162656363 Sep 6 00:06:43.542000 audit[4983]: AVC avc: denied { bpf } for pid=4983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.542000 audit[4983]: AVC avc: denied { bpf } for pid=4983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.542000 audit[4983]: AVC avc: denied { bpf } for pid=4983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.542000 audit[4983]: AVC avc: denied { perfmon } for pid=4983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.542000 audit[4983]: AVC avc: denied { perfmon } for pid=4983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.542000 audit[4983]: AVC avc: denied { perfmon } for pid=4983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.542000 audit[4983]: AVC avc: denied { perfmon } for pid=4983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.542000 audit[4983]: AVC avc: denied { perfmon } for pid=4983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.542000 audit[4983]: AVC avc: denied { bpf } for pid=4983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.542000 audit[4983]: AVC avc: denied { bpf } for pid=4983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.542000 audit: BPF prog-id=204 op=LOAD Sep 6 00:06:43.542000 audit[4983]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4974 pid=4983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:43.542000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535633664616164643538356231343832616337316438306162656363 Sep 6 00:06:43.542000 audit[4983]: AVC avc: denied { bpf } for pid=4983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.542000 audit[4983]: AVC avc: denied { bpf } for pid=4983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.542000 audit[4983]: AVC avc: denied { perfmon } for pid=4983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.542000 audit[4983]: AVC avc: denied { perfmon } for pid=4983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.542000 audit[4983]: AVC avc: denied { perfmon } for pid=4983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.542000 audit[4983]: AVC avc: denied { perfmon } for pid=4983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.542000 audit[4983]: AVC avc: denied { perfmon } for pid=4983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.542000 audit[4983]: AVC avc: denied { bpf } for pid=4983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.542000 audit[4983]: AVC avc: denied { bpf } for pid=4983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.542000 audit: BPF prog-id=205 op=LOAD Sep 6 00:06:43.542000 audit[4983]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4974 pid=4983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:43.542000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535633664616164643538356231343832616337316438306162656363 Sep 6 00:06:43.542000 audit: BPF prog-id=205 op=UNLOAD Sep 6 00:06:43.542000 audit: BPF prog-id=204 op=UNLOAD Sep 6 00:06:43.543000 audit[4983]: AVC avc: denied { bpf } for pid=4983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.543000 audit[4983]: AVC avc: denied { bpf } for pid=4983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.543000 audit[4983]: AVC avc: denied { bpf } for pid=4983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.543000 audit[4983]: AVC avc: denied { perfmon } for pid=4983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.543000 audit[4983]: AVC avc: denied { perfmon } for pid=4983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.543000 audit[4983]: AVC avc: denied { perfmon } for pid=4983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.543000 audit[4983]: AVC avc: denied { perfmon } for pid=4983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.543000 audit[4983]: AVC avc: denied { perfmon } for pid=4983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.543000 audit[4983]: AVC avc: denied { bpf } for pid=4983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.543000 audit[4983]: AVC avc: denied { bpf } for pid=4983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.543000 audit: BPF prog-id=206 op=LOAD Sep 6 00:06:43.543000 audit[4983]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4974 pid=4983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:43.543000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535633664616164643538356231343832616337316438306162656363 Sep 6 00:06:43.563000 audit[5005]: NETFILTER_CFG table=filter:113 family=2 entries=20 op=nft_register_rule pid=5005 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:43.563000 audit[5005]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffe8dd4560 a2=0 a3=1 items=0 ppid=2863 pid=5005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:43.563000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:43.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.570000 audit: BPF prog-id=207 op=LOAD Sep 6 00:06:43.575000 audit[4946]: AVC avc: denied { bpf } for pid=4946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.575000 audit[4946]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4937 pid=4946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:43.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464633635323266333238326238633866653732336230353633383432 Sep 6 00:06:43.576000 audit[4946]: AVC avc: denied { perfmon } for pid=4946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.576000 audit[4946]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4937 pid=4946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:43.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464633635323266333238326238633866653732336230353633383432 Sep 6 00:06:43.577000 audit[4946]: AVC avc: denied { bpf } for pid=4946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.577000 audit[4946]: AVC avc: denied { bpf } for pid=4946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.577000 audit[4946]: AVC avc: denied { bpf } for pid=4946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.577000 audit[4946]: AVC avc: denied { perfmon } for pid=4946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.577000 audit[4946]: AVC avc: denied { perfmon } for pid=4946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.577000 audit[4946]: AVC avc: denied { perfmon } for pid=4946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.577000 audit[4946]: AVC avc: denied { perfmon } for pid=4946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.577000 audit[4946]: AVC avc: denied { perfmon } for pid=4946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.577000 audit[4946]: AVC avc: denied { bpf } for pid=4946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.577000 audit[4946]: AVC avc: denied { bpf } for pid=4946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.577000 audit: BPF prog-id=208 op=LOAD Sep 6 00:06:43.577000 audit[4946]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4937 pid=4946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:43.577000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464633635323266333238326238633866653732336230353633383432 Sep 6 00:06:43.579000 audit[4946]: AVC avc: denied { bpf } for pid=4946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.579000 audit[4946]: AVC avc: denied { bpf } for pid=4946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.579000 audit[4946]: AVC avc: denied { perfmon } for pid=4946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.579000 audit[4946]: AVC avc: denied { perfmon } for pid=4946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.579000 audit[4946]: AVC avc: denied { perfmon } for pid=4946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.579000 audit[4946]: AVC avc: denied { perfmon } for pid=4946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.579000 audit[4946]: AVC avc: denied { perfmon } for pid=4946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.579000 audit[4946]: AVC avc: denied { bpf } for pid=4946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.579000 audit[4946]: AVC avc: denied { bpf } for pid=4946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.579000 audit: BPF prog-id=209 op=LOAD Sep 6 00:06:43.579000 audit[4946]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4937 pid=4946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:43.579000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464633635323266333238326238633866653732336230353633383432 Sep 6 00:06:43.582000 audit: BPF prog-id=209 op=UNLOAD Sep 6 00:06:43.582000 audit: BPF prog-id=208 op=UNLOAD Sep 6 00:06:43.583000 audit[4946]: AVC avc: denied { bpf } for pid=4946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.583000 audit[5005]: NETFILTER_CFG table=nat:114 family=2 entries=14 op=nft_register_rule pid=5005 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:43.583000 audit[4946]: AVC avc: denied { bpf } for pid=4946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.583000 audit[4946]: AVC avc: denied { bpf } for pid=4946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.583000 audit[4946]: AVC avc: denied { perfmon } for pid=4946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.583000 audit[4946]: AVC avc: denied { perfmon } for pid=4946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.583000 audit[4946]: AVC avc: denied { perfmon } for pid=4946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.583000 audit[5005]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffe8dd4560 a2=0 a3=1 items=0 ppid=2863 pid=5005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:43.583000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:43.583000 audit[4946]: AVC avc: denied { perfmon } for pid=4946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.583000 audit[4946]: AVC avc: denied { perfmon } for pid=4946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.583000 audit[4946]: AVC avc: denied { bpf } for pid=4946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.583000 audit[4946]: AVC avc: denied { bpf } for pid=4946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:43.583000 audit: BPF prog-id=210 op=LOAD Sep 6 00:06:43.583000 audit[4946]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4937 pid=4946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:43.583000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464633635323266333238326238633866653732336230353633383432 Sep 6 00:06:43.658000 audit[5008]: NETFILTER_CFG table=filter:115 family=2 entries=53 op=nft_register_chain pid=5008 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:06:43.658000 audit[5008]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=26608 a0=3 a1=ffffc951f090 a2=0 a3=ffffa5cd2fa8 items=0 ppid=4008 pid=5008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:43.658000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:06:43.677777 env[1646]: time="2025-09-06T00:06:43.677702733Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6df8d98b58-2jfmb,Uid:0ffda2a7-27c9-45ec-8bc5-704a343f8479,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"e5c6daadd585b1482ac71d80abecc384586aab19c1cdbbeca015ec2a518aedbe\"" Sep 6 00:06:43.725760 env[1646]: time="2025-09-06T00:06:43.725699608Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6df8d98b58-z8s4t,Uid:7191207d-0cc6-4bca-8195-a5e86eef3210,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"4dc6522f3282b8c8fe723b056384205daadf6e24b593fdfb11adb7152e4c62c9\"" Sep 6 00:06:43.997223 systemd-networkd[1361]: cali1268f5399eb: Gained IPv6LL Sep 6 00:06:44.504304 systemd-networkd[1361]: cali3862f3f99e4: Gained IPv6LL Sep 6 00:06:45.175570 kubelet[2752]: I0906 00:06:45.175487 2752 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-gb45h" podStartSLOduration=71.175462 podStartE2EDuration="1m11.175462s" podCreationTimestamp="2025-09-06 00:05:34 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 00:06:43.158049624 +0000 UTC m=+74.032499954" watchObservedRunningTime="2025-09-06 00:06:45.175462 +0000 UTC m=+76.049912318" Sep 6 00:06:45.342000 audit[5038]: NETFILTER_CFG table=filter:116 family=2 entries=17 op=nft_register_rule pid=5038 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:45.342000 audit[5038]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=fffff1059d60 a2=0 a3=1 items=0 ppid=2863 pid=5038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:45.342000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:45.362000 audit[5038]: NETFILTER_CFG table=nat:117 family=2 entries=35 op=nft_register_chain pid=5038 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:45.362000 audit[5038]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=fffff1059d60 a2=0 a3=1 items=0 ppid=2863 pid=5038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:45.362000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:45.411623 systemd[1]: Started sshd@7-172.31.29.17:22-147.75.109.163:56918.service. Sep 6 00:06:45.413000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.29.17:22-147.75.109.163:56918 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:06:45.653231 env[1646]: time="2025-09-06T00:06:45.653165323Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:45.655257 env[1646]: time="2025-09-06T00:06:45.655196231Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:34117caf92350e1565610f2254377d7455b11e36666b5ce11b4a13670720432a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:45.658228 env[1646]: time="2025-09-06T00:06:45.658173667Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:45.657000 audit[5040]: USER_ACCT pid=5040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:45.658629 sshd[5040]: Accepted publickey for core from 147.75.109.163 port 56918 ssh2: RSA SHA256:CT8P9x8s4J0T70k8+LLVTP4XjE3e1SNW15vyou+QijI Sep 6 00:06:45.660000 audit[5040]: CRED_ACQ pid=5040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:45.660000 audit[5040]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc793e5b0 a2=3 a3=1 items=0 ppid=1 pid=5040 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:45.660000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:06:45.662909 sshd[5040]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:06:45.664942 env[1646]: time="2025-09-06T00:06:45.662897603Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:27c4187717f08f0a5727019d8beb7597665eb47e69eaa1d7d091a7e28913e577,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:45.666686 env[1646]: time="2025-09-06T00:06:45.664544033Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\" returns image reference \"sha256:34117caf92350e1565610f2254377d7455b11e36666b5ce11b4a13670720432a\"" Sep 6 00:06:45.683297 env[1646]: time="2025-09-06T00:06:45.674932601Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\"" Sep 6 00:06:45.684831 systemd-logind[1634]: New session 8 of user core. Sep 6 00:06:45.686942 systemd[1]: Started session-8.scope. Sep 6 00:06:45.726000 audit[5040]: USER_START pid=5040 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:45.729000 audit[5044]: CRED_ACQ pid=5044 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:45.732693 env[1646]: time="2025-09-06T00:06:45.732620177Z" level=info msg="CreateContainer within sandbox \"7819d251e35ecfa581cd8cad03696c31a17a4704d7eb7451d57138ce66099ec1\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Sep 6 00:06:45.771070 env[1646]: time="2025-09-06T00:06:45.770985282Z" level=info msg="CreateContainer within sandbox \"7819d251e35ecfa581cd8cad03696c31a17a4704d7eb7451d57138ce66099ec1\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"a85560e1fb8d918fabc51561572632b319e3a7ebe13e9174987b545b8d9988eb\"" Sep 6 00:06:45.772245 env[1646]: time="2025-09-06T00:06:45.772170297Z" level=info msg="StartContainer for \"a85560e1fb8d918fabc51561572632b319e3a7ebe13e9174987b545b8d9988eb\"" Sep 6 00:06:45.772513 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount551073387.mount: Deactivated successfully. Sep 6 00:06:45.861914 systemd[1]: Started cri-containerd-a85560e1fb8d918fabc51561572632b319e3a7ebe13e9174987b545b8d9988eb.scope. Sep 6 00:06:45.933000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.935000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.935000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.935000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.935000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.935000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.935000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.935000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.936000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.936000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.937000 audit: BPF prog-id=211 op=LOAD Sep 6 00:06:45.938000 audit[5053]: AVC avc: denied { bpf } for pid=5053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.938000 audit[5053]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4321 pid=5053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:45.938000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138353536306531666238643931386661626335313536313537323633 Sep 6 00:06:45.938000 audit[5053]: AVC avc: denied { perfmon } for pid=5053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.938000 audit[5053]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4321 pid=5053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:45.938000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138353536306531666238643931386661626335313536313537323633 Sep 6 00:06:45.938000 audit[5053]: AVC avc: denied { bpf } for pid=5053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.938000 audit[5053]: AVC avc: denied { bpf } for pid=5053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.938000 audit[5053]: AVC avc: denied { bpf } for pid=5053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.938000 audit[5053]: AVC avc: denied { perfmon } for pid=5053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.938000 audit[5053]: AVC avc: denied { perfmon } for pid=5053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.938000 audit[5053]: AVC avc: denied { perfmon } for pid=5053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.938000 audit[5053]: AVC avc: denied { perfmon } for pid=5053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.938000 audit[5053]: AVC avc: denied { perfmon } for pid=5053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.938000 audit[5053]: AVC avc: denied { bpf } for pid=5053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.938000 audit[5053]: AVC avc: denied { bpf } for pid=5053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.938000 audit: BPF prog-id=212 op=LOAD Sep 6 00:06:45.938000 audit[5053]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4321 pid=5053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:45.938000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138353536306531666238643931386661626335313536313537323633 Sep 6 00:06:45.938000 audit[5053]: AVC avc: denied { bpf } for pid=5053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.938000 audit[5053]: AVC avc: denied { bpf } for pid=5053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.938000 audit[5053]: AVC avc: denied { perfmon } for pid=5053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.938000 audit[5053]: AVC avc: denied { perfmon } for pid=5053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.938000 audit[5053]: AVC avc: denied { perfmon } for pid=5053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.938000 audit[5053]: AVC avc: denied { perfmon } for pid=5053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.938000 audit[5053]: AVC avc: denied { perfmon } for pid=5053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.938000 audit[5053]: AVC avc: denied { bpf } for pid=5053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.938000 audit[5053]: AVC avc: denied { bpf } for pid=5053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.938000 audit: BPF prog-id=213 op=LOAD Sep 6 00:06:45.938000 audit[5053]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4321 pid=5053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:45.938000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138353536306531666238643931386661626335313536313537323633 Sep 6 00:06:45.938000 audit: BPF prog-id=213 op=UNLOAD Sep 6 00:06:45.938000 audit: BPF prog-id=212 op=UNLOAD Sep 6 00:06:45.938000 audit[5053]: AVC avc: denied { bpf } for pid=5053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.938000 audit[5053]: AVC avc: denied { bpf } for pid=5053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.938000 audit[5053]: AVC avc: denied { bpf } for pid=5053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.938000 audit[5053]: AVC avc: denied { perfmon } for pid=5053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.938000 audit[5053]: AVC avc: denied { perfmon } for pid=5053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.938000 audit[5053]: AVC avc: denied { perfmon } for pid=5053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.938000 audit[5053]: AVC avc: denied { perfmon } for pid=5053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.938000 audit[5053]: AVC avc: denied { perfmon } for pid=5053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.938000 audit[5053]: AVC avc: denied { bpf } for pid=5053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.938000 audit[5053]: AVC avc: denied { bpf } for pid=5053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:45.938000 audit: BPF prog-id=214 op=LOAD Sep 6 00:06:45.938000 audit[5053]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4321 pid=5053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:45.938000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138353536306531666238643931386661626335313536313537323633 Sep 6 00:06:46.009018 env[1646]: time="2025-09-06T00:06:46.008931230Z" level=info msg="StartContainer for \"a85560e1fb8d918fabc51561572632b319e3a7ebe13e9174987b545b8d9988eb\" returns successfully" Sep 6 00:06:46.143000 audit[5040]: USER_END pid=5040 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:46.143000 audit[5040]: CRED_DISP pid=5040 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:46.147000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.29.17:22-147.75.109.163:56918 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:06:46.142251 sshd[5040]: pam_unix(sshd:session): session closed for user core Sep 6 00:06:46.148611 systemd[1]: sshd@7-172.31.29.17:22-147.75.109.163:56918.service: Deactivated successfully. Sep 6 00:06:46.149374 systemd-logind[1634]: Session 8 logged out. Waiting for processes to exit. Sep 6 00:06:46.150102 systemd[1]: session-8.scope: Deactivated successfully. Sep 6 00:06:46.152809 systemd-logind[1634]: Removed session 8. Sep 6 00:06:46.160876 kubelet[2752]: I0906 00:06:46.159214 2752 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-747d8dffd6-vmfb7" podStartSLOduration=27.603014517 podStartE2EDuration="34.159172447s" podCreationTimestamp="2025-09-06 00:06:12 +0000 UTC" firstStartedPulling="2025-09-06 00:06:39.114847301 +0000 UTC m=+69.989297619" lastFinishedPulling="2025-09-06 00:06:45.671005231 +0000 UTC m=+76.545455549" observedRunningTime="2025-09-06 00:06:46.156972837 +0000 UTC m=+77.031423167" watchObservedRunningTime="2025-09-06 00:06:46.159172447 +0000 UTC m=+77.033622813" Sep 6 00:06:47.206392 systemd[1]: run-containerd-runc-k8s.io-a85560e1fb8d918fabc51561572632b319e3a7ebe13e9174987b545b8d9988eb-runc.RErLTd.mount: Deactivated successfully. Sep 6 00:06:47.408047 env[1646]: time="2025-09-06T00:06:47.407956184Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:47.412174 env[1646]: time="2025-09-06T00:06:47.412075225Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5e2b30128ce4b607acd97d3edef62ce1a90be0259903090a51c360adbe4a8f3b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:47.415641 env[1646]: time="2025-09-06T00:06:47.415585104Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:47.419391 env[1646]: time="2025-09-06T00:06:47.419310268Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:f22c88018d8b58c4ef0052f594b216a13bd6852166ac131a538c5ab2fba23bb2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:47.420739 env[1646]: time="2025-09-06T00:06:47.420677378Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\" returns image reference \"sha256:5e2b30128ce4b607acd97d3edef62ce1a90be0259903090a51c360adbe4a8f3b\"" Sep 6 00:06:47.425129 env[1646]: time="2025-09-06T00:06:47.425037394Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\"" Sep 6 00:06:47.433255 env[1646]: time="2025-09-06T00:06:47.433079101Z" level=info msg="CreateContainer within sandbox \"05a17f9462fa09c33df76eff04514c05d0f0167559d2bd957c58e63ac5c50a31\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Sep 6 00:06:47.472499 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2402557219.mount: Deactivated successfully. Sep 6 00:06:47.493825 env[1646]: time="2025-09-06T00:06:47.493756902Z" level=info msg="CreateContainer within sandbox \"05a17f9462fa09c33df76eff04514c05d0f0167559d2bd957c58e63ac5c50a31\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"9a9de7e04627566b369f58522af337ffdad854639b2e20d2ab7ed5e60dac53c2\"" Sep 6 00:06:47.495098 env[1646]: time="2025-09-06T00:06:47.495042936Z" level=info msg="StartContainer for \"9a9de7e04627566b369f58522af337ffdad854639b2e20d2ab7ed5e60dac53c2\"" Sep 6 00:06:47.531411 systemd[1]: Started cri-containerd-9a9de7e04627566b369f58522af337ffdad854639b2e20d2ab7ed5e60dac53c2.scope. Sep 6 00:06:47.600201 kernel: kauditd_printk_skb: 496 callbacks suppressed Sep 6 00:06:47.600373 kernel: audit: type=1400 audit(1757117207.589:1396): avc: denied { perfmon } for pid=5145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.589000 audit[5145]: AVC avc: denied { perfmon } for pid=5145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.589000 audit[5145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=4491 pid=5145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:47.589000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961396465376530343632373536366233363966353835323261663333 Sep 6 00:06:47.627444 kernel: audit: type=1300 audit(1757117207.589:1396): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=4491 pid=5145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:47.627611 kernel: audit: type=1327 audit(1757117207.589:1396): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961396465376530343632373536366233363966353835323261663333 Sep 6 00:06:47.597000 audit[5145]: AVC avc: denied { bpf } for pid=5145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.635939 kernel: audit: type=1400 audit(1757117207.597:1397): avc: denied { bpf } for pid=5145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.597000 audit[5145]: AVC avc: denied { bpf } for pid=5145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.643871 kernel: audit: type=1400 audit(1757117207.597:1397): avc: denied { bpf } for pid=5145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.597000 audit[5145]: AVC avc: denied { bpf } for pid=5145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.651939 kernel: audit: type=1400 audit(1757117207.597:1397): avc: denied { bpf } for pid=5145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.597000 audit[5145]: AVC avc: denied { perfmon } for pid=5145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.660315 kernel: audit: type=1400 audit(1757117207.597:1397): avc: denied { perfmon } for pid=5145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.597000 audit[5145]: AVC avc: denied { perfmon } for pid=5145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.669172 kernel: audit: type=1400 audit(1757117207.597:1397): avc: denied { perfmon } for pid=5145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.597000 audit[5145]: AVC avc: denied { perfmon } for pid=5145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.677487 kernel: audit: type=1400 audit(1757117207.597:1397): avc: denied { perfmon } for pid=5145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.597000 audit[5145]: AVC avc: denied { perfmon } for pid=5145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.685874 kernel: audit: type=1400 audit(1757117207.597:1397): avc: denied { perfmon } for pid=5145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.597000 audit[5145]: AVC avc: denied { perfmon } for pid=5145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.597000 audit[5145]: AVC avc: denied { bpf } for pid=5145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.597000 audit[5145]: AVC avc: denied { bpf } for pid=5145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.597000 audit: BPF prog-id=215 op=LOAD Sep 6 00:06:47.597000 audit[5145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=4491 pid=5145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:47.597000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961396465376530343632373536366233363966353835323261663333 Sep 6 00:06:47.599000 audit[5145]: AVC avc: denied { bpf } for pid=5145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.599000 audit[5145]: AVC avc: denied { bpf } for pid=5145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.599000 audit[5145]: AVC avc: denied { perfmon } for pid=5145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.599000 audit[5145]: AVC avc: denied { perfmon } for pid=5145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.599000 audit[5145]: AVC avc: denied { perfmon } for pid=5145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.687433 env[1646]: time="2025-09-06T00:06:47.687294628Z" level=info msg="StartContainer for \"9a9de7e04627566b369f58522af337ffdad854639b2e20d2ab7ed5e60dac53c2\" returns successfully" Sep 6 00:06:47.599000 audit[5145]: AVC avc: denied { perfmon } for pid=5145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.599000 audit[5145]: AVC avc: denied { perfmon } for pid=5145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.599000 audit[5145]: AVC avc: denied { bpf } for pid=5145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.599000 audit[5145]: AVC avc: denied { bpf } for pid=5145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.599000 audit: BPF prog-id=216 op=LOAD Sep 6 00:06:47.599000 audit[5145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=4491 pid=5145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:47.599000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961396465376530343632373536366233363966353835323261663333 Sep 6 00:06:47.599000 audit: BPF prog-id=216 op=UNLOAD Sep 6 00:06:47.599000 audit: BPF prog-id=215 op=UNLOAD Sep 6 00:06:47.599000 audit[5145]: AVC avc: denied { bpf } for pid=5145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.599000 audit[5145]: AVC avc: denied { bpf } for pid=5145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.599000 audit[5145]: AVC avc: denied { bpf } for pid=5145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.599000 audit[5145]: AVC avc: denied { perfmon } for pid=5145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.599000 audit[5145]: AVC avc: denied { perfmon } for pid=5145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.599000 audit[5145]: AVC avc: denied { perfmon } for pid=5145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.599000 audit[5145]: AVC avc: denied { perfmon } for pid=5145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.599000 audit[5145]: AVC avc: denied { perfmon } for pid=5145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.599000 audit[5145]: AVC avc: denied { bpf } for pid=5145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.599000 audit[5145]: AVC avc: denied { bpf } for pid=5145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:47.599000 audit: BPF prog-id=217 op=LOAD Sep 6 00:06:47.599000 audit[5145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=4491 pid=5145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:47.599000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961396465376530343632373536366233363966353835323261663333 Sep 6 00:06:49.940168 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount394775619.mount: Deactivated successfully. Sep 6 00:06:49.965840 env[1646]: time="2025-09-06T00:06:49.965778501Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:49.969994 env[1646]: time="2025-09-06T00:06:49.969916992Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e210e86234bc99f018431b30477c5ca2ad6f7ecf67ef011498f7beb48fb0b21f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:49.974564 env[1646]: time="2025-09-06T00:06:49.974489559Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:49.979462 env[1646]: time="2025-09-06T00:06:49.979385801Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:29becebc47401da9997a2a30f4c25c511a5f379d17275680b048224829af71a5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:49.982239 env[1646]: time="2025-09-06T00:06:49.980958430Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\" returns image reference \"sha256:e210e86234bc99f018431b30477c5ca2ad6f7ecf67ef011498f7beb48fb0b21f\"" Sep 6 00:06:49.986269 env[1646]: time="2025-09-06T00:06:49.984983002Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\"" Sep 6 00:06:49.993439 env[1646]: time="2025-09-06T00:06:49.993335601Z" level=info msg="CreateContainer within sandbox \"1367f63384b5c789c1a5dffa322b4de8cbe598f91056ed1c1d76a9d0d8d986b8\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Sep 6 00:06:50.031784 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2913874356.mount: Deactivated successfully. Sep 6 00:06:50.039557 env[1646]: time="2025-09-06T00:06:50.039461971Z" level=info msg="CreateContainer within sandbox \"1367f63384b5c789c1a5dffa322b4de8cbe598f91056ed1c1d76a9d0d8d986b8\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"e1b56cc32ec65695d839a1f5f78bb227e17637e5de33b043e52c4ce84d06e3d6\"" Sep 6 00:06:50.042415 env[1646]: time="2025-09-06T00:06:50.042347990Z" level=info msg="StartContainer for \"e1b56cc32ec65695d839a1f5f78bb227e17637e5de33b043e52c4ce84d06e3d6\"" Sep 6 00:06:50.112538 systemd[1]: Started cri-containerd-e1b56cc32ec65695d839a1f5f78bb227e17637e5de33b043e52c4ce84d06e3d6.scope. Sep 6 00:06:50.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.187000 audit: BPF prog-id=218 op=LOAD Sep 6 00:06:50.188000 audit[5189]: AVC avc: denied { bpf } for pid=5189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.188000 audit[5189]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4225 pid=5189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:50.188000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531623536636333326563363536393564383339613166356637386262 Sep 6 00:06:50.188000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.188000 audit[5189]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4225 pid=5189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:50.188000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531623536636333326563363536393564383339613166356637386262 Sep 6 00:06:50.190000 audit[5189]: AVC avc: denied { bpf } for pid=5189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.190000 audit[5189]: AVC avc: denied { bpf } for pid=5189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.190000 audit[5189]: AVC avc: denied { bpf } for pid=5189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.190000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.190000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.190000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.190000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.190000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.190000 audit[5189]: AVC avc: denied { bpf } for pid=5189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.190000 audit[5189]: AVC avc: denied { bpf } for pid=5189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.190000 audit: BPF prog-id=219 op=LOAD Sep 6 00:06:50.190000 audit[5189]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4225 pid=5189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:50.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531623536636333326563363536393564383339613166356637386262 Sep 6 00:06:50.190000 audit[5189]: AVC avc: denied { bpf } for pid=5189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.190000 audit[5189]: AVC avc: denied { bpf } for pid=5189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.190000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.190000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.190000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.190000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.190000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.190000 audit[5189]: AVC avc: denied { bpf } for pid=5189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.190000 audit[5189]: AVC avc: denied { bpf } for pid=5189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.190000 audit: BPF prog-id=220 op=LOAD Sep 6 00:06:50.190000 audit[5189]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4225 pid=5189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:50.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531623536636333326563363536393564383339613166356637386262 Sep 6 00:06:50.190000 audit: BPF prog-id=220 op=UNLOAD Sep 6 00:06:50.191000 audit: BPF prog-id=219 op=UNLOAD Sep 6 00:06:50.191000 audit[5189]: AVC avc: denied { bpf } for pid=5189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.191000 audit[5189]: AVC avc: denied { bpf } for pid=5189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.191000 audit[5189]: AVC avc: denied { bpf } for pid=5189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.191000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.191000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.191000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.191000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.191000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.191000 audit[5189]: AVC avc: denied { bpf } for pid=5189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.191000 audit[5189]: AVC avc: denied { bpf } for pid=5189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:50.191000 audit: BPF prog-id=221 op=LOAD Sep 6 00:06:50.191000 audit[5189]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4225 pid=5189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:50.191000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531623536636333326563363536393564383339613166356637386262 Sep 6 00:06:50.281740 env[1646]: time="2025-09-06T00:06:50.281659490Z" level=info msg="StartContainer for \"e1b56cc32ec65695d839a1f5f78bb227e17637e5de33b043e52c4ce84d06e3d6\" returns successfully" Sep 6 00:06:51.175302 systemd[1]: Started sshd@8-172.31.29.17:22-147.75.109.163:55268.service. Sep 6 00:06:51.176000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.29.17:22-147.75.109.163:55268 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:06:51.270000 audit[5220]: NETFILTER_CFG table=filter:118 family=2 entries=13 op=nft_register_rule pid=5220 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:51.270000 audit[5220]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffe0ce80e0 a2=0 a3=1 items=0 ppid=2863 pid=5220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:51.270000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:51.281000 audit[5220]: NETFILTER_CFG table=nat:119 family=2 entries=27 op=nft_register_chain pid=5220 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:51.281000 audit[5220]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=9348 a0=3 a1=ffffe0ce80e0 a2=0 a3=1 items=0 ppid=2863 pid=5220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:51.281000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:51.408000 audit[5217]: USER_ACCT pid=5217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:51.410442 sshd[5217]: Accepted publickey for core from 147.75.109.163 port 55268 ssh2: RSA SHA256:CT8P9x8s4J0T70k8+LLVTP4XjE3e1SNW15vyou+QijI Sep 6 00:06:51.411000 audit[5217]: CRED_ACQ pid=5217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:51.411000 audit[5217]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff709ab80 a2=3 a3=1 items=0 ppid=1 pid=5217 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:51.411000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:06:51.443218 sshd[5217]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:06:51.452496 systemd-logind[1634]: New session 9 of user core. Sep 6 00:06:51.454990 systemd[1]: Started session-9.scope. Sep 6 00:06:51.477000 audit[5217]: USER_START pid=5217 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:51.480000 audit[5221]: CRED_ACQ pid=5221 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:51.864836 sshd[5217]: pam_unix(sshd:session): session closed for user core Sep 6 00:06:51.866000 audit[5217]: USER_END pid=5217 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:51.866000 audit[5217]: CRED_DISP pid=5217 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:51.871512 systemd[1]: sshd@8-172.31.29.17:22-147.75.109.163:55268.service: Deactivated successfully. Sep 6 00:06:51.872945 systemd[1]: session-9.scope: Deactivated successfully. Sep 6 00:06:51.870000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.29.17:22-147.75.109.163:55268 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:06:51.876374 systemd-logind[1634]: Session 9 logged out. Waiting for processes to exit. Sep 6 00:06:51.878776 systemd-logind[1634]: Removed session 9. Sep 6 00:06:53.994499 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount281542284.mount: Deactivated successfully. Sep 6 00:06:54.138193 kubelet[2752]: I0906 00:06:54.138065 2752 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-754d5b8ff5-xnwcz" podStartSLOduration=6.556739616 podStartE2EDuration="18.138039738s" podCreationTimestamp="2025-09-06 00:06:36 +0000 UTC" firstStartedPulling="2025-09-06 00:06:38.402304107 +0000 UTC m=+69.276754425" lastFinishedPulling="2025-09-06 00:06:49.983604229 +0000 UTC m=+80.858054547" observedRunningTime="2025-09-06 00:06:51.209706084 +0000 UTC m=+82.084156414" watchObservedRunningTime="2025-09-06 00:06:54.138039738 +0000 UTC m=+85.012490068" Sep 6 00:06:54.255000 audit[5256]: NETFILTER_CFG table=filter:120 family=2 entries=12 op=nft_register_rule pid=5256 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:54.259008 kernel: kauditd_printk_skb: 107 callbacks suppressed Sep 6 00:06:54.259168 kernel: audit: type=1325 audit(1757117214.255:1431): table=filter:120 family=2 entries=12 op=nft_register_rule pid=5256 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:54.255000 audit[5256]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffcd6f9120 a2=0 a3=1 items=0 ppid=2863 pid=5256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:54.279315 kernel: audit: type=1300 audit(1757117214.255:1431): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffcd6f9120 a2=0 a3=1 items=0 ppid=2863 pid=5256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:54.255000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:54.285502 kernel: audit: type=1327 audit(1757117214.255:1431): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:54.374000 audit[5256]: NETFILTER_CFG table=nat:121 family=2 entries=58 op=nft_register_chain pid=5256 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:54.382170 kernel: audit: type=1325 audit(1757117214.374:1432): table=nat:121 family=2 entries=58 op=nft_register_chain pid=5256 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:54.374000 audit[5256]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20628 a0=3 a1=ffffcd6f9120 a2=0 a3=1 items=0 ppid=2863 pid=5256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:54.374000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:54.403311 kernel: audit: type=1300 audit(1757117214.374:1432): arch=c00000b7 syscall=211 success=yes exit=20628 a0=3 a1=ffffcd6f9120 a2=0 a3=1 items=0 ppid=2863 pid=5256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:54.403472 kernel: audit: type=1327 audit(1757117214.374:1432): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:55.170990 env[1646]: time="2025-09-06T00:06:55.170923968Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:55.173675 env[1646]: time="2025-09-06T00:06:55.173590921Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:14088376331a0622b7f6a2fbc2f2932806a6eafdd7b602f6139d3b985bf1e685,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:55.176972 env[1646]: time="2025-09-06T00:06:55.176885666Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:55.180401 env[1646]: time="2025-09-06T00:06:55.180318871Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:46297703ab3739331a00a58f0d6a5498c8d3b6523ad947eed68592ee0f3e79f0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:55.182383 env[1646]: time="2025-09-06T00:06:55.182309159Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\" returns image reference \"sha256:14088376331a0622b7f6a2fbc2f2932806a6eafdd7b602f6139d3b985bf1e685\"" Sep 6 00:06:55.188885 env[1646]: time="2025-09-06T00:06:55.188801310Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 6 00:06:55.194511 env[1646]: time="2025-09-06T00:06:55.194460218Z" level=info msg="CreateContainer within sandbox \"24fb2ad2b168b3518acfaeabd2755f0cd0731112dd46db1df3c5efcb62e6a66f\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Sep 6 00:06:55.221749 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3477653772.mount: Deactivated successfully. Sep 6 00:06:55.225887 env[1646]: time="2025-09-06T00:06:55.225826230Z" level=info msg="CreateContainer within sandbox \"24fb2ad2b168b3518acfaeabd2755f0cd0731112dd46db1df3c5efcb62e6a66f\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"7ce0b90df7b14838032d00b7c0255255869d9c62fc6cb08e5fbf252fea685a08\"" Sep 6 00:06:55.229476 env[1646]: time="2025-09-06T00:06:55.229412690Z" level=info msg="StartContainer for \"7ce0b90df7b14838032d00b7c0255255869d9c62fc6cb08e5fbf252fea685a08\"" Sep 6 00:06:55.297652 systemd[1]: run-containerd-runc-k8s.io-7ce0b90df7b14838032d00b7c0255255869d9c62fc6cb08e5fbf252fea685a08-runc.Wjp598.mount: Deactivated successfully. Sep 6 00:06:55.305587 systemd[1]: Started cri-containerd-7ce0b90df7b14838032d00b7c0255255869d9c62fc6cb08e5fbf252fea685a08.scope. Sep 6 00:06:55.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.369214 kernel: audit: type=1400 audit(1757117215.353:1433): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.369340 kernel: audit: type=1400 audit(1757117215.353:1434): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.380592 kernel: audit: type=1400 audit(1757117215.353:1435): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.380716 kernel: audit: type=1400 audit(1757117215.353:1436): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.361000 audit: BPF prog-id=222 op=LOAD Sep 6 00:06:55.369000 audit[5266]: AVC avc: denied { bpf } for pid=5266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.369000 audit[5266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4763 pid=5266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:55.369000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763653062393064663762313438333830333264303062376330323535 Sep 6 00:06:55.369000 audit[5266]: AVC avc: denied { perfmon } for pid=5266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.369000 audit[5266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4763 pid=5266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:55.369000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763653062393064663762313438333830333264303062376330323535 Sep 6 00:06:55.370000 audit[5266]: AVC avc: denied { bpf } for pid=5266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.370000 audit[5266]: AVC avc: denied { bpf } for pid=5266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.370000 audit[5266]: AVC avc: denied { bpf } for pid=5266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.370000 audit[5266]: AVC avc: denied { perfmon } for pid=5266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.370000 audit[5266]: AVC avc: denied { perfmon } for pid=5266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.370000 audit[5266]: AVC avc: denied { perfmon } for pid=5266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.370000 audit[5266]: AVC avc: denied { perfmon } for pid=5266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.370000 audit[5266]: AVC avc: denied { perfmon } for pid=5266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.370000 audit[5266]: AVC avc: denied { bpf } for pid=5266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.370000 audit[5266]: AVC avc: denied { bpf } for pid=5266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.370000 audit: BPF prog-id=223 op=LOAD Sep 6 00:06:55.370000 audit[5266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4763 pid=5266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:55.370000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763653062393064663762313438333830333264303062376330323535 Sep 6 00:06:55.370000 audit[5266]: AVC avc: denied { bpf } for pid=5266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.370000 audit[5266]: AVC avc: denied { bpf } for pid=5266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.370000 audit[5266]: AVC avc: denied { perfmon } for pid=5266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.370000 audit[5266]: AVC avc: denied { perfmon } for pid=5266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.370000 audit[5266]: AVC avc: denied { perfmon } for pid=5266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.370000 audit[5266]: AVC avc: denied { perfmon } for pid=5266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.370000 audit[5266]: AVC avc: denied { perfmon } for pid=5266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.370000 audit[5266]: AVC avc: denied { bpf } for pid=5266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.370000 audit[5266]: AVC avc: denied { bpf } for pid=5266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.370000 audit: BPF prog-id=224 op=LOAD Sep 6 00:06:55.370000 audit[5266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4763 pid=5266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:55.370000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763653062393064663762313438333830333264303062376330323535 Sep 6 00:06:55.370000 audit: BPF prog-id=224 op=UNLOAD Sep 6 00:06:55.370000 audit: BPF prog-id=223 op=UNLOAD Sep 6 00:06:55.370000 audit[5266]: AVC avc: denied { bpf } for pid=5266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.370000 audit[5266]: AVC avc: denied { bpf } for pid=5266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.370000 audit[5266]: AVC avc: denied { bpf } for pid=5266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.370000 audit[5266]: AVC avc: denied { perfmon } for pid=5266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.370000 audit[5266]: AVC avc: denied { perfmon } for pid=5266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.370000 audit[5266]: AVC avc: denied { perfmon } for pid=5266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.370000 audit[5266]: AVC avc: denied { perfmon } for pid=5266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.370000 audit[5266]: AVC avc: denied { perfmon } for pid=5266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.370000 audit[5266]: AVC avc: denied { bpf } for pid=5266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.370000 audit[5266]: AVC avc: denied { bpf } for pid=5266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:55.370000 audit: BPF prog-id=225 op=LOAD Sep 6 00:06:55.370000 audit[5266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4763 pid=5266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:55.370000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763653062393064663762313438333830333264303062376330323535 Sep 6 00:06:55.438465 env[1646]: time="2025-09-06T00:06:55.438274969Z" level=info msg="StartContainer for \"7ce0b90df7b14838032d00b7c0255255869d9c62fc6cb08e5fbf252fea685a08\" returns successfully" Sep 6 00:06:56.262077 systemd[1]: run-containerd-runc-k8s.io-7ce0b90df7b14838032d00b7c0255255869d9c62fc6cb08e5fbf252fea685a08-runc.2YEb7b.mount: Deactivated successfully. Sep 6 00:06:56.305000 audit[5312]: NETFILTER_CFG table=filter:122 family=2 entries=12 op=nft_register_rule pid=5312 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:56.305000 audit[5312]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffffcdcc1d0 a2=0 a3=1 items=0 ppid=2863 pid=5312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:56.305000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:56.313000 audit[5312]: NETFILTER_CFG table=nat:123 family=2 entries=22 op=nft_register_rule pid=5312 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:06:56.313000 audit[5312]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=fffffcdcc1d0 a2=0 a3=1 items=0 ppid=2863 pid=5312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:56.313000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:06:56.891000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.29.17:22-147.75.109.163:55276 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:06:56.892365 systemd[1]: Started sshd@9-172.31.29.17:22-147.75.109.163:55276.service. Sep 6 00:06:57.082000 audit[5318]: USER_ACCT pid=5318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:57.084008 sshd[5318]: Accepted publickey for core from 147.75.109.163 port 55276 ssh2: RSA SHA256:CT8P9x8s4J0T70k8+LLVTP4XjE3e1SNW15vyou+QijI Sep 6 00:06:57.084000 audit[5318]: CRED_ACQ pid=5318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:57.084000 audit[5318]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd8cea9a0 a2=3 a3=1 items=0 ppid=1 pid=5318 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:57.084000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:06:57.088612 sshd[5318]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:06:57.098954 systemd[1]: Started session-10.scope. Sep 6 00:06:57.100455 systemd-logind[1634]: New session 10 of user core. Sep 6 00:06:57.126000 audit[5318]: USER_START pid=5318 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:57.130000 audit[5320]: CRED_ACQ pid=5320 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:57.260762 systemd[1]: run-containerd-runc-k8s.io-7ce0b90df7b14838032d00b7c0255255869d9c62fc6cb08e5fbf252fea685a08-runc.viPMGQ.mount: Deactivated successfully. Sep 6 00:06:57.554365 sshd[5318]: pam_unix(sshd:session): session closed for user core Sep 6 00:06:57.557000 audit[5318]: USER_END pid=5318 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:57.557000 audit[5318]: CRED_DISP pid=5318 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:57.560000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.29.17:22-147.75.109.163:55276 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:06:57.561655 systemd[1]: sshd@9-172.31.29.17:22-147.75.109.163:55276.service: Deactivated successfully. Sep 6 00:06:57.562977 systemd[1]: session-10.scope: Deactivated successfully. Sep 6 00:06:57.565855 systemd-logind[1634]: Session 10 logged out. Waiting for processes to exit. Sep 6 00:06:57.568163 systemd-logind[1634]: Removed session 10. Sep 6 00:06:57.583000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.29.17:22-147.75.109.163:55286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:06:57.584022 systemd[1]: Started sshd@10-172.31.29.17:22-147.75.109.163:55286.service. Sep 6 00:06:57.786000 audit[5348]: USER_ACCT pid=5348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:57.787603 sshd[5348]: Accepted publickey for core from 147.75.109.163 port 55286 ssh2: RSA SHA256:CT8P9x8s4J0T70k8+LLVTP4XjE3e1SNW15vyou+QijI Sep 6 00:06:57.789000 audit[5348]: CRED_ACQ pid=5348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:57.789000 audit[5348]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcbf31fa0 a2=3 a3=1 items=0 ppid=1 pid=5348 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:57.789000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:06:57.791874 sshd[5348]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:06:57.802598 systemd[1]: Started session-11.scope. Sep 6 00:06:57.804970 systemd-logind[1634]: New session 11 of user core. Sep 6 00:06:57.817000 audit[5348]: USER_START pid=5348 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:57.822000 audit[5350]: CRED_ACQ pid=5350 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:58.285795 systemd[1]: run-containerd-runc-k8s.io-7ce0b90df7b14838032d00b7c0255255869d9c62fc6cb08e5fbf252fea685a08-runc.YQGIiG.mount: Deactivated successfully. Sep 6 00:06:58.352904 sshd[5348]: pam_unix(sshd:session): session closed for user core Sep 6 00:06:58.353000 audit[5348]: USER_END pid=5348 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:58.354000 audit[5348]: CRED_DISP pid=5348 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:58.357292 systemd[1]: session-11.scope: Deactivated successfully. Sep 6 00:06:58.358438 systemd[1]: sshd@10-172.31.29.17:22-147.75.109.163:55286.service: Deactivated successfully. Sep 6 00:06:58.357000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.29.17:22-147.75.109.163:55286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:06:58.361911 systemd-logind[1634]: Session 11 logged out. Waiting for processes to exit. Sep 6 00:06:58.364233 systemd-logind[1634]: Removed session 11. Sep 6 00:06:58.380000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.29.17:22-147.75.109.163:55292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:06:58.381393 systemd[1]: Started sshd@11-172.31.29.17:22-147.75.109.163:55292.service. Sep 6 00:06:58.586000 audit[5375]: USER_ACCT pid=5375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:58.588792 sshd[5375]: Accepted publickey for core from 147.75.109.163 port 55292 ssh2: RSA SHA256:CT8P9x8s4J0T70k8+LLVTP4XjE3e1SNW15vyou+QijI Sep 6 00:06:58.588000 audit[5375]: CRED_ACQ pid=5375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:58.591000 audit[5375]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff6f587b0 a2=3 a3=1 items=0 ppid=1 pid=5375 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:58.591000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:06:58.593080 sshd[5375]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:06:58.609755 systemd-logind[1634]: New session 12 of user core. Sep 6 00:06:58.611241 systemd[1]: Started session-12.scope. Sep 6 00:06:58.630000 audit[5375]: USER_START pid=5375 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:58.633000 audit[5380]: CRED_ACQ pid=5380 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:59.061888 env[1646]: time="2025-09-06T00:06:59.061810181Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:59.065999 env[1646]: time="2025-09-06T00:06:59.065936411Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:59.071656 sshd[5375]: pam_unix(sshd:session): session closed for user core Sep 6 00:06:59.072376 env[1646]: time="2025-09-06T00:06:59.072323890Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:59.073000 audit[5375]: USER_END pid=5375 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:59.074000 audit[5375]: CRED_DISP pid=5375 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:06:59.078207 systemd[1]: session-12.scope: Deactivated successfully. Sep 6 00:06:59.080704 systemd[1]: sshd@11-172.31.29.17:22-147.75.109.163:55292.service: Deactivated successfully. Sep 6 00:06:59.080000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.29.17:22-147.75.109.163:55292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:06:59.086261 systemd-logind[1634]: Session 12 logged out. Waiting for processes to exit. Sep 6 00:06:59.090497 systemd-logind[1634]: Removed session 12. Sep 6 00:06:59.095493 env[1646]: time="2025-09-06T00:06:59.095438145Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:59.098597 env[1646]: time="2025-09-06T00:06:59.098383459Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08\"" Sep 6 00:06:59.102364 env[1646]: time="2025-09-06T00:06:59.102308614Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 6 00:06:59.113300 env[1646]: time="2025-09-06T00:06:59.113067063Z" level=info msg="CreateContainer within sandbox \"e5c6daadd585b1482ac71d80abecc384586aab19c1cdbbeca015ec2a518aedbe\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 6 00:06:59.155933 env[1646]: time="2025-09-06T00:06:59.155864724Z" level=info msg="CreateContainer within sandbox \"e5c6daadd585b1482ac71d80abecc384586aab19c1cdbbeca015ec2a518aedbe\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"1df31eb63f449dd00a37838242793912c697d32673ac4468c79dd275281f3a9c\"" Sep 6 00:06:59.158464 env[1646]: time="2025-09-06T00:06:59.158368087Z" level=info msg="StartContainer for \"1df31eb63f449dd00a37838242793912c697d32673ac4468c79dd275281f3a9c\"" Sep 6 00:06:59.213143 systemd[1]: Started cri-containerd-1df31eb63f449dd00a37838242793912c697d32673ac4468c79dd275281f3a9c.scope. Sep 6 00:06:59.268166 kernel: kauditd_printk_skb: 92 callbacks suppressed Sep 6 00:06:59.268333 kernel: audit: type=1400 audit(1757117219.257:1480): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.293152 kernel: audit: type=1400 audit(1757117219.257:1481): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.293316 kernel: audit: type=1400 audit(1757117219.257:1482): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.301477 kernel: audit: type=1400 audit(1757117219.257:1483): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.301650 kernel: audit: type=1400 audit(1757117219.257:1484): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.317645 kernel: audit: type=1400 audit(1757117219.257:1485): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.329415 kernel: audit: type=1400 audit(1757117219.257:1486): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.337697 kernel: audit: type=1400 audit(1757117219.257:1487): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.364255 kernel: audit: type=1400 audit(1757117219.257:1488): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.374292 kernel: audit: type=1400 audit(1757117219.259:1489): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.375272 env[1646]: time="2025-09-06T00:06:59.375202434Z" level=info msg="StartContainer for \"1df31eb63f449dd00a37838242793912c697d32673ac4468c79dd275281f3a9c\" returns successfully" Sep 6 00:06:59.259000 audit: BPF prog-id=226 op=LOAD Sep 6 00:06:59.271000 audit[5403]: AVC avc: denied { bpf } for pid=5403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.271000 audit[5403]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4974 pid=5403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:59.271000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164663331656236336634343964643030613337383338323432373933 Sep 6 00:06:59.271000 audit[5403]: AVC avc: denied { perfmon } for pid=5403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.271000 audit[5403]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4974 pid=5403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:59.271000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164663331656236336634343964643030613337383338323432373933 Sep 6 00:06:59.271000 audit[5403]: AVC avc: denied { bpf } for pid=5403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.271000 audit[5403]: AVC avc: denied { bpf } for pid=5403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.271000 audit[5403]: AVC avc: denied { bpf } for pid=5403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.271000 audit[5403]: AVC avc: denied { perfmon } for pid=5403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.271000 audit[5403]: AVC avc: denied { perfmon } for pid=5403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.271000 audit[5403]: AVC avc: denied { perfmon } for pid=5403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.271000 audit[5403]: AVC avc: denied { perfmon } for pid=5403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.271000 audit[5403]: AVC avc: denied { perfmon } for pid=5403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.271000 audit[5403]: AVC avc: denied { bpf } for pid=5403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.271000 audit[5403]: AVC avc: denied { bpf } for pid=5403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.271000 audit: BPF prog-id=227 op=LOAD Sep 6 00:06:59.271000 audit[5403]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4974 pid=5403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:59.271000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164663331656236336634343964643030613337383338323432373933 Sep 6 00:06:59.272000 audit[5403]: AVC avc: denied { bpf } for pid=5403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.272000 audit[5403]: AVC avc: denied { bpf } for pid=5403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.272000 audit[5403]: AVC avc: denied { perfmon } for pid=5403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.272000 audit[5403]: AVC avc: denied { perfmon } for pid=5403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.272000 audit[5403]: AVC avc: denied { perfmon } for pid=5403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.272000 audit[5403]: AVC avc: denied { perfmon } for pid=5403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.272000 audit[5403]: AVC avc: denied { perfmon } for pid=5403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.272000 audit[5403]: AVC avc: denied { bpf } for pid=5403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.272000 audit[5403]: AVC avc: denied { bpf } for pid=5403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.272000 audit: BPF prog-id=228 op=LOAD Sep 6 00:06:59.272000 audit[5403]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4974 pid=5403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:59.272000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164663331656236336634343964643030613337383338323432373933 Sep 6 00:06:59.272000 audit: BPF prog-id=228 op=UNLOAD Sep 6 00:06:59.272000 audit: BPF prog-id=227 op=UNLOAD Sep 6 00:06:59.272000 audit[5403]: AVC avc: denied { bpf } for pid=5403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.272000 audit[5403]: AVC avc: denied { bpf } for pid=5403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.272000 audit[5403]: AVC avc: denied { bpf } for pid=5403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.272000 audit[5403]: AVC avc: denied { perfmon } for pid=5403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.272000 audit[5403]: AVC avc: denied { perfmon } for pid=5403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.272000 audit[5403]: AVC avc: denied { perfmon } for pid=5403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.272000 audit[5403]: AVC avc: denied { perfmon } for pid=5403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.272000 audit[5403]: AVC avc: denied { perfmon } for pid=5403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.272000 audit[5403]: AVC avc: denied { bpf } for pid=5403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.272000 audit[5403]: AVC avc: denied { bpf } for pid=5403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.272000 audit: BPF prog-id=229 op=LOAD Sep 6 00:06:59.272000 audit[5403]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4974 pid=5403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:59.272000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164663331656236336634343964643030613337383338323432373933 Sep 6 00:06:59.467022 env[1646]: time="2025-09-06T00:06:59.466959453Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:59.473583 env[1646]: time="2025-09-06T00:06:59.473505085Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:59.480274 env[1646]: time="2025-09-06T00:06:59.480210670Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:59.486035 env[1646]: time="2025-09-06T00:06:59.485953575Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:06:59.489284 env[1646]: time="2025-09-06T00:06:59.487867740Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08\"" Sep 6 00:06:59.493012 env[1646]: time="2025-09-06T00:06:59.492926627Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\"" Sep 6 00:06:59.499071 env[1646]: time="2025-09-06T00:06:59.499008060Z" level=info msg="CreateContainer within sandbox \"4dc6522f3282b8c8fe723b056384205daadf6e24b593fdfb11adb7152e4c62c9\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 6 00:06:59.536651 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4256860018.mount: Deactivated successfully. Sep 6 00:06:59.547983 env[1646]: time="2025-09-06T00:06:59.547907481Z" level=info msg="CreateContainer within sandbox \"4dc6522f3282b8c8fe723b056384205daadf6e24b593fdfb11adb7152e4c62c9\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"90939706c7c28be9a478607320c5b72f0b4619b2e78a00ab94409341b9890a0c\"" Sep 6 00:06:59.552728 env[1646]: time="2025-09-06T00:06:59.552672406Z" level=info msg="StartContainer for \"90939706c7c28be9a478607320c5b72f0b4619b2e78a00ab94409341b9890a0c\"" Sep 6 00:06:59.626279 systemd[1]: Started cri-containerd-90939706c7c28be9a478607320c5b72f0b4619b2e78a00ab94409341b9890a0c.scope. Sep 6 00:06:59.699000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.699000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.699000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.699000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.700000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.700000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.700000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.700000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.700000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.700000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.701000 audit: BPF prog-id=230 op=LOAD Sep 6 00:06:59.702000 audit[5440]: AVC avc: denied { bpf } for pid=5440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.702000 audit[5440]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4937 pid=5440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:59.702000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930393339373036633763323862653961343738363037333230633562 Sep 6 00:06:59.702000 audit[5440]: AVC avc: denied { perfmon } for pid=5440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.702000 audit[5440]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4937 pid=5440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:59.702000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930393339373036633763323862653961343738363037333230633562 Sep 6 00:06:59.702000 audit[5440]: AVC avc: denied { bpf } for pid=5440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.702000 audit[5440]: AVC avc: denied { bpf } for pid=5440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.702000 audit[5440]: AVC avc: denied { bpf } for pid=5440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.702000 audit[5440]: AVC avc: denied { perfmon } for pid=5440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.702000 audit[5440]: AVC avc: denied { perfmon } for pid=5440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.702000 audit[5440]: AVC avc: denied { perfmon } for pid=5440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.702000 audit[5440]: AVC avc: denied { perfmon } for pid=5440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.702000 audit[5440]: AVC avc: denied { perfmon } for pid=5440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.702000 audit[5440]: AVC avc: denied { bpf } for pid=5440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.702000 audit[5440]: AVC avc: denied { bpf } for pid=5440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.702000 audit: BPF prog-id=231 op=LOAD Sep 6 00:06:59.702000 audit[5440]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4937 pid=5440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:59.702000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930393339373036633763323862653961343738363037333230633562 Sep 6 00:06:59.702000 audit[5440]: AVC avc: denied { bpf } for pid=5440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.702000 audit[5440]: AVC avc: denied { bpf } for pid=5440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.702000 audit[5440]: AVC avc: denied { perfmon } for pid=5440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.702000 audit[5440]: AVC avc: denied { perfmon } for pid=5440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.702000 audit[5440]: AVC avc: denied { perfmon } for pid=5440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.702000 audit[5440]: AVC avc: denied { perfmon } for pid=5440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.702000 audit[5440]: AVC avc: denied { perfmon } for pid=5440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.702000 audit[5440]: AVC avc: denied { bpf } for pid=5440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.702000 audit[5440]: AVC avc: denied { bpf } for pid=5440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.702000 audit: BPF prog-id=232 op=LOAD Sep 6 00:06:59.702000 audit[5440]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4937 pid=5440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:59.702000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930393339373036633763323862653961343738363037333230633562 Sep 6 00:06:59.703000 audit: BPF prog-id=232 op=UNLOAD Sep 6 00:06:59.703000 audit: BPF prog-id=231 op=UNLOAD Sep 6 00:06:59.703000 audit[5440]: AVC avc: denied { bpf } for pid=5440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.703000 audit[5440]: AVC avc: denied { bpf } for pid=5440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.703000 audit[5440]: AVC avc: denied { bpf } for pid=5440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.703000 audit[5440]: AVC avc: denied { perfmon } for pid=5440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.703000 audit[5440]: AVC avc: denied { perfmon } for pid=5440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.703000 audit[5440]: AVC avc: denied { perfmon } for pid=5440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.703000 audit[5440]: AVC avc: denied { perfmon } for pid=5440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.703000 audit[5440]: AVC avc: denied { perfmon } for pid=5440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.703000 audit[5440]: AVC avc: denied { bpf } for pid=5440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.703000 audit[5440]: AVC avc: denied { bpf } for pid=5440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:06:59.703000 audit: BPF prog-id=233 op=LOAD Sep 6 00:06:59.703000 audit[5440]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4937 pid=5440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:06:59.703000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930393339373036633763323862653961343738363037333230633562 Sep 6 00:06:59.762746 env[1646]: time="2025-09-06T00:06:59.762658111Z" level=info msg="StartContainer for \"90939706c7c28be9a478607320c5b72f0b4619b2e78a00ab94409341b9890a0c\" returns successfully" Sep 6 00:07:00.261029 kubelet[2752]: I0906 00:07:00.260922 2752 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-54d579b49d-4jk72" podStartSLOduration=36.49425335 podStartE2EDuration="49.26089807s" podCreationTimestamp="2025-09-06 00:06:11 +0000 UTC" firstStartedPulling="2025-09-06 00:06:42.41827412 +0000 UTC m=+73.292724450" lastFinishedPulling="2025-09-06 00:06:55.184918864 +0000 UTC m=+86.059369170" observedRunningTime="2025-09-06 00:06:56.226677592 +0000 UTC m=+87.101127910" watchObservedRunningTime="2025-09-06 00:07:00.26089807 +0000 UTC m=+91.135348412" Sep 6 00:07:00.305781 kubelet[2752]: I0906 00:07:00.305679 2752 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-6df8d98b58-2jfmb" podStartSLOduration=40.888197566 podStartE2EDuration="56.305657175s" podCreationTimestamp="2025-09-06 00:06:04 +0000 UTC" firstStartedPulling="2025-09-06 00:06:43.68295879 +0000 UTC m=+74.557409120" lastFinishedPulling="2025-09-06 00:06:59.100418423 +0000 UTC m=+89.974868729" observedRunningTime="2025-09-06 00:07:00.271176884 +0000 UTC m=+91.145627214" watchObservedRunningTime="2025-09-06 00:07:00.305657175 +0000 UTC m=+91.180107505" Sep 6 00:07:00.306472 kubelet[2752]: I0906 00:07:00.306386 2752 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-6df8d98b58-z8s4t" podStartSLOduration=40.544990229 podStartE2EDuration="56.306366381s" podCreationTimestamp="2025-09-06 00:06:04 +0000 UTC" firstStartedPulling="2025-09-06 00:06:43.729464034 +0000 UTC m=+74.603914352" lastFinishedPulling="2025-09-06 00:06:59.490840138 +0000 UTC m=+90.365290504" observedRunningTime="2025-09-06 00:07:00.305034533 +0000 UTC m=+91.179484851" watchObservedRunningTime="2025-09-06 00:07:00.306366381 +0000 UTC m=+91.180816699" Sep 6 00:07:00.394000 audit[5482]: NETFILTER_CFG table=filter:124 family=2 entries=12 op=nft_register_rule pid=5482 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:07:00.394000 audit[5482]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffeffd6820 a2=0 a3=1 items=0 ppid=2863 pid=5482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:00.394000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:07:00.403000 audit[5482]: NETFILTER_CFG table=nat:125 family=2 entries=22 op=nft_register_rule pid=5482 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:07:00.403000 audit[5482]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffeffd6820 a2=0 a3=1 items=0 ppid=2863 pid=5482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:00.403000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:07:00.433000 audit[5484]: NETFILTER_CFG table=filter:126 family=2 entries=12 op=nft_register_rule pid=5484 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:07:00.433000 audit[5484]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffc43fc140 a2=0 a3=1 items=0 ppid=2863 pid=5484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:00.433000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:07:00.440000 audit[5484]: NETFILTER_CFG table=nat:127 family=2 entries=22 op=nft_register_rule pid=5484 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:07:00.440000 audit[5484]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffc43fc140 a2=0 a3=1 items=0 ppid=2863 pid=5484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:00.440000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:07:01.355428 env[1646]: time="2025-09-06T00:07:01.355363978Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:07:01.361533 env[1646]: time="2025-09-06T00:07:01.361476117Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a319b5bdc1001e98875b68e2943279adb74bcb19d09f1db857bc27959a078a65,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:07:01.366444 env[1646]: time="2025-09-06T00:07:01.366382339Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:07:01.374740 env[1646]: time="2025-09-06T00:07:01.374683828Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:731ab232ca708102ab332340b1274d5cd656aa896ecc5368ee95850b811df86f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:07:01.377744 env[1646]: time="2025-09-06T00:07:01.376556475Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\" returns image reference \"sha256:a319b5bdc1001e98875b68e2943279adb74bcb19d09f1db857bc27959a078a65\"" Sep 6 00:07:01.387306 env[1646]: time="2025-09-06T00:07:01.387243014Z" level=info msg="CreateContainer within sandbox \"05a17f9462fa09c33df76eff04514c05d0f0167559d2bd957c58e63ac5c50a31\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Sep 6 00:07:01.425370 env[1646]: time="2025-09-06T00:07:01.425303318Z" level=info msg="CreateContainer within sandbox \"05a17f9462fa09c33df76eff04514c05d0f0167559d2bd957c58e63ac5c50a31\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"304d777be86749df628a94fe4cedf2c7ebf86e2b94091415fef504ab33064e31\"" Sep 6 00:07:01.430124 env[1646]: time="2025-09-06T00:07:01.430039016Z" level=info msg="StartContainer for \"304d777be86749df628a94fe4cedf2c7ebf86e2b94091415fef504ab33064e31\"" Sep 6 00:07:01.496155 systemd[1]: Started cri-containerd-304d777be86749df628a94fe4cedf2c7ebf86e2b94091415fef504ab33064e31.scope. Sep 6 00:07:01.641000 audit[5495]: AVC avc: denied { perfmon } for pid=5495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:07:01.641000 audit[5495]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4491 pid=5495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:01.641000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330346437373762653836373439646636323861393466653463656466 Sep 6 00:07:01.642000 audit[5495]: AVC avc: denied { bpf } for pid=5495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:07:01.642000 audit[5495]: AVC avc: denied { bpf } for pid=5495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:07:01.642000 audit[5495]: AVC avc: denied { bpf } for pid=5495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:07:01.642000 audit[5495]: AVC avc: denied { perfmon } for pid=5495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:07:01.642000 audit[5495]: AVC avc: denied { perfmon } for pid=5495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:07:01.642000 audit[5495]: AVC avc: denied { perfmon } for pid=5495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:07:01.642000 audit[5495]: AVC avc: denied { perfmon } for pid=5495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:07:01.642000 audit[5495]: AVC avc: denied { perfmon } for pid=5495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:07:01.642000 audit[5495]: AVC avc: denied { bpf } for pid=5495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:07:01.642000 audit[5495]: AVC avc: denied { bpf } for pid=5495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:07:01.642000 audit: BPF prog-id=234 op=LOAD Sep 6 00:07:01.642000 audit[5495]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4491 pid=5495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:01.642000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330346437373762653836373439646636323861393466653463656466 Sep 6 00:07:01.642000 audit[5495]: AVC avc: denied { bpf } for pid=5495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:07:01.642000 audit[5495]: AVC avc: denied { bpf } for pid=5495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:07:01.642000 audit[5495]: AVC avc: denied { perfmon } for pid=5495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:07:01.642000 audit[5495]: AVC avc: denied { perfmon } for pid=5495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:07:01.642000 audit[5495]: AVC avc: denied { perfmon } for pid=5495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:07:01.642000 audit[5495]: AVC avc: denied { perfmon } for pid=5495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:07:01.642000 audit[5495]: AVC avc: denied { perfmon } for pid=5495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:07:01.642000 audit[5495]: AVC avc: denied { bpf } for pid=5495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:07:01.642000 audit[5495]: AVC avc: denied { bpf } for pid=5495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:07:01.642000 audit: BPF prog-id=235 op=LOAD Sep 6 00:07:01.642000 audit[5495]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4491 pid=5495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:01.642000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330346437373762653836373439646636323861393466653463656466 Sep 6 00:07:01.642000 audit: BPF prog-id=235 op=UNLOAD Sep 6 00:07:01.642000 audit: BPF prog-id=234 op=UNLOAD Sep 6 00:07:01.642000 audit[5495]: AVC avc: denied { bpf } for pid=5495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:07:01.642000 audit[5495]: AVC avc: denied { bpf } for pid=5495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:07:01.642000 audit[5495]: AVC avc: denied { bpf } for pid=5495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:07:01.642000 audit[5495]: AVC avc: denied { perfmon } for pid=5495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:07:01.642000 audit[5495]: AVC avc: denied { perfmon } for pid=5495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:07:01.642000 audit[5495]: AVC avc: denied { perfmon } for pid=5495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:07:01.642000 audit[5495]: AVC avc: denied { perfmon } for pid=5495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:07:01.642000 audit[5495]: AVC avc: denied { perfmon } for pid=5495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:07:01.642000 audit[5495]: AVC avc: denied { bpf } for pid=5495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:07:01.642000 audit[5495]: AVC avc: denied { bpf } for pid=5495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:07:01.642000 audit: BPF prog-id=236 op=LOAD Sep 6 00:07:01.642000 audit[5495]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4491 pid=5495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:01.642000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330346437373762653836373439646636323861393466653463656466 Sep 6 00:07:01.700382 env[1646]: time="2025-09-06T00:07:01.700297301Z" level=info msg="StartContainer for \"304d777be86749df628a94fe4cedf2c7ebf86e2b94091415fef504ab33064e31\" returns successfully" Sep 6 00:07:02.253092 kubelet[2752]: I0906 00:07:02.253025 2752 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 6 00:07:02.254136 kubelet[2752]: I0906 00:07:02.254039 2752 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 6 00:07:02.602279 kubelet[2752]: I0906 00:07:02.602217 2752 csi_plugin.go:106] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Sep 6 00:07:02.602513 kubelet[2752]: I0906 00:07:02.602299 2752 csi_plugin.go:119] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Sep 6 00:07:02.966000 audit[5456]: AVC avc: denied { watch } for pid=5456 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_00_06_24.1764394552/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c563,c857 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c563,c857 tclass=file permissive=0 Sep 6 00:07:02.966000 audit[5456]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400065d5c0 a2=fc6 a3=0 items=0 ppid=4937 pid=5456 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c563,c857 key=(null) Sep 6 00:07:02.966000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 00:07:03.038649 kubelet[2752]: I0906 00:07:03.038539 2752 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-t8r6b" podStartSLOduration=31.150158443 podStartE2EDuration="52.038514611s" podCreationTimestamp="2025-09-06 00:06:11 +0000 UTC" firstStartedPulling="2025-09-06 00:06:40.492435912 +0000 UTC m=+71.366886230" lastFinishedPulling="2025-09-06 00:07:01.38079208 +0000 UTC m=+92.255242398" observedRunningTime="2025-09-06 00:07:02.292598485 +0000 UTC m=+93.167048803" watchObservedRunningTime="2025-09-06 00:07:03.038514611 +0000 UTC m=+93.912964941" Sep 6 00:07:03.093000 audit[5524]: NETFILTER_CFG table=filter:128 family=2 entries=11 op=nft_register_rule pid=5524 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:07:03.093000 audit[5524]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffcdea4a10 a2=0 a3=1 items=0 ppid=2863 pid=5524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:03.093000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:07:03.100000 audit[5524]: NETFILTER_CFG table=nat:129 family=2 entries=29 op=nft_register_chain pid=5524 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:07:03.100000 audit[5524]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffcdea4a10 a2=0 a3=1 items=0 ppid=2863 pid=5524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:03.100000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:07:03.915000 audit[5414]: AVC avc: denied { watch } for pid=5414 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_00_06_24.3994929176/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c824,c837 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c824,c837 tclass=file permissive=0 Sep 6 00:07:03.915000 audit[5414]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40006a6c00 a2=fc6 a3=0 items=0 ppid=4974 pid=5414 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c824,c837 key=(null) Sep 6 00:07:03.915000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 00:07:04.083000 audit[5528]: NETFILTER_CFG table=filter:130 family=2 entries=10 op=nft_register_rule pid=5528 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:07:04.083000 audit[5528]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffff35bd7f0 a2=0 a3=1 items=0 ppid=2863 pid=5528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:04.083000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:07:04.099000 audit[5528]: NETFILTER_CFG table=nat:131 family=2 entries=36 op=nft_register_chain pid=5528 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:07:04.099000 audit[5528]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12004 a0=3 a1=fffff35bd7f0 a2=0 a3=1 items=0 ppid=2863 pid=5528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:04.099000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:07:04.104587 systemd[1]: Started sshd@12-172.31.29.17:22-147.75.109.163:44812.service. Sep 6 00:07:04.103000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.29.17:22-147.75.109.163:44812 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:04.314000 audit[5530]: USER_ACCT pid=5530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:04.315855 sshd[5530]: Accepted publickey for core from 147.75.109.163 port 44812 ssh2: RSA SHA256:CT8P9x8s4J0T70k8+LLVTP4XjE3e1SNW15vyou+QijI Sep 6 00:07:04.318707 kernel: kauditd_printk_skb: 178 callbacks suppressed Sep 6 00:07:04.318859 kernel: audit: type=1101 audit(1757117224.314:1533): pid=5530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:04.327000 audit[5530]: CRED_ACQ pid=5530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:04.339414 kernel: audit: type=1103 audit(1757117224.327:1534): pid=5530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:04.340489 sshd[5530]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:07:04.351147 kernel: audit: type=1006 audit(1757117224.327:1535): pid=5530 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Sep 6 00:07:04.327000 audit[5530]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd957be20 a2=3 a3=1 items=0 ppid=1 pid=5530 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:04.362438 kernel: audit: type=1300 audit(1757117224.327:1535): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd957be20 a2=3 a3=1 items=0 ppid=1 pid=5530 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:04.327000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:07:04.370937 kernel: audit: type=1327 audit(1757117224.327:1535): proctitle=737368643A20636F7265205B707269765D Sep 6 00:07:04.370220 systemd-logind[1634]: New session 13 of user core. Sep 6 00:07:04.372654 systemd[1]: Started session-13.scope. Sep 6 00:07:04.392000 audit[5530]: USER_START pid=5530 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:04.406000 audit[5532]: CRED_ACQ pid=5532 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:04.418151 kernel: audit: type=1105 audit(1757117224.392:1536): pid=5530 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:04.418358 kernel: audit: type=1103 audit(1757117224.406:1537): pid=5532 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:04.751785 sshd[5530]: pam_unix(sshd:session): session closed for user core Sep 6 00:07:04.752000 audit[5530]: USER_END pid=5530 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:04.753000 audit[5530]: CRED_DISP pid=5530 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:04.769542 systemd[1]: sshd@12-172.31.29.17:22-147.75.109.163:44812.service: Deactivated successfully. Sep 6 00:07:04.770919 systemd[1]: session-13.scope: Deactivated successfully. Sep 6 00:07:04.778804 kernel: audit: type=1106 audit(1757117224.752:1538): pid=5530 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:04.778996 kernel: audit: type=1104 audit(1757117224.753:1539): pid=5530 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:04.779088 systemd-logind[1634]: Session 13 logged out. Waiting for processes to exit. Sep 6 00:07:04.783309 systemd-logind[1634]: Removed session 13. Sep 6 00:07:04.768000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.29.17:22-147.75.109.163:44812 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:04.798195 kernel: audit: type=1131 audit(1757117224.768:1540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.29.17:22-147.75.109.163:44812 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:04.912980 systemd[1]: run-containerd-runc-k8s.io-c6a2acb69a70a3ae65c19c181429a477a85838184c46b1159dd7548b48321083-runc.jDvqfG.mount: Deactivated successfully. Sep 6 00:07:09.780947 systemd[1]: Started sshd@13-172.31.29.17:22-147.75.109.163:44818.service. Sep 6 00:07:09.781000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.29.17:22-147.75.109.163:44818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:09.795166 kernel: audit: type=1130 audit(1757117229.781:1541): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.29.17:22-147.75.109.163:44818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:09.967000 audit[5571]: USER_ACCT pid=5571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:09.970407 sshd[5571]: Accepted publickey for core from 147.75.109.163 port 44818 ssh2: RSA SHA256:CT8P9x8s4J0T70k8+LLVTP4XjE3e1SNW15vyou+QijI Sep 6 00:07:09.981166 kernel: audit: type=1101 audit(1757117229.967:1542): pid=5571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:09.979000 audit[5571]: CRED_ACQ pid=5571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:09.992568 sshd[5571]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:07:09.999147 kernel: audit: type=1103 audit(1757117229.979:1543): pid=5571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:09.999251 kernel: audit: type=1006 audit(1757117229.980:1544): pid=5571 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Sep 6 00:07:09.980000 audit[5571]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdf368250 a2=3 a3=1 items=0 ppid=1 pid=5571 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:10.010611 kernel: audit: type=1300 audit(1757117229.980:1544): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdf368250 a2=3 a3=1 items=0 ppid=1 pid=5571 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:09.980000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:07:10.017437 kernel: audit: type=1327 audit(1757117229.980:1544): proctitle=737368643A20636F7265205B707269765D Sep 6 00:07:10.026331 systemd-logind[1634]: New session 14 of user core. Sep 6 00:07:10.028458 systemd[1]: Started session-14.scope. Sep 6 00:07:10.038000 audit[5571]: USER_START pid=5571 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:10.052318 kernel: audit: type=1105 audit(1757117230.038:1545): pid=5571 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:10.052472 kernel: audit: type=1103 audit(1757117230.051:1546): pid=5573 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:10.051000 audit[5573]: CRED_ACQ pid=5573 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:10.333421 sshd[5571]: pam_unix(sshd:session): session closed for user core Sep 6 00:07:10.335000 audit[5571]: USER_END pid=5571 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:10.348843 systemd[1]: sshd@13-172.31.29.17:22-147.75.109.163:44818.service: Deactivated successfully. Sep 6 00:07:10.351720 systemd[1]: session-14.scope: Deactivated successfully. Sep 6 00:07:10.335000 audit[5571]: CRED_DISP pid=5571 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:10.353098 systemd-logind[1634]: Session 14 logged out. Waiting for processes to exit. Sep 6 00:07:10.361989 kernel: audit: type=1106 audit(1757117230.335:1547): pid=5571 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:10.362253 kernel: audit: type=1104 audit(1757117230.335:1548): pid=5571 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:10.348000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.29.17:22-147.75.109.163:44818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:10.363387 systemd-logind[1634]: Removed session 14. Sep 6 00:07:15.365550 systemd[1]: Started sshd@14-172.31.29.17:22-147.75.109.163:47402.service. Sep 6 00:07:15.365000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.29.17:22-147.75.109.163:47402 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:15.368657 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 00:07:15.368965 kernel: audit: type=1130 audit(1757117235.365:1550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.29.17:22-147.75.109.163:47402 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:15.569000 audit[5590]: USER_ACCT pid=5590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:15.576823 sshd[5590]: Accepted publickey for core from 147.75.109.163 port 47402 ssh2: RSA SHA256:CT8P9x8s4J0T70k8+LLVTP4XjE3e1SNW15vyou+QijI Sep 6 00:07:15.585165 kernel: audit: type=1101 audit(1757117235.569:1551): pid=5590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:15.586363 sshd[5590]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:07:15.584000 audit[5590]: CRED_ACQ pid=5590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:15.602841 kernel: audit: type=1103 audit(1757117235.584:1552): pid=5590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:15.603010 kernel: audit: type=1006 audit(1757117235.584:1553): pid=5590 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Sep 6 00:07:15.584000 audit[5590]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe0275ba0 a2=3 a3=1 items=0 ppid=1 pid=5590 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:15.613965 kernel: audit: type=1300 audit(1757117235.584:1553): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe0275ba0 a2=3 a3=1 items=0 ppid=1 pid=5590 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:15.584000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:07:15.618327 kernel: audit: type=1327 audit(1757117235.584:1553): proctitle=737368643A20636F7265205B707269765D Sep 6 00:07:15.624034 systemd-logind[1634]: New session 15 of user core. Sep 6 00:07:15.625775 systemd[1]: Started session-15.scope. Sep 6 00:07:15.634000 audit[5590]: USER_START pid=5590 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:15.647264 kernel: audit: type=1105 audit(1757117235.634:1554): pid=5590 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:15.646000 audit[5592]: CRED_ACQ pid=5592 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:15.658167 kernel: audit: type=1103 audit(1757117235.646:1555): pid=5592 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:15.923636 sshd[5590]: pam_unix(sshd:session): session closed for user core Sep 6 00:07:15.925000 audit[5590]: USER_END pid=5590 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:15.929221 systemd[1]: session-15.scope: Deactivated successfully. Sep 6 00:07:15.930701 systemd[1]: sshd@14-172.31.29.17:22-147.75.109.163:47402.service: Deactivated successfully. Sep 6 00:07:15.925000 audit[5590]: CRED_DISP pid=5590 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:15.947609 kernel: audit: type=1106 audit(1757117235.925:1556): pid=5590 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:15.947842 kernel: audit: type=1104 audit(1757117235.925:1557): pid=5590 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:15.947841 systemd-logind[1634]: Session 15 logged out. Waiting for processes to exit. Sep 6 00:07:15.925000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.29.17:22-147.75.109.163:47402 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:15.950335 systemd-logind[1634]: Removed session 15. Sep 6 00:07:17.199266 systemd[1]: run-containerd-runc-k8s.io-a85560e1fb8d918fabc51561572632b319e3a7ebe13e9174987b545b8d9988eb-runc.HpoeSk.mount: Deactivated successfully. Sep 6 00:07:17.713004 systemd[1]: run-containerd-runc-k8s.io-a85560e1fb8d918fabc51561572632b319e3a7ebe13e9174987b545b8d9988eb-runc.5dxtYO.mount: Deactivated successfully. Sep 6 00:07:20.955580 systemd[1]: Started sshd@15-172.31.29.17:22-147.75.109.163:44764.service. Sep 6 00:07:20.955000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.29.17:22-147.75.109.163:44764 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:20.959188 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 00:07:20.959351 kernel: audit: type=1130 audit(1757117240.955:1559): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.29.17:22-147.75.109.163:44764 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:21.139000 audit[5649]: USER_ACCT pid=5649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:21.140685 sshd[5649]: Accepted publickey for core from 147.75.109.163 port 44764 ssh2: RSA SHA256:CT8P9x8s4J0T70k8+LLVTP4XjE3e1SNW15vyou+QijI Sep 6 00:07:21.147226 sshd[5649]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:07:21.145000 audit[5649]: CRED_ACQ pid=5649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:21.160734 kernel: audit: type=1101 audit(1757117241.139:1560): pid=5649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:21.160859 kernel: audit: type=1103 audit(1757117241.145:1561): pid=5649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:21.167367 kernel: audit: type=1006 audit(1757117241.145:1562): pid=5649 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Sep 6 00:07:21.145000 audit[5649]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe5a86840 a2=3 a3=1 items=0 ppid=1 pid=5649 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:21.178246 kernel: audit: type=1300 audit(1757117241.145:1562): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe5a86840 a2=3 a3=1 items=0 ppid=1 pid=5649 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:21.145000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:07:21.182230 kernel: audit: type=1327 audit(1757117241.145:1562): proctitle=737368643A20636F7265205B707269765D Sep 6 00:07:21.187284 systemd-logind[1634]: New session 16 of user core. Sep 6 00:07:21.189382 systemd[1]: Started session-16.scope. Sep 6 00:07:21.198000 audit[5649]: USER_START pid=5649 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:21.201000 audit[5651]: CRED_ACQ pid=5651 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:21.220693 kernel: audit: type=1105 audit(1757117241.198:1563): pid=5649 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:21.220792 kernel: audit: type=1103 audit(1757117241.201:1564): pid=5651 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:21.475761 sshd[5649]: pam_unix(sshd:session): session closed for user core Sep 6 00:07:21.477000 audit[5649]: USER_END pid=5649 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:21.477000 audit[5649]: CRED_DISP pid=5649 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:21.490481 systemd[1]: sshd@15-172.31.29.17:22-147.75.109.163:44764.service: Deactivated successfully. Sep 6 00:07:21.491744 systemd[1]: session-16.scope: Deactivated successfully. Sep 6 00:07:21.494553 systemd-logind[1634]: Session 16 logged out. Waiting for processes to exit. Sep 6 00:07:21.501994 kernel: audit: type=1106 audit(1757117241.477:1565): pid=5649 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:21.502151 kernel: audit: type=1104 audit(1757117241.477:1566): pid=5649 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:21.488000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.29.17:22-147.75.109.163:44764 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:21.508148 systemd[1]: Started sshd@16-172.31.29.17:22-147.75.109.163:44766.service. Sep 6 00:07:21.507000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.29.17:22-147.75.109.163:44766 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:21.511316 systemd-logind[1634]: Removed session 16. Sep 6 00:07:21.689000 audit[5661]: USER_ACCT pid=5661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:21.690457 sshd[5661]: Accepted publickey for core from 147.75.109.163 port 44766 ssh2: RSA SHA256:CT8P9x8s4J0T70k8+LLVTP4XjE3e1SNW15vyou+QijI Sep 6 00:07:21.691000 audit[5661]: CRED_ACQ pid=5661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:21.691000 audit[5661]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffca8c56e0 a2=3 a3=1 items=0 ppid=1 pid=5661 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:21.691000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:07:21.693157 sshd[5661]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:07:21.701247 systemd-logind[1634]: New session 17 of user core. Sep 6 00:07:21.702292 systemd[1]: Started session-17.scope. Sep 6 00:07:21.711000 audit[5661]: USER_START pid=5661 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:21.714000 audit[5663]: CRED_ACQ pid=5663 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:21.872000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6764 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:07:21.872000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400234b5c0 a2=fc6 a3=0 items=0 ppid=2249 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 key=(null) Sep 6 00:07:21.872000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:07:21.884000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:07:21.884000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40015dea80 a2=fc6 a3=0 items=0 ppid=2249 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 key=(null) Sep 6 00:07:21.884000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:07:23.890037 sshd[5661]: pam_unix(sshd:session): session closed for user core Sep 6 00:07:23.891000 audit[5661]: USER_END pid=5661 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:23.891000 audit[5661]: CRED_DISP pid=5661 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:23.895000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.29.17:22-147.75.109.163:44766 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:23.895651 systemd-logind[1634]: Session 17 logged out. Waiting for processes to exit. Sep 6 00:07:23.896045 systemd[1]: sshd@16-172.31.29.17:22-147.75.109.163:44766.service: Deactivated successfully. Sep 6 00:07:23.897550 systemd[1]: session-17.scope: Deactivated successfully. Sep 6 00:07:23.899741 systemd-logind[1634]: Removed session 17. Sep 6 00:07:23.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.29.17:22-147.75.109.163:44776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:23.917500 systemd[1]: Started sshd@17-172.31.29.17:22-147.75.109.163:44776.service. Sep 6 00:07:24.101000 audit[5673]: USER_ACCT pid=5673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:24.103362 sshd[5673]: Accepted publickey for core from 147.75.109.163 port 44776 ssh2: RSA SHA256:CT8P9x8s4J0T70k8+LLVTP4XjE3e1SNW15vyou+QijI Sep 6 00:07:24.104000 audit[5673]: CRED_ACQ pid=5673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:24.105000 audit[5673]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdb826160 a2=3 a3=1 items=0 ppid=1 pid=5673 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:24.105000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:07:24.107456 sshd[5673]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:07:24.119511 systemd[1]: Started session-18.scope. Sep 6 00:07:24.120517 systemd-logind[1634]: New session 18 of user core. Sep 6 00:07:24.129000 audit[5673]: USER_START pid=5673 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:24.132000 audit[5675]: CRED_ACQ pid=5675 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:25.111000 audit[2429]: AVC avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:07:25.111000 audit[2429]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=81 a1=4007d1d710 a2=fc6 a3=0 items=0 ppid=2279 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 key=(null) Sep 6 00:07:25.111000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 00:07:25.121000 audit[2429]: AVC avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6764 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:07:25.121000 audit[2429]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=81 a1=4007d1d770 a2=fc6 a3=0 items=0 ppid=2279 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 key=(null) Sep 6 00:07:25.121000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 00:07:25.151000 audit[2429]: AVC avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:07:25.151000 audit[2429]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=81 a1=4005a69b20 a2=fc6 a3=0 items=0 ppid=2279 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 key=(null) Sep 6 00:07:25.151000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 00:07:25.153000 audit[2429]: AVC avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6764 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:07:25.153000 audit[2429]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=81 a1=40045f23c0 a2=fc6 a3=0 items=0 ppid=2279 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 key=(null) Sep 6 00:07:25.153000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 00:07:25.272000 audit[2429]: AVC avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=6766 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:07:25.272000 audit[2429]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=81 a1=40045f32f0 a2=fc6 a3=0 items=0 ppid=2279 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 key=(null) Sep 6 00:07:25.272000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 00:07:25.273000 audit[2429]: AVC avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:07:25.273000 audit[2429]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=81 a1=4005a69f00 a2=fc6 a3=0 items=0 ppid=2279 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 key=(null) Sep 6 00:07:25.273000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 00:07:25.420000 audit[5696]: NETFILTER_CFG table=filter:132 family=2 entries=22 op=nft_register_rule pid=5696 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:07:25.420000 audit[5696]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12688 a0=3 a1=ffffdb9114b0 a2=0 a3=1 items=0 ppid=2863 pid=5696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:25.420000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:07:25.424000 audit[5696]: NETFILTER_CFG table=nat:133 family=2 entries=24 op=nft_register_rule pid=5696 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:07:25.424000 audit[5696]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffdb9114b0 a2=0 a3=1 items=0 ppid=2863 pid=5696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:25.424000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:07:25.446160 sshd[5673]: pam_unix(sshd:session): session closed for user core Sep 6 00:07:25.447000 audit[5673]: USER_END pid=5673 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:25.447000 audit[5673]: CRED_DISP pid=5673 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:25.452187 systemd-logind[1634]: Session 18 logged out. Waiting for processes to exit. Sep 6 00:07:25.452582 systemd[1]: session-18.scope: Deactivated successfully. Sep 6 00:07:25.454243 systemd[1]: sshd@17-172.31.29.17:22-147.75.109.163:44776.service: Deactivated successfully. Sep 6 00:07:25.453000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.29.17:22-147.75.109.163:44776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:25.457179 systemd-logind[1634]: Removed session 18. Sep 6 00:07:25.479281 systemd[1]: Started sshd@18-172.31.29.17:22-147.75.109.163:44786.service. Sep 6 00:07:25.478000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.29.17:22-147.75.109.163:44786 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:25.504000 audit[5699]: NETFILTER_CFG table=filter:134 family=2 entries=34 op=nft_register_rule pid=5699 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:07:25.504000 audit[5699]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12688 a0=3 a1=ffffca8555e0 a2=0 a3=1 items=0 ppid=2863 pid=5699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:25.504000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:07:25.518000 audit[5699]: NETFILTER_CFG table=nat:135 family=2 entries=24 op=nft_register_rule pid=5699 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:07:25.518000 audit[5699]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffca8555e0 a2=0 a3=1 items=0 ppid=2863 pid=5699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:25.518000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:07:25.669554 sshd[5701]: Accepted publickey for core from 147.75.109.163 port 44786 ssh2: RSA SHA256:CT8P9x8s4J0T70k8+LLVTP4XjE3e1SNW15vyou+QijI Sep 6 00:07:25.668000 audit[5701]: USER_ACCT pid=5701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:25.670000 audit[5701]: CRED_ACQ pid=5701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:25.670000 audit[5701]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2831f80 a2=3 a3=1 items=0 ppid=1 pid=5701 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:25.670000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:07:25.672205 sshd[5701]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:07:25.681492 systemd-logind[1634]: New session 19 of user core. Sep 6 00:07:25.682624 systemd[1]: Started session-19.scope. Sep 6 00:07:25.691000 audit[5701]: USER_START pid=5701 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:25.694000 audit[5703]: CRED_ACQ pid=5703 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:26.244537 sshd[5701]: pam_unix(sshd:session): session closed for user core Sep 6 00:07:26.249336 kernel: kauditd_printk_skb: 67 callbacks suppressed Sep 6 00:07:26.249528 kernel: audit: type=1106 audit(1757117246.246:1604): pid=5701 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:26.246000 audit[5701]: USER_END pid=5701 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:26.250807 systemd[1]: session-19.scope: Deactivated successfully. Sep 6 00:07:26.252785 systemd[1]: sshd@18-172.31.29.17:22-147.75.109.163:44786.service: Deactivated successfully. Sep 6 00:07:26.246000 audit[5701]: CRED_DISP pid=5701 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:26.262103 systemd-logind[1634]: Session 19 logged out. Waiting for processes to exit. Sep 6 00:07:26.264634 systemd-logind[1634]: Removed session 19. Sep 6 00:07:26.270325 kernel: audit: type=1104 audit(1757117246.246:1605): pid=5701 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:26.248000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.29.17:22-147.75.109.163:44786 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:26.280730 kernel: audit: type=1131 audit(1757117246.248:1606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.29.17:22-147.75.109.163:44786 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:26.282639 systemd[1]: Started sshd@19-172.31.29.17:22-147.75.109.163:44798.service. Sep 6 00:07:26.282000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.29.17:22-147.75.109.163:44798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:26.295339 kernel: audit: type=1130 audit(1757117246.282:1607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.29.17:22-147.75.109.163:44798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:26.477000 audit[5711]: USER_ACCT pid=5711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:26.480155 sshd[5711]: Accepted publickey for core from 147.75.109.163 port 44798 ssh2: RSA SHA256:CT8P9x8s4J0T70k8+LLVTP4XjE3e1SNW15vyou+QijI Sep 6 00:07:26.481861 sshd[5711]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:07:26.479000 audit[5711]: CRED_ACQ pid=5711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:26.493406 systemd[1]: Started session-20.scope. Sep 6 00:07:26.495200 systemd-logind[1634]: New session 20 of user core. Sep 6 00:07:26.498501 kernel: audit: type=1101 audit(1757117246.477:1608): pid=5711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:26.498658 kernel: audit: type=1103 audit(1757117246.479:1609): pid=5711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:26.502355 kernel: audit: type=1006 audit(1757117246.480:1610): pid=5711 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Sep 6 00:07:26.480000 audit[5711]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd198f540 a2=3 a3=1 items=0 ppid=1 pid=5711 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:26.519677 kernel: audit: type=1300 audit(1757117246.480:1610): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd198f540 a2=3 a3=1 items=0 ppid=1 pid=5711 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:26.480000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:07:26.524044 kernel: audit: type=1327 audit(1757117246.480:1610): proctitle=737368643A20636F7265205B707269765D Sep 6 00:07:26.520000 audit[5711]: USER_START pid=5711 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:26.536912 kernel: audit: type=1105 audit(1757117246.520:1611): pid=5711 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:26.536000 audit[5713]: CRED_ACQ pid=5713 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:26.781768 sshd[5711]: pam_unix(sshd:session): session closed for user core Sep 6 00:07:26.784000 audit[5711]: USER_END pid=5711 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:26.784000 audit[5711]: CRED_DISP pid=5711 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:26.788770 systemd-logind[1634]: Session 20 logged out. Waiting for processes to exit. Sep 6 00:07:26.790319 systemd[1]: sshd@19-172.31.29.17:22-147.75.109.163:44798.service: Deactivated successfully. Sep 6 00:07:26.791671 systemd[1]: session-20.scope: Deactivated successfully. Sep 6 00:07:26.789000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.29.17:22-147.75.109.163:44798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:26.793491 systemd-logind[1634]: Removed session 20. Sep 6 00:07:28.451000 audit[5743]: NETFILTER_CFG table=filter:136 family=2 entries=33 op=nft_register_rule pid=5743 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:07:28.451000 audit[5743]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffd8474450 a2=0 a3=1 items=0 ppid=2863 pid=5743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:28.451000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:07:28.463000 audit[5743]: NETFILTER_CFG table=nat:137 family=2 entries=31 op=nft_register_chain pid=5743 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:07:28.463000 audit[5743]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10884 a0=3 a1=ffffd8474450 a2=0 a3=1 items=0 ppid=2863 pid=5743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:28.463000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:07:29.402322 env[1646]: time="2025-09-06T00:07:29.401468245Z" level=info msg="StopPodSandbox for \"4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8\"" Sep 6 00:07:29.651542 env[1646]: 2025-09-06 00:07:29.519 [WARNING][5754] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--2jfmb-eth0", GenerateName:"calico-apiserver-6df8d98b58-", Namespace:"calico-apiserver", SelfLink:"", UID:"0ffda2a7-27c9-45ec-8bc5-704a343f8479", ResourceVersion:"1266", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 6, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6df8d98b58", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-29-17", ContainerID:"e5c6daadd585b1482ac71d80abecc384586aab19c1cdbbeca015ec2a518aedbe", Pod:"calico-apiserver-6df8d98b58-2jfmb", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.120.8/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali3862f3f99e4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:07:29.651542 env[1646]: 2025-09-06 00:07:29.519 [INFO][5754] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" Sep 6 00:07:29.651542 env[1646]: 2025-09-06 00:07:29.519 [INFO][5754] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" iface="eth0" netns="" Sep 6 00:07:29.651542 env[1646]: 2025-09-06 00:07:29.519 [INFO][5754] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" Sep 6 00:07:29.651542 env[1646]: 2025-09-06 00:07:29.519 [INFO][5754] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" Sep 6 00:07:29.651542 env[1646]: 2025-09-06 00:07:29.626 [INFO][5761] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" HandleID="k8s-pod-network.4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" Workload="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--2jfmb-eth0" Sep 6 00:07:29.651542 env[1646]: 2025-09-06 00:07:29.626 [INFO][5761] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:07:29.651542 env[1646]: 2025-09-06 00:07:29.626 [INFO][5761] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:07:29.651542 env[1646]: 2025-09-06 00:07:29.640 [WARNING][5761] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" HandleID="k8s-pod-network.4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" Workload="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--2jfmb-eth0" Sep 6 00:07:29.651542 env[1646]: 2025-09-06 00:07:29.640 [INFO][5761] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" HandleID="k8s-pod-network.4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" Workload="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--2jfmb-eth0" Sep 6 00:07:29.651542 env[1646]: 2025-09-06 00:07:29.643 [INFO][5761] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:07:29.651542 env[1646]: 2025-09-06 00:07:29.646 [INFO][5754] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" Sep 6 00:07:29.653885 env[1646]: time="2025-09-06T00:07:29.652582803Z" level=info msg="TearDown network for sandbox \"4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8\" successfully" Sep 6 00:07:29.654127 env[1646]: time="2025-09-06T00:07:29.654052678Z" level=info msg="StopPodSandbox for \"4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8\" returns successfully" Sep 6 00:07:29.655249 env[1646]: time="2025-09-06T00:07:29.655198009Z" level=info msg="RemovePodSandbox for \"4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8\"" Sep 6 00:07:29.655728 env[1646]: time="2025-09-06T00:07:29.655588710Z" level=info msg="Forcibly stopping sandbox \"4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8\"" Sep 6 00:07:29.868565 env[1646]: 2025-09-06 00:07:29.737 [WARNING][5776] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--2jfmb-eth0", GenerateName:"calico-apiserver-6df8d98b58-", Namespace:"calico-apiserver", SelfLink:"", UID:"0ffda2a7-27c9-45ec-8bc5-704a343f8479", ResourceVersion:"1266", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 6, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6df8d98b58", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-29-17", ContainerID:"e5c6daadd585b1482ac71d80abecc384586aab19c1cdbbeca015ec2a518aedbe", Pod:"calico-apiserver-6df8d98b58-2jfmb", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.120.8/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali3862f3f99e4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:07:29.868565 env[1646]: 2025-09-06 00:07:29.738 [INFO][5776] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" Sep 6 00:07:29.868565 env[1646]: 2025-09-06 00:07:29.738 [INFO][5776] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" iface="eth0" netns="" Sep 6 00:07:29.868565 env[1646]: 2025-09-06 00:07:29.738 [INFO][5776] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" Sep 6 00:07:29.868565 env[1646]: 2025-09-06 00:07:29.738 [INFO][5776] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" Sep 6 00:07:29.868565 env[1646]: 2025-09-06 00:07:29.841 [INFO][5784] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" HandleID="k8s-pod-network.4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" Workload="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--2jfmb-eth0" Sep 6 00:07:29.868565 env[1646]: 2025-09-06 00:07:29.841 [INFO][5784] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:07:29.868565 env[1646]: 2025-09-06 00:07:29.841 [INFO][5784] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:07:29.868565 env[1646]: 2025-09-06 00:07:29.858 [WARNING][5784] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" HandleID="k8s-pod-network.4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" Workload="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--2jfmb-eth0" Sep 6 00:07:29.868565 env[1646]: 2025-09-06 00:07:29.858 [INFO][5784] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" HandleID="k8s-pod-network.4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" Workload="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--2jfmb-eth0" Sep 6 00:07:29.868565 env[1646]: 2025-09-06 00:07:29.861 [INFO][5784] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:07:29.868565 env[1646]: 2025-09-06 00:07:29.864 [INFO][5776] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8" Sep 6 00:07:29.870086 env[1646]: time="2025-09-06T00:07:29.870002090Z" level=info msg="TearDown network for sandbox \"4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8\" successfully" Sep 6 00:07:29.878832 env[1646]: time="2025-09-06T00:07:29.878700943Z" level=info msg="RemovePodSandbox \"4a821e1699f758157f63264a7be68c7e809babb244d47fe504b1e2025e4567e8\" returns successfully" Sep 6 00:07:29.879969 env[1646]: time="2025-09-06T00:07:29.879899662Z" level=info msg="StopPodSandbox for \"e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714\"" Sep 6 00:07:29.990000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:07:29.990000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40023edec0 a2=fc6 a3=0 items=0 ppid=2249 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 key=(null) Sep 6 00:07:29.990000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:07:30.007000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:07:30.010000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:07:30.010000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40000ff940 a2=fc6 a3=0 items=0 ppid=2249 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 key=(null) Sep 6 00:07:30.010000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:07:30.010000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:07:30.010000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40006ca0e0 a2=fc6 a3=0 items=0 ppid=2249 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 key=(null) Sep 6 00:07:30.010000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:07:30.007000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400193c280 a2=fc6 a3=0 items=0 ppid=2249 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 key=(null) Sep 6 00:07:30.007000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:07:30.136448 env[1646]: 2025-09-06 00:07:29.959 [WARNING][5798] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--z8s4t-eth0", GenerateName:"calico-apiserver-6df8d98b58-", Namespace:"calico-apiserver", SelfLink:"", UID:"7191207d-0cc6-4bca-8195-a5e86eef3210", ResourceVersion:"1254", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 6, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6df8d98b58", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-29-17", ContainerID:"4dc6522f3282b8c8fe723b056384205daadf6e24b593fdfb11adb7152e4c62c9", Pod:"calico-apiserver-6df8d98b58-z8s4t", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.120.7/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1268f5399eb", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:07:30.136448 env[1646]: 2025-09-06 00:07:29.960 [INFO][5798] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" Sep 6 00:07:30.136448 env[1646]: 2025-09-06 00:07:29.960 [INFO][5798] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" iface="eth0" netns="" Sep 6 00:07:30.136448 env[1646]: 2025-09-06 00:07:29.960 [INFO][5798] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" Sep 6 00:07:30.136448 env[1646]: 2025-09-06 00:07:29.960 [INFO][5798] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" Sep 6 00:07:30.136448 env[1646]: 2025-09-06 00:07:30.111 [INFO][5805] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" HandleID="k8s-pod-network.e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" Workload="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--z8s4t-eth0" Sep 6 00:07:30.136448 env[1646]: 2025-09-06 00:07:30.112 [INFO][5805] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:07:30.136448 env[1646]: 2025-09-06 00:07:30.112 [INFO][5805] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:07:30.136448 env[1646]: 2025-09-06 00:07:30.127 [WARNING][5805] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" HandleID="k8s-pod-network.e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" Workload="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--z8s4t-eth0" Sep 6 00:07:30.136448 env[1646]: 2025-09-06 00:07:30.127 [INFO][5805] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" HandleID="k8s-pod-network.e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" Workload="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--z8s4t-eth0" Sep 6 00:07:30.136448 env[1646]: 2025-09-06 00:07:30.130 [INFO][5805] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:07:30.136448 env[1646]: 2025-09-06 00:07:30.133 [INFO][5798] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" Sep 6 00:07:30.137571 env[1646]: time="2025-09-06T00:07:30.137265184Z" level=info msg="TearDown network for sandbox \"e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714\" successfully" Sep 6 00:07:30.137571 env[1646]: time="2025-09-06T00:07:30.137323157Z" level=info msg="StopPodSandbox for \"e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714\" returns successfully" Sep 6 00:07:30.138151 env[1646]: time="2025-09-06T00:07:30.138052299Z" level=info msg="RemovePodSandbox for \"e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714\"" Sep 6 00:07:30.138325 env[1646]: time="2025-09-06T00:07:30.138142937Z" level=info msg="Forcibly stopping sandbox \"e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714\"" Sep 6 00:07:30.293077 env[1646]: 2025-09-06 00:07:30.213 [WARNING][5819] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--z8s4t-eth0", GenerateName:"calico-apiserver-6df8d98b58-", Namespace:"calico-apiserver", SelfLink:"", UID:"7191207d-0cc6-4bca-8195-a5e86eef3210", ResourceVersion:"1254", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 6, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6df8d98b58", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-29-17", ContainerID:"4dc6522f3282b8c8fe723b056384205daadf6e24b593fdfb11adb7152e4c62c9", Pod:"calico-apiserver-6df8d98b58-z8s4t", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.120.7/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1268f5399eb", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:07:30.293077 env[1646]: 2025-09-06 00:07:30.213 [INFO][5819] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" Sep 6 00:07:30.293077 env[1646]: 2025-09-06 00:07:30.213 [INFO][5819] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" iface="eth0" netns="" Sep 6 00:07:30.293077 env[1646]: 2025-09-06 00:07:30.213 [INFO][5819] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" Sep 6 00:07:30.293077 env[1646]: 2025-09-06 00:07:30.213 [INFO][5819] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" Sep 6 00:07:30.293077 env[1646]: 2025-09-06 00:07:30.265 [INFO][5827] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" HandleID="k8s-pod-network.e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" Workload="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--z8s4t-eth0" Sep 6 00:07:30.293077 env[1646]: 2025-09-06 00:07:30.266 [INFO][5827] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:07:30.293077 env[1646]: 2025-09-06 00:07:30.266 [INFO][5827] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:07:30.293077 env[1646]: 2025-09-06 00:07:30.280 [WARNING][5827] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" HandleID="k8s-pod-network.e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" Workload="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--z8s4t-eth0" Sep 6 00:07:30.293077 env[1646]: 2025-09-06 00:07:30.281 [INFO][5827] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" HandleID="k8s-pod-network.e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" Workload="ip--172--31--29--17-k8s-calico--apiserver--6df8d98b58--z8s4t-eth0" Sep 6 00:07:30.293077 env[1646]: 2025-09-06 00:07:30.284 [INFO][5827] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:07:30.293077 env[1646]: 2025-09-06 00:07:30.287 [INFO][5819] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714" Sep 6 00:07:30.293077 env[1646]: time="2025-09-06T00:07:30.291077922Z" level=info msg="TearDown network for sandbox \"e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714\" successfully" Sep 6 00:07:30.298767 env[1646]: time="2025-09-06T00:07:30.298665340Z" level=info msg="RemovePodSandbox \"e0af4fd343e958d5d2c164f5a982a0b57b6d7f521c6b8bfce5761a9273a41714\" returns successfully" Sep 6 00:07:30.299760 env[1646]: time="2025-09-06T00:07:30.299673834Z" level=info msg="StopPodSandbox for \"10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2\"" Sep 6 00:07:30.461857 env[1646]: 2025-09-06 00:07:30.389 [WARNING][5841] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--29--17-k8s-calico--kube--controllers--747d8dffd6--vmfb7-eth0", GenerateName:"calico-kube-controllers-747d8dffd6-", Namespace:"calico-system", SelfLink:"", UID:"a3b5e26a-8037-44a1-b60c-ca22c74c201c", ResourceVersion:"1125", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 6, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"747d8dffd6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-29-17", ContainerID:"7819d251e35ecfa581cd8cad03696c31a17a4704d7eb7451d57138ce66099ec1", Pod:"calico-kube-controllers-747d8dffd6-vmfb7", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.120.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calie8fe5890349", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:07:30.461857 env[1646]: 2025-09-06 00:07:30.390 [INFO][5841] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" Sep 6 00:07:30.461857 env[1646]: 2025-09-06 00:07:30.390 [INFO][5841] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" iface="eth0" netns="" Sep 6 00:07:30.461857 env[1646]: 2025-09-06 00:07:30.390 [INFO][5841] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" Sep 6 00:07:30.461857 env[1646]: 2025-09-06 00:07:30.390 [INFO][5841] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" Sep 6 00:07:30.461857 env[1646]: 2025-09-06 00:07:30.435 [INFO][5848] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" HandleID="k8s-pod-network.10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" Workload="ip--172--31--29--17-k8s-calico--kube--controllers--747d8dffd6--vmfb7-eth0" Sep 6 00:07:30.461857 env[1646]: 2025-09-06 00:07:30.435 [INFO][5848] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:07:30.461857 env[1646]: 2025-09-06 00:07:30.435 [INFO][5848] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:07:30.461857 env[1646]: 2025-09-06 00:07:30.450 [WARNING][5848] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" HandleID="k8s-pod-network.10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" Workload="ip--172--31--29--17-k8s-calico--kube--controllers--747d8dffd6--vmfb7-eth0" Sep 6 00:07:30.461857 env[1646]: 2025-09-06 00:07:30.450 [INFO][5848] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" HandleID="k8s-pod-network.10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" Workload="ip--172--31--29--17-k8s-calico--kube--controllers--747d8dffd6--vmfb7-eth0" Sep 6 00:07:30.461857 env[1646]: 2025-09-06 00:07:30.453 [INFO][5848] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:07:30.461857 env[1646]: 2025-09-06 00:07:30.457 [INFO][5841] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" Sep 6 00:07:30.463312 env[1646]: time="2025-09-06T00:07:30.461943043Z" level=info msg="TearDown network for sandbox \"10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2\" successfully" Sep 6 00:07:30.463312 env[1646]: time="2025-09-06T00:07:30.462034556Z" level=info msg="StopPodSandbox for \"10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2\" returns successfully" Sep 6 00:07:30.464298 env[1646]: time="2025-09-06T00:07:30.464234091Z" level=info msg="RemovePodSandbox for \"10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2\"" Sep 6 00:07:30.464835 env[1646]: time="2025-09-06T00:07:30.464749702Z" level=info msg="Forcibly stopping sandbox \"10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2\"" Sep 6 00:07:30.621679 env[1646]: 2025-09-06 00:07:30.550 [WARNING][5863] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--29--17-k8s-calico--kube--controllers--747d8dffd6--vmfb7-eth0", GenerateName:"calico-kube-controllers-747d8dffd6-", Namespace:"calico-system", SelfLink:"", UID:"a3b5e26a-8037-44a1-b60c-ca22c74c201c", ResourceVersion:"1125", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 6, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"747d8dffd6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-29-17", ContainerID:"7819d251e35ecfa581cd8cad03696c31a17a4704d7eb7451d57138ce66099ec1", Pod:"calico-kube-controllers-747d8dffd6-vmfb7", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.120.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calie8fe5890349", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:07:30.621679 env[1646]: 2025-09-06 00:07:30.551 [INFO][5863] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" Sep 6 00:07:30.621679 env[1646]: 2025-09-06 00:07:30.551 [INFO][5863] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" iface="eth0" netns="" Sep 6 00:07:30.621679 env[1646]: 2025-09-06 00:07:30.551 [INFO][5863] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" Sep 6 00:07:30.621679 env[1646]: 2025-09-06 00:07:30.551 [INFO][5863] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" Sep 6 00:07:30.621679 env[1646]: 2025-09-06 00:07:30.593 [INFO][5870] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" HandleID="k8s-pod-network.10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" Workload="ip--172--31--29--17-k8s-calico--kube--controllers--747d8dffd6--vmfb7-eth0" Sep 6 00:07:30.621679 env[1646]: 2025-09-06 00:07:30.593 [INFO][5870] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:07:30.621679 env[1646]: 2025-09-06 00:07:30.593 [INFO][5870] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:07:30.621679 env[1646]: 2025-09-06 00:07:30.608 [WARNING][5870] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" HandleID="k8s-pod-network.10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" Workload="ip--172--31--29--17-k8s-calico--kube--controllers--747d8dffd6--vmfb7-eth0" Sep 6 00:07:30.621679 env[1646]: 2025-09-06 00:07:30.608 [INFO][5870] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" HandleID="k8s-pod-network.10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" Workload="ip--172--31--29--17-k8s-calico--kube--controllers--747d8dffd6--vmfb7-eth0" Sep 6 00:07:30.621679 env[1646]: 2025-09-06 00:07:30.610 [INFO][5870] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:07:30.621679 env[1646]: 2025-09-06 00:07:30.614 [INFO][5863] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2" Sep 6 00:07:30.623966 env[1646]: time="2025-09-06T00:07:30.623893178Z" level=info msg="TearDown network for sandbox \"10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2\" successfully" Sep 6 00:07:30.638784 env[1646]: time="2025-09-06T00:07:30.638652318Z" level=info msg="RemovePodSandbox \"10cbde107f7502f4b53d518b15e9465feaa1cb33e86169b744f79763767663c2\" returns successfully" Sep 6 00:07:30.639944 env[1646]: time="2025-09-06T00:07:30.639897323Z" level=info msg="StopPodSandbox for \"d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78\"" Sep 6 00:07:30.815073 env[1646]: 2025-09-06 00:07:30.751 [WARNING][5886] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--29--17-k8s-coredns--674b8bbfcf--8tmgs-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"4cbde096-0468-49f9-9aa1-f35dc9847a16", ResourceVersion:"1174", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 5, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-29-17", ContainerID:"c83c81c7d8bba98657dde9226a791ae534da6ed796b0bd9c532d823a088f8eb4", Pod:"coredns-674b8bbfcf-8tmgs", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.120.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0477a9ab9e6", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:07:30.815073 env[1646]: 2025-09-06 00:07:30.752 [INFO][5886] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" Sep 6 00:07:30.815073 env[1646]: 2025-09-06 00:07:30.752 [INFO][5886] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" iface="eth0" netns="" Sep 6 00:07:30.815073 env[1646]: 2025-09-06 00:07:30.752 [INFO][5886] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" Sep 6 00:07:30.815073 env[1646]: 2025-09-06 00:07:30.752 [INFO][5886] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" Sep 6 00:07:30.815073 env[1646]: 2025-09-06 00:07:30.792 [INFO][5893] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" HandleID="k8s-pod-network.d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" Workload="ip--172--31--29--17-k8s-coredns--674b8bbfcf--8tmgs-eth0" Sep 6 00:07:30.815073 env[1646]: 2025-09-06 00:07:30.792 [INFO][5893] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:07:30.815073 env[1646]: 2025-09-06 00:07:30.792 [INFO][5893] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:07:30.815073 env[1646]: 2025-09-06 00:07:30.807 [WARNING][5893] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" HandleID="k8s-pod-network.d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" Workload="ip--172--31--29--17-k8s-coredns--674b8bbfcf--8tmgs-eth0" Sep 6 00:07:30.815073 env[1646]: 2025-09-06 00:07:30.807 [INFO][5893] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" HandleID="k8s-pod-network.d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" Workload="ip--172--31--29--17-k8s-coredns--674b8bbfcf--8tmgs-eth0" Sep 6 00:07:30.815073 env[1646]: 2025-09-06 00:07:30.809 [INFO][5893] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:07:30.815073 env[1646]: 2025-09-06 00:07:30.812 [INFO][5886] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" Sep 6 00:07:30.816135 env[1646]: time="2025-09-06T00:07:30.816055538Z" level=info msg="TearDown network for sandbox \"d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78\" successfully" Sep 6 00:07:30.816276 env[1646]: time="2025-09-06T00:07:30.816236813Z" level=info msg="StopPodSandbox for \"d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78\" returns successfully" Sep 6 00:07:30.817026 env[1646]: time="2025-09-06T00:07:30.816978183Z" level=info msg="RemovePodSandbox for \"d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78\"" Sep 6 00:07:30.817394 env[1646]: time="2025-09-06T00:07:30.817313336Z" level=info msg="Forcibly stopping sandbox \"d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78\"" Sep 6 00:07:30.947303 env[1646]: 2025-09-06 00:07:30.885 [WARNING][5908] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--29--17-k8s-coredns--674b8bbfcf--8tmgs-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"4cbde096-0468-49f9-9aa1-f35dc9847a16", ResourceVersion:"1174", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 5, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-29-17", ContainerID:"c83c81c7d8bba98657dde9226a791ae534da6ed796b0bd9c532d823a088f8eb4", Pod:"coredns-674b8bbfcf-8tmgs", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.120.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0477a9ab9e6", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:07:30.947303 env[1646]: 2025-09-06 00:07:30.885 [INFO][5908] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" Sep 6 00:07:30.947303 env[1646]: 2025-09-06 00:07:30.885 [INFO][5908] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" iface="eth0" netns="" Sep 6 00:07:30.947303 env[1646]: 2025-09-06 00:07:30.885 [INFO][5908] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" Sep 6 00:07:30.947303 env[1646]: 2025-09-06 00:07:30.885 [INFO][5908] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" Sep 6 00:07:30.947303 env[1646]: 2025-09-06 00:07:30.922 [INFO][5915] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" HandleID="k8s-pod-network.d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" Workload="ip--172--31--29--17-k8s-coredns--674b8bbfcf--8tmgs-eth0" Sep 6 00:07:30.947303 env[1646]: 2025-09-06 00:07:30.923 [INFO][5915] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:07:30.947303 env[1646]: 2025-09-06 00:07:30.923 [INFO][5915] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:07:30.947303 env[1646]: 2025-09-06 00:07:30.936 [WARNING][5915] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" HandleID="k8s-pod-network.d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" Workload="ip--172--31--29--17-k8s-coredns--674b8bbfcf--8tmgs-eth0" Sep 6 00:07:30.947303 env[1646]: 2025-09-06 00:07:30.936 [INFO][5915] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" HandleID="k8s-pod-network.d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" Workload="ip--172--31--29--17-k8s-coredns--674b8bbfcf--8tmgs-eth0" Sep 6 00:07:30.947303 env[1646]: 2025-09-06 00:07:30.939 [INFO][5915] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:07:30.947303 env[1646]: 2025-09-06 00:07:30.942 [INFO][5908] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78" Sep 6 00:07:30.948350 env[1646]: time="2025-09-06T00:07:30.948270624Z" level=info msg="TearDown network for sandbox \"d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78\" successfully" Sep 6 00:07:30.955656 env[1646]: time="2025-09-06T00:07:30.955572367Z" level=info msg="RemovePodSandbox \"d26a9f324577b9fdf2e2b128a975402ff87fc648f0e95a56920d7134d1cf5b78\" returns successfully" Sep 6 00:07:30.956396 env[1646]: time="2025-09-06T00:07:30.956332025Z" level=info msg="StopPodSandbox for \"22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b\"" Sep 6 00:07:31.081605 env[1646]: 2025-09-06 00:07:31.020 [WARNING][5929] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" WorkloadEndpoint="ip--172--31--29--17-k8s-whisker--7488f86fd4--b5kz9-eth0" Sep 6 00:07:31.081605 env[1646]: 2025-09-06 00:07:31.020 [INFO][5929] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" Sep 6 00:07:31.081605 env[1646]: 2025-09-06 00:07:31.020 [INFO][5929] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" iface="eth0" netns="" Sep 6 00:07:31.081605 env[1646]: 2025-09-06 00:07:31.020 [INFO][5929] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" Sep 6 00:07:31.081605 env[1646]: 2025-09-06 00:07:31.020 [INFO][5929] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" Sep 6 00:07:31.081605 env[1646]: 2025-09-06 00:07:31.058 [INFO][5937] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" HandleID="k8s-pod-network.22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" Workload="ip--172--31--29--17-k8s-whisker--7488f86fd4--b5kz9-eth0" Sep 6 00:07:31.081605 env[1646]: 2025-09-06 00:07:31.059 [INFO][5937] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:07:31.081605 env[1646]: 2025-09-06 00:07:31.059 [INFO][5937] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:07:31.081605 env[1646]: 2025-09-06 00:07:31.073 [WARNING][5937] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" HandleID="k8s-pod-network.22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" Workload="ip--172--31--29--17-k8s-whisker--7488f86fd4--b5kz9-eth0" Sep 6 00:07:31.081605 env[1646]: 2025-09-06 00:07:31.073 [INFO][5937] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" HandleID="k8s-pod-network.22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" Workload="ip--172--31--29--17-k8s-whisker--7488f86fd4--b5kz9-eth0" Sep 6 00:07:31.081605 env[1646]: 2025-09-06 00:07:31.075 [INFO][5937] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:07:31.081605 env[1646]: 2025-09-06 00:07:31.078 [INFO][5929] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" Sep 6 00:07:31.082483 env[1646]: time="2025-09-06T00:07:31.081644799Z" level=info msg="TearDown network for sandbox \"22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b\" successfully" Sep 6 00:07:31.082483 env[1646]: time="2025-09-06T00:07:31.081691852Z" level=info msg="StopPodSandbox for \"22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b\" returns successfully" Sep 6 00:07:31.082686 env[1646]: time="2025-09-06T00:07:31.082507132Z" level=info msg="RemovePodSandbox for \"22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b\"" Sep 6 00:07:31.082686 env[1646]: time="2025-09-06T00:07:31.082557005Z" level=info msg="Forcibly stopping sandbox \"22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b\"" Sep 6 00:07:31.208066 env[1646]: 2025-09-06 00:07:31.147 [WARNING][5951] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" WorkloadEndpoint="ip--172--31--29--17-k8s-whisker--7488f86fd4--b5kz9-eth0" Sep 6 00:07:31.208066 env[1646]: 2025-09-06 00:07:31.148 [INFO][5951] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" Sep 6 00:07:31.208066 env[1646]: 2025-09-06 00:07:31.148 [INFO][5951] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" iface="eth0" netns="" Sep 6 00:07:31.208066 env[1646]: 2025-09-06 00:07:31.148 [INFO][5951] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" Sep 6 00:07:31.208066 env[1646]: 2025-09-06 00:07:31.148 [INFO][5951] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" Sep 6 00:07:31.208066 env[1646]: 2025-09-06 00:07:31.184 [INFO][5958] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" HandleID="k8s-pod-network.22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" Workload="ip--172--31--29--17-k8s-whisker--7488f86fd4--b5kz9-eth0" Sep 6 00:07:31.208066 env[1646]: 2025-09-06 00:07:31.184 [INFO][5958] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:07:31.208066 env[1646]: 2025-09-06 00:07:31.185 [INFO][5958] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:07:31.208066 env[1646]: 2025-09-06 00:07:31.197 [WARNING][5958] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" HandleID="k8s-pod-network.22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" Workload="ip--172--31--29--17-k8s-whisker--7488f86fd4--b5kz9-eth0" Sep 6 00:07:31.208066 env[1646]: 2025-09-06 00:07:31.197 [INFO][5958] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" HandleID="k8s-pod-network.22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" Workload="ip--172--31--29--17-k8s-whisker--7488f86fd4--b5kz9-eth0" Sep 6 00:07:31.208066 env[1646]: 2025-09-06 00:07:31.200 [INFO][5958] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:07:31.208066 env[1646]: 2025-09-06 00:07:31.202 [INFO][5951] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b" Sep 6 00:07:31.208066 env[1646]: time="2025-09-06T00:07:31.205731684Z" level=info msg="TearDown network for sandbox \"22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b\" successfully" Sep 6 00:07:31.212540 env[1646]: time="2025-09-06T00:07:31.212479518Z" level=info msg="RemovePodSandbox \"22e7fe69bfb60e8fe768ddc1bc5af2cf3930cf41d53c23fd7b59c3c773c07f4b\" returns successfully" Sep 6 00:07:31.213386 env[1646]: time="2025-09-06T00:07:31.213330775Z" level=info msg="StopPodSandbox for \"9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1\"" Sep 6 00:07:31.383652 env[1646]: 2025-09-06 00:07:31.291 [WARNING][5972] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--29--17-k8s-coredns--674b8bbfcf--gb45h-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"f9b12e81-24af-41a3-9679-1c0d02641bbd", ResourceVersion:"1098", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 5, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-29-17", ContainerID:"1e48a464470aa581251b4c6ef2d4b8ddcf658110ce0bc0d0d07231176ebd7fd5", Pod:"coredns-674b8bbfcf-gb45h", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.120.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calidba50b7c16e", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:07:31.383652 env[1646]: 2025-09-06 00:07:31.291 [INFO][5972] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" Sep 6 00:07:31.383652 env[1646]: 2025-09-06 00:07:31.291 [INFO][5972] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" iface="eth0" netns="" Sep 6 00:07:31.383652 env[1646]: 2025-09-06 00:07:31.291 [INFO][5972] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" Sep 6 00:07:31.383652 env[1646]: 2025-09-06 00:07:31.291 [INFO][5972] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" Sep 6 00:07:31.383652 env[1646]: 2025-09-06 00:07:31.343 [INFO][5979] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" HandleID="k8s-pod-network.9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" Workload="ip--172--31--29--17-k8s-coredns--674b8bbfcf--gb45h-eth0" Sep 6 00:07:31.383652 env[1646]: 2025-09-06 00:07:31.344 [INFO][5979] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:07:31.383652 env[1646]: 2025-09-06 00:07:31.344 [INFO][5979] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:07:31.383652 env[1646]: 2025-09-06 00:07:31.367 [WARNING][5979] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" HandleID="k8s-pod-network.9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" Workload="ip--172--31--29--17-k8s-coredns--674b8bbfcf--gb45h-eth0" Sep 6 00:07:31.383652 env[1646]: 2025-09-06 00:07:31.367 [INFO][5979] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" HandleID="k8s-pod-network.9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" Workload="ip--172--31--29--17-k8s-coredns--674b8bbfcf--gb45h-eth0" Sep 6 00:07:31.383652 env[1646]: 2025-09-06 00:07:31.374 [INFO][5979] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:07:31.383652 env[1646]: 2025-09-06 00:07:31.380 [INFO][5972] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" Sep 6 00:07:31.384719 env[1646]: time="2025-09-06T00:07:31.383701366Z" level=info msg="TearDown network for sandbox \"9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1\" successfully" Sep 6 00:07:31.384719 env[1646]: time="2025-09-06T00:07:31.383758018Z" level=info msg="StopPodSandbox for \"9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1\" returns successfully" Sep 6 00:07:31.385707 env[1646]: time="2025-09-06T00:07:31.385655031Z" level=info msg="RemovePodSandbox for \"9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1\"" Sep 6 00:07:31.385974 env[1646]: time="2025-09-06T00:07:31.385901611Z" level=info msg="Forcibly stopping sandbox \"9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1\"" Sep 6 00:07:31.546746 env[1646]: 2025-09-06 00:07:31.469 [WARNING][5993] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--29--17-k8s-coredns--674b8bbfcf--gb45h-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"f9b12e81-24af-41a3-9679-1c0d02641bbd", ResourceVersion:"1098", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 5, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-29-17", ContainerID:"1e48a464470aa581251b4c6ef2d4b8ddcf658110ce0bc0d0d07231176ebd7fd5", Pod:"coredns-674b8bbfcf-gb45h", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.120.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calidba50b7c16e", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:07:31.546746 env[1646]: 2025-09-06 00:07:31.469 [INFO][5993] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" Sep 6 00:07:31.546746 env[1646]: 2025-09-06 00:07:31.469 [INFO][5993] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" iface="eth0" netns="" Sep 6 00:07:31.546746 env[1646]: 2025-09-06 00:07:31.470 [INFO][5993] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" Sep 6 00:07:31.546746 env[1646]: 2025-09-06 00:07:31.470 [INFO][5993] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" Sep 6 00:07:31.546746 env[1646]: 2025-09-06 00:07:31.521 [INFO][6000] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" HandleID="k8s-pod-network.9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" Workload="ip--172--31--29--17-k8s-coredns--674b8bbfcf--gb45h-eth0" Sep 6 00:07:31.546746 env[1646]: 2025-09-06 00:07:31.521 [INFO][6000] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:07:31.546746 env[1646]: 2025-09-06 00:07:31.521 [INFO][6000] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:07:31.546746 env[1646]: 2025-09-06 00:07:31.535 [WARNING][6000] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" HandleID="k8s-pod-network.9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" Workload="ip--172--31--29--17-k8s-coredns--674b8bbfcf--gb45h-eth0" Sep 6 00:07:31.546746 env[1646]: 2025-09-06 00:07:31.536 [INFO][6000] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" HandleID="k8s-pod-network.9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" Workload="ip--172--31--29--17-k8s-coredns--674b8bbfcf--gb45h-eth0" Sep 6 00:07:31.546746 env[1646]: 2025-09-06 00:07:31.538 [INFO][6000] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:07:31.546746 env[1646]: 2025-09-06 00:07:31.541 [INFO][5993] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1" Sep 6 00:07:31.546746 env[1646]: time="2025-09-06T00:07:31.546327482Z" level=info msg="TearDown network for sandbox \"9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1\" successfully" Sep 6 00:07:31.553666 env[1646]: time="2025-09-06T00:07:31.553584052Z" level=info msg="RemovePodSandbox \"9eca58c4d73810e51803e0d5543e9206f41e3146007e5830dc6754fe280094a1\" returns successfully" Sep 6 00:07:31.554495 env[1646]: time="2025-09-06T00:07:31.554410481Z" level=info msg="StopPodSandbox for \"8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79\"" Sep 6 00:07:31.686680 env[1646]: 2025-09-06 00:07:31.623 [WARNING][6014] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--29--17-k8s-goldmane--54d579b49d--4jk72-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"5c12b22f-4b8f-447e-b91b-6664f072632b", ResourceVersion:"1407", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 6, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-29-17", ContainerID:"24fb2ad2b168b3518acfaeabd2755f0cd0731112dd46db1df3c5efcb62e6a66f", Pod:"goldmane-54d579b49d-4jk72", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.120.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calida008288668", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:07:31.686680 env[1646]: 2025-09-06 00:07:31.624 [INFO][6014] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" Sep 6 00:07:31.686680 env[1646]: 2025-09-06 00:07:31.624 [INFO][6014] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" iface="eth0" netns="" Sep 6 00:07:31.686680 env[1646]: 2025-09-06 00:07:31.624 [INFO][6014] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" Sep 6 00:07:31.686680 env[1646]: 2025-09-06 00:07:31.624 [INFO][6014] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" Sep 6 00:07:31.686680 env[1646]: 2025-09-06 00:07:31.662 [INFO][6021] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" HandleID="k8s-pod-network.8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" Workload="ip--172--31--29--17-k8s-goldmane--54d579b49d--4jk72-eth0" Sep 6 00:07:31.686680 env[1646]: 2025-09-06 00:07:31.663 [INFO][6021] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:07:31.686680 env[1646]: 2025-09-06 00:07:31.663 [INFO][6021] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:07:31.686680 env[1646]: 2025-09-06 00:07:31.677 [WARNING][6021] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" HandleID="k8s-pod-network.8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" Workload="ip--172--31--29--17-k8s-goldmane--54d579b49d--4jk72-eth0" Sep 6 00:07:31.686680 env[1646]: 2025-09-06 00:07:31.677 [INFO][6021] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" HandleID="k8s-pod-network.8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" Workload="ip--172--31--29--17-k8s-goldmane--54d579b49d--4jk72-eth0" Sep 6 00:07:31.686680 env[1646]: 2025-09-06 00:07:31.679 [INFO][6021] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:07:31.686680 env[1646]: 2025-09-06 00:07:31.682 [INFO][6014] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" Sep 6 00:07:31.687730 env[1646]: time="2025-09-06T00:07:31.687675597Z" level=info msg="TearDown network for sandbox \"8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79\" successfully" Sep 6 00:07:31.687857 env[1646]: time="2025-09-06T00:07:31.687824507Z" level=info msg="StopPodSandbox for \"8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79\" returns successfully" Sep 6 00:07:31.688759 env[1646]: time="2025-09-06T00:07:31.688692636Z" level=info msg="RemovePodSandbox for \"8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79\"" Sep 6 00:07:31.688914 env[1646]: time="2025-09-06T00:07:31.688752817Z" level=info msg="Forcibly stopping sandbox \"8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79\"" Sep 6 00:07:31.811000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.29.17:22-147.75.109.163:33080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:31.816392 kernel: kauditd_printk_skb: 22 callbacks suppressed Sep 6 00:07:31.816491 kernel: audit: type=1130 audit(1757117251.811:1622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.29.17:22-147.75.109.163:33080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:31.812727 systemd[1]: Started sshd@20-172.31.29.17:22-147.75.109.163:33080.service. Sep 6 00:07:31.840318 env[1646]: 2025-09-06 00:07:31.759 [WARNING][6035] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--29--17-k8s-goldmane--54d579b49d--4jk72-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"5c12b22f-4b8f-447e-b91b-6664f072632b", ResourceVersion:"1407", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 6, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-29-17", ContainerID:"24fb2ad2b168b3518acfaeabd2755f0cd0731112dd46db1df3c5efcb62e6a66f", Pod:"goldmane-54d579b49d-4jk72", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.120.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calida008288668", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:07:31.840318 env[1646]: 2025-09-06 00:07:31.760 [INFO][6035] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" Sep 6 00:07:31.840318 env[1646]: 2025-09-06 00:07:31.760 [INFO][6035] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" iface="eth0" netns="" Sep 6 00:07:31.840318 env[1646]: 2025-09-06 00:07:31.760 [INFO][6035] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" Sep 6 00:07:31.840318 env[1646]: 2025-09-06 00:07:31.760 [INFO][6035] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" Sep 6 00:07:31.840318 env[1646]: 2025-09-06 00:07:31.799 [INFO][6042] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" HandleID="k8s-pod-network.8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" Workload="ip--172--31--29--17-k8s-goldmane--54d579b49d--4jk72-eth0" Sep 6 00:07:31.840318 env[1646]: 2025-09-06 00:07:31.799 [INFO][6042] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:07:31.840318 env[1646]: 2025-09-06 00:07:31.800 [INFO][6042] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:07:31.840318 env[1646]: 2025-09-06 00:07:31.831 [WARNING][6042] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" HandleID="k8s-pod-network.8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" Workload="ip--172--31--29--17-k8s-goldmane--54d579b49d--4jk72-eth0" Sep 6 00:07:31.840318 env[1646]: 2025-09-06 00:07:31.831 [INFO][6042] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" HandleID="k8s-pod-network.8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" Workload="ip--172--31--29--17-k8s-goldmane--54d579b49d--4jk72-eth0" Sep 6 00:07:31.840318 env[1646]: 2025-09-06 00:07:31.833 [INFO][6042] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:07:31.840318 env[1646]: 2025-09-06 00:07:31.837 [INFO][6035] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79" Sep 6 00:07:31.841202 env[1646]: time="2025-09-06T00:07:31.840367771Z" level=info msg="TearDown network for sandbox \"8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79\" successfully" Sep 6 00:07:31.847825 env[1646]: time="2025-09-06T00:07:31.847762007Z" level=info msg="RemovePodSandbox \"8348bfa7b08881d45ac28384adbf4b05320d5947b1f607deb560ae0abda64f79\" returns successfully" Sep 6 00:07:31.848563 env[1646]: time="2025-09-06T00:07:31.848496514Z" level=info msg="StopPodSandbox for \"eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b\"" Sep 6 00:07:32.008000 audit[6049]: USER_ACCT pid=6049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:32.009907 sshd[6049]: Accepted publickey for core from 147.75.109.163 port 33080 ssh2: RSA SHA256:CT8P9x8s4J0T70k8+LLVTP4XjE3e1SNW15vyou+QijI Sep 6 00:07:32.013695 sshd[6049]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:07:32.020733 kernel: audit: type=1101 audit(1757117252.008:1623): pid=6049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:32.020858 kernel: audit: type=1103 audit(1757117252.011:1624): pid=6049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:32.011000 audit[6049]: CRED_ACQ pid=6049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:32.036405 kernel: audit: type=1006 audit(1757117252.011:1625): pid=6049 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Sep 6 00:07:32.011000 audit[6049]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffebf9d460 a2=3 a3=1 items=0 ppid=1 pid=6049 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:32.047122 kernel: audit: type=1300 audit(1757117252.011:1625): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffebf9d460 a2=3 a3=1 items=0 ppid=1 pid=6049 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:32.011000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:07:32.052050 kernel: audit: type=1327 audit(1757117252.011:1625): proctitle=737368643A20636F7265205B707269765D Sep 6 00:07:32.057615 systemd-logind[1634]: New session 21 of user core. Sep 6 00:07:32.059864 systemd[1]: Started session-21.scope. Sep 6 00:07:32.072000 audit[6049]: USER_START pid=6049 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:32.075000 audit[6073]: CRED_ACQ pid=6073 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:32.097287 kernel: audit: type=1105 audit(1757117252.072:1626): pid=6049 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:32.097427 kernel: audit: type=1103 audit(1757117252.075:1627): pid=6073 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:32.100360 env[1646]: 2025-09-06 00:07:31.923 [WARNING][6059] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--29--17-k8s-csi--node--driver--t8r6b-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"cefa6dd1-365c-4b02-b17f-1f1b3edee0dd", ResourceVersion:"1249", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 6, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-29-17", ContainerID:"05a17f9462fa09c33df76eff04514c05d0f0167559d2bd957c58e63ac5c50a31", Pod:"csi-node-driver-t8r6b", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.120.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali7cbe6348786", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:07:32.100360 env[1646]: 2025-09-06 00:07:31.924 [INFO][6059] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" Sep 6 00:07:32.100360 env[1646]: 2025-09-06 00:07:31.924 [INFO][6059] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" iface="eth0" netns="" Sep 6 00:07:32.100360 env[1646]: 2025-09-06 00:07:31.924 [INFO][6059] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" Sep 6 00:07:32.100360 env[1646]: 2025-09-06 00:07:31.924 [INFO][6059] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" Sep 6 00:07:32.100360 env[1646]: 2025-09-06 00:07:31.968 [INFO][6067] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" HandleID="k8s-pod-network.eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" Workload="ip--172--31--29--17-k8s-csi--node--driver--t8r6b-eth0" Sep 6 00:07:32.100360 env[1646]: 2025-09-06 00:07:31.968 [INFO][6067] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:07:32.100360 env[1646]: 2025-09-06 00:07:31.968 [INFO][6067] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:07:32.100360 env[1646]: 2025-09-06 00:07:32.067 [WARNING][6067] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" HandleID="k8s-pod-network.eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" Workload="ip--172--31--29--17-k8s-csi--node--driver--t8r6b-eth0" Sep 6 00:07:32.100360 env[1646]: 2025-09-06 00:07:32.068 [INFO][6067] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" HandleID="k8s-pod-network.eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" Workload="ip--172--31--29--17-k8s-csi--node--driver--t8r6b-eth0" Sep 6 00:07:32.100360 env[1646]: 2025-09-06 00:07:32.085 [INFO][6067] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:07:32.100360 env[1646]: 2025-09-06 00:07:32.090 [INFO][6059] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" Sep 6 00:07:32.101390 env[1646]: time="2025-09-06T00:07:32.100410955Z" level=info msg="TearDown network for sandbox \"eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b\" successfully" Sep 6 00:07:32.101390 env[1646]: time="2025-09-06T00:07:32.100461440Z" level=info msg="StopPodSandbox for \"eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b\" returns successfully" Sep 6 00:07:32.101390 env[1646]: time="2025-09-06T00:07:32.101145499Z" level=info msg="RemovePodSandbox for \"eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b\"" Sep 6 00:07:32.101390 env[1646]: time="2025-09-06T00:07:32.101219852Z" level=info msg="Forcibly stopping sandbox \"eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b\"" Sep 6 00:07:32.303665 env[1646]: 2025-09-06 00:07:32.169 [WARNING][6082] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--29--17-k8s-csi--node--driver--t8r6b-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"cefa6dd1-365c-4b02-b17f-1f1b3edee0dd", ResourceVersion:"1249", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 6, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-29-17", ContainerID:"05a17f9462fa09c33df76eff04514c05d0f0167559d2bd957c58e63ac5c50a31", Pod:"csi-node-driver-t8r6b", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.120.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali7cbe6348786", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:07:32.303665 env[1646]: 2025-09-06 00:07:32.169 [INFO][6082] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" Sep 6 00:07:32.303665 env[1646]: 2025-09-06 00:07:32.169 [INFO][6082] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" iface="eth0" netns="" Sep 6 00:07:32.303665 env[1646]: 2025-09-06 00:07:32.169 [INFO][6082] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" Sep 6 00:07:32.303665 env[1646]: 2025-09-06 00:07:32.169 [INFO][6082] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" Sep 6 00:07:32.303665 env[1646]: 2025-09-06 00:07:32.275 [INFO][6093] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" HandleID="k8s-pod-network.eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" Workload="ip--172--31--29--17-k8s-csi--node--driver--t8r6b-eth0" Sep 6 00:07:32.303665 env[1646]: 2025-09-06 00:07:32.276 [INFO][6093] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:07:32.303665 env[1646]: 2025-09-06 00:07:32.276 [INFO][6093] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:07:32.303665 env[1646]: 2025-09-06 00:07:32.293 [WARNING][6093] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" HandleID="k8s-pod-network.eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" Workload="ip--172--31--29--17-k8s-csi--node--driver--t8r6b-eth0" Sep 6 00:07:32.303665 env[1646]: 2025-09-06 00:07:32.293 [INFO][6093] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" HandleID="k8s-pod-network.eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" Workload="ip--172--31--29--17-k8s-csi--node--driver--t8r6b-eth0" Sep 6 00:07:32.303665 env[1646]: 2025-09-06 00:07:32.297 [INFO][6093] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:07:32.303665 env[1646]: 2025-09-06 00:07:32.300 [INFO][6082] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b" Sep 6 00:07:32.304590 env[1646]: time="2025-09-06T00:07:32.303701826Z" level=info msg="TearDown network for sandbox \"eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b\" successfully" Sep 6 00:07:32.316438 env[1646]: time="2025-09-06T00:07:32.316296762Z" level=info msg="RemovePodSandbox \"eeda43dba46a2d8a49a957352d4d997019340f4864c338bb3c5c7f8db96a939b\" returns successfully" Sep 6 00:07:32.378541 sshd[6049]: pam_unix(sshd:session): session closed for user core Sep 6 00:07:32.379000 audit[6049]: USER_END pid=6049 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:32.379000 audit[6049]: CRED_DISP pid=6049 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:32.392693 systemd[1]: sshd@20-172.31.29.17:22-147.75.109.163:33080.service: Deactivated successfully. Sep 6 00:07:32.394437 systemd[1]: session-21.scope: Deactivated successfully. Sep 6 00:07:32.397838 systemd-logind[1634]: Session 21 logged out. Waiting for processes to exit. Sep 6 00:07:32.399974 systemd-logind[1634]: Removed session 21. Sep 6 00:07:32.402469 kernel: audit: type=1106 audit(1757117252.379:1628): pid=6049 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:32.402571 kernel: audit: type=1104 audit(1757117252.379:1629): pid=6049 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:32.392000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.29.17:22-147.75.109.163:33080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:34.307000 audit[6126]: NETFILTER_CFG table=filter:138 family=2 entries=20 op=nft_register_rule pid=6126 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:07:34.307000 audit[6126]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffea6252f0 a2=0 a3=1 items=0 ppid=2863 pid=6126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:34.307000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:07:34.317000 audit[6126]: NETFILTER_CFG table=nat:139 family=2 entries=110 op=nft_register_chain pid=6126 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:07:34.317000 audit[6126]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=ffffea6252f0 a2=0 a3=1 items=0 ppid=2863 pid=6126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:34.317000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:07:37.408998 systemd[1]: Started sshd@21-172.31.29.17:22-147.75.109.163:33086.service. Sep 6 00:07:37.408000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.29.17:22-147.75.109.163:33086 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:37.417150 kernel: kauditd_printk_skb: 7 callbacks suppressed Sep 6 00:07:37.417276 kernel: audit: type=1130 audit(1757117257.408:1633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.29.17:22-147.75.109.163:33086 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:37.593000 audit[6152]: USER_ACCT pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:37.595483 sshd[6152]: Accepted publickey for core from 147.75.109.163 port 33086 ssh2: RSA SHA256:CT8P9x8s4J0T70k8+LLVTP4XjE3e1SNW15vyou+QijI Sep 6 00:07:37.607207 kernel: audit: type=1101 audit(1757117257.593:1634): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:37.606000 audit[6152]: CRED_ACQ pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:37.612950 sshd[6152]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:07:37.625072 kernel: audit: type=1103 audit(1757117257.606:1635): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:37.625265 kernel: audit: type=1006 audit(1757117257.606:1636): pid=6152 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Sep 6 00:07:37.606000 audit[6152]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4698d80 a2=3 a3=1 items=0 ppid=1 pid=6152 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:37.635655 kernel: audit: type=1300 audit(1757117257.606:1636): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4698d80 a2=3 a3=1 items=0 ppid=1 pid=6152 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:37.606000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:07:37.639394 kernel: audit: type=1327 audit(1757117257.606:1636): proctitle=737368643A20636F7265205B707269765D Sep 6 00:07:37.645306 systemd-logind[1634]: New session 22 of user core. Sep 6 00:07:37.646823 systemd[1]: Started session-22.scope. Sep 6 00:07:37.658000 audit[6152]: USER_START pid=6152 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:37.674159 kernel: audit: type=1105 audit(1757117257.658:1637): pid=6152 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:37.672000 audit[6154]: CRED_ACQ pid=6154 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:37.685195 kernel: audit: type=1103 audit(1757117257.672:1638): pid=6154 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:37.979891 sshd[6152]: pam_unix(sshd:session): session closed for user core Sep 6 00:07:37.981000 audit[6152]: USER_END pid=6152 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:37.986639 systemd-logind[1634]: Session 22 logged out. Waiting for processes to exit. Sep 6 00:07:37.989554 systemd[1]: session-22.scope: Deactivated successfully. Sep 6 00:07:37.991746 systemd[1]: sshd@21-172.31.29.17:22-147.75.109.163:33086.service: Deactivated successfully. Sep 6 00:07:37.981000 audit[6152]: CRED_DISP pid=6152 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:37.994636 systemd-logind[1634]: Removed session 22. Sep 6 00:07:38.004181 kernel: audit: type=1106 audit(1757117257.981:1639): pid=6152 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:38.004389 kernel: audit: type=1104 audit(1757117257.981:1640): pid=6152 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:37.987000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.29.17:22-147.75.109.163:33086 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:43.015000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.29.17:22-147.75.109.163:54358 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:43.016399 systemd[1]: Started sshd@22-172.31.29.17:22-147.75.109.163:54358.service. Sep 6 00:07:43.019214 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 00:07:43.019337 kernel: audit: type=1130 audit(1757117263.015:1642): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.29.17:22-147.75.109.163:54358 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:43.207767 sshd[6164]: Accepted publickey for core from 147.75.109.163 port 54358 ssh2: RSA SHA256:CT8P9x8s4J0T70k8+LLVTP4XjE3e1SNW15vyou+QijI Sep 6 00:07:43.206000 audit[6164]: USER_ACCT pid=6164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:43.220462 sshd[6164]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:07:43.218000 audit[6164]: CRED_ACQ pid=6164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:43.235377 kernel: audit: type=1101 audit(1757117263.206:1643): pid=6164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:43.235542 kernel: audit: type=1103 audit(1757117263.218:1644): pid=6164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:43.245459 kernel: audit: type=1006 audit(1757117263.218:1645): pid=6164 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Sep 6 00:07:43.247971 systemd[1]: Started session-23.scope. Sep 6 00:07:43.248304 systemd-logind[1634]: New session 23 of user core. Sep 6 00:07:43.218000 audit[6164]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2ecbd60 a2=3 a3=1 items=0 ppid=1 pid=6164 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:43.261021 kernel: audit: type=1300 audit(1757117263.218:1645): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2ecbd60 a2=3 a3=1 items=0 ppid=1 pid=6164 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:43.218000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:07:43.266573 kernel: audit: type=1327 audit(1757117263.218:1645): proctitle=737368643A20636F7265205B707269765D Sep 6 00:07:43.279000 audit[6164]: USER_START pid=6164 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:43.293000 audit[6167]: CRED_ACQ pid=6167 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:43.304795 kernel: audit: type=1105 audit(1757117263.279:1646): pid=6164 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:43.304983 kernel: audit: type=1103 audit(1757117263.293:1647): pid=6167 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:43.609075 sshd[6164]: pam_unix(sshd:session): session closed for user core Sep 6 00:07:43.611000 audit[6164]: USER_END pid=6164 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:43.611000 audit[6164]: CRED_DISP pid=6164 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:43.627297 systemd[1]: sshd@22-172.31.29.17:22-147.75.109.163:54358.service: Deactivated successfully. Sep 6 00:07:43.628711 systemd[1]: session-23.scope: Deactivated successfully. Sep 6 00:07:43.631156 systemd-logind[1634]: Session 23 logged out. Waiting for processes to exit. Sep 6 00:07:43.633223 systemd-logind[1634]: Removed session 23. Sep 6 00:07:43.636813 kernel: audit: type=1106 audit(1757117263.611:1648): pid=6164 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:43.636980 kernel: audit: type=1104 audit(1757117263.611:1649): pid=6164 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:43.626000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.29.17:22-147.75.109.163:54358 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:48.643273 systemd[1]: Started sshd@23-172.31.29.17:22-147.75.109.163:54370.service. Sep 6 00:07:48.643000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.29.17:22-147.75.109.163:54370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:48.646609 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 00:07:48.646718 kernel: audit: type=1130 audit(1757117268.643:1651): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.29.17:22-147.75.109.163:54370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:48.853000 audit[6195]: USER_ACCT pid=6195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:48.866965 sshd[6195]: Accepted publickey for core from 147.75.109.163 port 54370 ssh2: RSA SHA256:CT8P9x8s4J0T70k8+LLVTP4XjE3e1SNW15vyou+QijI Sep 6 00:07:48.868363 sshd[6195]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:07:48.870171 kernel: audit: type=1101 audit(1757117268.853:1652): pid=6195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:48.870282 kernel: audit: type=1103 audit(1757117268.866:1653): pid=6195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:48.866000 audit[6195]: CRED_ACQ pid=6195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:48.889907 systemd-logind[1634]: New session 24 of user core. Sep 6 00:07:48.892562 kernel: audit: type=1006 audit(1757117268.866:1654): pid=6195 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Sep 6 00:07:48.891410 systemd[1]: Started session-24.scope. Sep 6 00:07:48.866000 audit[6195]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc06c4070 a2=3 a3=1 items=0 ppid=1 pid=6195 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:48.903446 kernel: audit: type=1300 audit(1757117268.866:1654): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc06c4070 a2=3 a3=1 items=0 ppid=1 pid=6195 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:48.866000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:07:48.910320 kernel: audit: type=1327 audit(1757117268.866:1654): proctitle=737368643A20636F7265205B707269765D Sep 6 00:07:48.912000 audit[6195]: USER_START pid=6195 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:48.915000 audit[6197]: CRED_ACQ pid=6197 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:48.938097 kernel: audit: type=1105 audit(1757117268.912:1655): pid=6195 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:48.938285 kernel: audit: type=1103 audit(1757117268.915:1656): pid=6197 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:49.240163 sshd[6195]: pam_unix(sshd:session): session closed for user core Sep 6 00:07:49.242000 audit[6195]: USER_END pid=6195 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:49.261094 systemd-logind[1634]: Session 24 logged out. Waiting for processes to exit. Sep 6 00:07:49.263328 systemd[1]: sshd@23-172.31.29.17:22-147.75.109.163:54370.service: Deactivated successfully. Sep 6 00:07:49.255000 audit[6195]: CRED_DISP pid=6195 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:49.264783 systemd[1]: session-24.scope: Deactivated successfully. Sep 6 00:07:49.278805 kernel: audit: type=1106 audit(1757117269.242:1657): pid=6195 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:49.278971 kernel: audit: type=1104 audit(1757117269.255:1658): pid=6195 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:49.262000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.29.17:22-147.75.109.163:54370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:49.279449 systemd-logind[1634]: Removed session 24. Sep 6 00:07:54.276698 systemd[1]: Started sshd@24-172.31.29.17:22-147.75.109.163:42696.service. Sep 6 00:07:54.289060 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 00:07:54.289216 kernel: audit: type=1130 audit(1757117274.275:1660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.29.17:22-147.75.109.163:42696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:54.275000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.29.17:22-147.75.109.163:42696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:54.446849 sshd[6207]: Accepted publickey for core from 147.75.109.163 port 42696 ssh2: RSA SHA256:CT8P9x8s4J0T70k8+LLVTP4XjE3e1SNW15vyou+QijI Sep 6 00:07:54.445000 audit[6207]: USER_ACCT pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:54.461086 sshd[6207]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:07:54.459000 audit[6207]: CRED_ACQ pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:54.473864 kernel: audit: type=1101 audit(1757117274.445:1661): pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:54.474015 kernel: audit: type=1103 audit(1757117274.459:1662): pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:54.483792 kernel: audit: type=1006 audit(1757117274.459:1663): pid=6207 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Sep 6 00:07:54.488547 systemd-logind[1634]: New session 25 of user core. Sep 6 00:07:54.489539 systemd[1]: Started session-25.scope. Sep 6 00:07:54.459000 audit[6207]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffcc78010 a2=3 a3=1 items=0 ppid=1 pid=6207 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:54.500458 kernel: audit: type=1300 audit(1757117274.459:1663): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffcc78010 a2=3 a3=1 items=0 ppid=1 pid=6207 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:07:54.459000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:07:54.504126 kernel: audit: type=1327 audit(1757117274.459:1663): proctitle=737368643A20636F7265205B707269765D Sep 6 00:07:54.512000 audit[6207]: USER_START pid=6207 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:54.516000 audit[6209]: CRED_ACQ pid=6209 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:54.540607 kernel: audit: type=1105 audit(1757117274.512:1664): pid=6207 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:54.540792 kernel: audit: type=1103 audit(1757117274.516:1665): pid=6209 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:54.805048 sshd[6207]: pam_unix(sshd:session): session closed for user core Sep 6 00:07:54.806000 audit[6207]: USER_END pid=6207 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:54.821300 systemd-logind[1634]: Session 25 logged out. Waiting for processes to exit. Sep 6 00:07:54.821662 systemd[1]: sshd@24-172.31.29.17:22-147.75.109.163:42696.service: Deactivated successfully. Sep 6 00:07:54.823079 systemd[1]: session-25.scope: Deactivated successfully. Sep 6 00:07:54.825255 systemd-logind[1634]: Removed session 25. Sep 6 00:07:54.806000 audit[6207]: CRED_DISP pid=6207 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:54.837707 kernel: audit: type=1106 audit(1757117274.806:1666): pid=6207 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:54.837861 kernel: audit: type=1104 audit(1757117274.806:1667): pid=6207 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:07:54.820000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.29.17:22-147.75.109.163:42696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:59.831000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.29.17:22-147.75.109.163:42712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:07:59.831595 systemd[1]: Started sshd@25-172.31.29.17:22-147.75.109.163:42712.service. Sep 6 00:07:59.833925 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 00:07:59.834878 kernel: audit: type=1130 audit(1757117279.831:1669): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.29.17:22-147.75.109.163:42712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:08:00.015664 sshd[6244]: Accepted publickey for core from 147.75.109.163 port 42712 ssh2: RSA SHA256:CT8P9x8s4J0T70k8+LLVTP4XjE3e1SNW15vyou+QijI Sep 6 00:08:00.015000 audit[6244]: USER_ACCT pid=6244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:08:00.027959 sshd[6244]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:08:00.026000 audit[6244]: CRED_ACQ pid=6244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:08:00.029315 kernel: audit: type=1101 audit(1757117280.015:1670): pid=6244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:08:00.047578 kernel: audit: type=1103 audit(1757117280.026:1671): pid=6244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:08:00.047713 kernel: audit: type=1006 audit(1757117280.027:1672): pid=6244 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Sep 6 00:08:00.027000 audit[6244]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe0e6b6f0 a2=3 a3=1 items=0 ppid=1 pid=6244 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:08:00.063380 systemd-logind[1634]: New session 26 of user core. Sep 6 00:08:00.066097 systemd[1]: Started session-26.scope. Sep 6 00:08:00.072530 kernel: audit: type=1300 audit(1757117280.027:1672): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe0e6b6f0 a2=3 a3=1 items=0 ppid=1 pid=6244 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:08:00.072706 kernel: audit: type=1327 audit(1757117280.027:1672): proctitle=737368643A20636F7265205B707269765D Sep 6 00:08:00.027000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:08:00.081000 audit[6244]: USER_START pid=6244 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:08:00.094000 audit[6246]: CRED_ACQ pid=6246 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:08:00.095285 kernel: audit: type=1105 audit(1757117280.081:1673): pid=6244 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:08:00.105200 kernel: audit: type=1103 audit(1757117280.094:1674): pid=6246 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:08:00.378079 sshd[6244]: pam_unix(sshd:session): session closed for user core Sep 6 00:08:00.380000 audit[6244]: USER_END pid=6244 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:08:00.395224 systemd-logind[1634]: Session 26 logged out. Waiting for processes to exit. Sep 6 00:08:00.395830 systemd[1]: session-26.scope: Deactivated successfully. Sep 6 00:08:00.398353 systemd[1]: sshd@25-172.31.29.17:22-147.75.109.163:42712.service: Deactivated successfully. Sep 6 00:08:00.402781 systemd-logind[1634]: Removed session 26. Sep 6 00:08:00.380000 audit[6244]: CRED_DISP pid=6244 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:08:00.415644 kernel: audit: type=1106 audit(1757117280.380:1675): pid=6244 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:08:00.415831 kernel: audit: type=1104 audit(1757117280.380:1676): pid=6244 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:08:00.398000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.29.17:22-147.75.109.163:42712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:08:02.967000 audit[5456]: AVC avc: denied { watch } for pid=5456 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_00_06_24.1764394552/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c563,c857 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c563,c857 tclass=file permissive=0 Sep 6 00:08:02.967000 audit[5456]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4001853600 a2=fc6 a3=0 items=0 ppid=4937 pid=5456 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c563,c857 key=(null) Sep 6 00:08:02.967000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 00:08:03.922000 audit[5414]: AVC avc: denied { watch } for pid=5414 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_00_06_24.3994929176/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c824,c837 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c824,c837 tclass=file permissive=0 Sep 6 00:08:03.922000 audit[5414]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4001edfec0 a2=fc6 a3=0 items=0 ppid=4974 pid=5414 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c824,c837 key=(null) Sep 6 00:08:03.922000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 00:08:14.141841 systemd[1]: cri-containerd-54738a2681c690dc2f23024c701ac04c4af58c069828104d222b56ac45b7c686.scope: Deactivated successfully. Sep 6 00:08:14.142491 systemd[1]: cri-containerd-54738a2681c690dc2f23024c701ac04c4af58c069828104d222b56ac45b7c686.scope: Consumed 19.414s CPU time. Sep 6 00:08:14.148733 kernel: kauditd_printk_skb: 7 callbacks suppressed Sep 6 00:08:14.148899 kernel: audit: type=1334 audit(1757117294.141:1680): prog-id=120 op=UNLOAD Sep 6 00:08:14.141000 audit: BPF prog-id=120 op=UNLOAD Sep 6 00:08:14.148000 audit: BPF prog-id=123 op=UNLOAD Sep 6 00:08:14.155155 kernel: audit: type=1334 audit(1757117294.148:1681): prog-id=123 op=UNLOAD Sep 6 00:08:14.182087 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-54738a2681c690dc2f23024c701ac04c4af58c069828104d222b56ac45b7c686-rootfs.mount: Deactivated successfully. Sep 6 00:08:14.185668 env[1646]: time="2025-09-06T00:08:14.185593933Z" level=info msg="shim disconnected" id=54738a2681c690dc2f23024c701ac04c4af58c069828104d222b56ac45b7c686 Sep 6 00:08:14.186356 env[1646]: time="2025-09-06T00:08:14.185672645Z" level=warning msg="cleaning up after shim disconnected" id=54738a2681c690dc2f23024c701ac04c4af58c069828104d222b56ac45b7c686 namespace=k8s.io Sep 6 00:08:14.186356 env[1646]: time="2025-09-06T00:08:14.185695590Z" level=info msg="cleaning up dead shim" Sep 6 00:08:14.200975 env[1646]: time="2025-09-06T00:08:14.200893356Z" level=warning msg="cleanup warnings time=\"2025-09-06T00:08:14Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6307 runtime=io.containerd.runc.v2\n" Sep 6 00:08:14.562374 kubelet[2752]: I0906 00:08:14.562245 2752 scope.go:117] "RemoveContainer" containerID="54738a2681c690dc2f23024c701ac04c4af58c069828104d222b56ac45b7c686" Sep 6 00:08:14.566466 env[1646]: time="2025-09-06T00:08:14.566368460Z" level=info msg="CreateContainer within sandbox \"578a14e744a9275e5bc6ca3e4d84887c6d303ba8172430584b1d2f7d97d7a8d4\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Sep 6 00:08:14.603587 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4214557288.mount: Deactivated successfully. Sep 6 00:08:14.609059 env[1646]: time="2025-09-06T00:08:14.608968944Z" level=info msg="CreateContainer within sandbox \"578a14e744a9275e5bc6ca3e4d84887c6d303ba8172430584b1d2f7d97d7a8d4\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"737b8d582bddda5d5a931962657faca61725430bed6d1e0afee3f644134b3ebd\"" Sep 6 00:08:14.610066 env[1646]: time="2025-09-06T00:08:14.609996846Z" level=info msg="StartContainer for \"737b8d582bddda5d5a931962657faca61725430bed6d1e0afee3f644134b3ebd\"" Sep 6 00:08:14.651335 systemd[1]: Started cri-containerd-737b8d582bddda5d5a931962657faca61725430bed6d1e0afee3f644134b3ebd.scope. Sep 6 00:08:14.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.714933 kernel: audit: type=1400 audit(1757117294.698:1682): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.715123 kernel: audit: type=1400 audit(1757117294.698:1683): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.723374 kernel: audit: type=1400 audit(1757117294.698:1684): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.731145 kernel: audit: type=1400 audit(1757117294.698:1685): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.731732 kernel: audit: type=1400 audit(1757117294.698:1686): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.747100 kernel: audit: type=1400 audit(1757117294.698:1687): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.755214 kernel: audit: type=1400 audit(1757117294.698:1688): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.764510 kernel: audit: type=1400 audit(1757117294.698:1689): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.706000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.706000 audit: BPF prog-id=237 op=LOAD Sep 6 00:08:14.707000 audit[6328]: AVC avc: denied { bpf } for pid=6328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.707000 audit[6328]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2887 pid=6328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:08:14.707000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733376238643538326264646461356435613933313936323635376661 Sep 6 00:08:14.707000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.707000 audit[6328]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2887 pid=6328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:08:14.707000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733376238643538326264646461356435613933313936323635376661 Sep 6 00:08:14.707000 audit[6328]: AVC avc: denied { bpf } for pid=6328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.707000 audit[6328]: AVC avc: denied { bpf } for pid=6328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.707000 audit[6328]: AVC avc: denied { bpf } for pid=6328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.707000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.707000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.707000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.707000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.707000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.707000 audit[6328]: AVC avc: denied { bpf } for pid=6328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.707000 audit[6328]: AVC avc: denied { bpf } for pid=6328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.707000 audit: BPF prog-id=238 op=LOAD Sep 6 00:08:14.707000 audit[6328]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2887 pid=6328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:08:14.707000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733376238643538326264646461356435613933313936323635376661 Sep 6 00:08:14.714000 audit[6328]: AVC avc: denied { bpf } for pid=6328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.714000 audit[6328]: AVC avc: denied { bpf } for pid=6328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.714000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.714000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.714000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.714000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.714000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.714000 audit[6328]: AVC avc: denied { bpf } for pid=6328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.714000 audit[6328]: AVC avc: denied { bpf } for pid=6328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.714000 audit: BPF prog-id=239 op=LOAD Sep 6 00:08:14.714000 audit[6328]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2887 pid=6328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:08:14.714000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733376238643538326264646461356435613933313936323635376661 Sep 6 00:08:14.714000 audit: BPF prog-id=239 op=UNLOAD Sep 6 00:08:14.714000 audit: BPF prog-id=238 op=UNLOAD Sep 6 00:08:14.714000 audit[6328]: AVC avc: denied { bpf } for pid=6328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.714000 audit[6328]: AVC avc: denied { bpf } for pid=6328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.714000 audit[6328]: AVC avc: denied { bpf } for pid=6328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.714000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.714000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.714000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.714000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.714000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.714000 audit[6328]: AVC avc: denied { bpf } for pid=6328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.714000 audit[6328]: AVC avc: denied { bpf } for pid=6328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:14.714000 audit: BPF prog-id=240 op=LOAD Sep 6 00:08:14.714000 audit[6328]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2887 pid=6328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:08:14.714000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733376238643538326264646461356435613933313936323635376661 Sep 6 00:08:14.780985 env[1646]: time="2025-09-06T00:08:14.780907389Z" level=info msg="StartContainer for \"737b8d582bddda5d5a931962657faca61725430bed6d1e0afee3f644134b3ebd\" returns successfully" Sep 6 00:08:15.432817 systemd[1]: cri-containerd-7fdcd676ace470f8934959f3d8bcb121a47c530be7e953dab76136b95db04598.scope: Deactivated successfully. Sep 6 00:08:15.433384 systemd[1]: cri-containerd-7fdcd676ace470f8934959f3d8bcb121a47c530be7e953dab76136b95db04598.scope: Consumed 5.925s CPU time. Sep 6 00:08:15.435000 audit: BPF prog-id=79 op=UNLOAD Sep 6 00:08:15.435000 audit: BPF prog-id=88 op=UNLOAD Sep 6 00:08:15.497247 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-7fdcd676ace470f8934959f3d8bcb121a47c530be7e953dab76136b95db04598-rootfs.mount: Deactivated successfully. Sep 6 00:08:15.499676 env[1646]: time="2025-09-06T00:08:15.499617139Z" level=info msg="shim disconnected" id=7fdcd676ace470f8934959f3d8bcb121a47c530be7e953dab76136b95db04598 Sep 6 00:08:15.500428 env[1646]: time="2025-09-06T00:08:15.500373578Z" level=warning msg="cleaning up after shim disconnected" id=7fdcd676ace470f8934959f3d8bcb121a47c530be7e953dab76136b95db04598 namespace=k8s.io Sep 6 00:08:15.500636 env[1646]: time="2025-09-06T00:08:15.500595899Z" level=info msg="cleaning up dead shim" Sep 6 00:08:15.515549 env[1646]: time="2025-09-06T00:08:15.515491785Z" level=warning msg="cleanup warnings time=\"2025-09-06T00:08:15Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6369 runtime=io.containerd.runc.v2\n" Sep 6 00:08:15.572912 kubelet[2752]: I0906 00:08:15.572872 2752 scope.go:117] "RemoveContainer" containerID="7fdcd676ace470f8934959f3d8bcb121a47c530be7e953dab76136b95db04598" Sep 6 00:08:15.579482 env[1646]: time="2025-09-06T00:08:15.579428963Z" level=info msg="CreateContainer within sandbox \"187cf65246173866a605c90984ecdfa791ccf09f16315b3c0433c3ae8c0fd218\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Sep 6 00:08:15.606291 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount447598460.mount: Deactivated successfully. Sep 6 00:08:15.621366 env[1646]: time="2025-09-06T00:08:15.621304701Z" level=info msg="CreateContainer within sandbox \"187cf65246173866a605c90984ecdfa791ccf09f16315b3c0433c3ae8c0fd218\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"83938cd4177188103ef790fcfb8c98fc46f243b94ad48b649e31cb80630e7986\"" Sep 6 00:08:15.622663 env[1646]: time="2025-09-06T00:08:15.622603707Z" level=info msg="StartContainer for \"83938cd4177188103ef790fcfb8c98fc46f243b94ad48b649e31cb80630e7986\"" Sep 6 00:08:15.654886 systemd[1]: Started cri-containerd-83938cd4177188103ef790fcfb8c98fc46f243b94ad48b649e31cb80630e7986.scope. Sep 6 00:08:15.704000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.704000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.704000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.704000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.704000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.704000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.704000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.704000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.704000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.704000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.704000 audit: BPF prog-id=241 op=LOAD Sep 6 00:08:15.706000 audit[6391]: AVC avc: denied { bpf } for pid=6391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.706000 audit[6391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2249 pid=6391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:08:15.706000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833393338636434313737313838313033656637393066636662386339 Sep 6 00:08:15.706000 audit[6391]: AVC avc: denied { perfmon } for pid=6391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.706000 audit[6391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2249 pid=6391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:08:15.706000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833393338636434313737313838313033656637393066636662386339 Sep 6 00:08:15.706000 audit[6391]: AVC avc: denied { bpf } for pid=6391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.706000 audit[6391]: AVC avc: denied { bpf } for pid=6391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.706000 audit[6391]: AVC avc: denied { bpf } for pid=6391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.706000 audit[6391]: AVC avc: denied { perfmon } for pid=6391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.706000 audit[6391]: AVC avc: denied { perfmon } for pid=6391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.706000 audit[6391]: AVC avc: denied { perfmon } for pid=6391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.706000 audit[6391]: AVC avc: denied { perfmon } for pid=6391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.706000 audit[6391]: AVC avc: denied { perfmon } for pid=6391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.706000 audit[6391]: AVC avc: denied { bpf } for pid=6391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.706000 audit[6391]: AVC avc: denied { bpf } for pid=6391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.706000 audit: BPF prog-id=242 op=LOAD Sep 6 00:08:15.706000 audit[6391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2249 pid=6391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:08:15.706000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833393338636434313737313838313033656637393066636662386339 Sep 6 00:08:15.706000 audit[6391]: AVC avc: denied { bpf } for pid=6391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.706000 audit[6391]: AVC avc: denied { bpf } for pid=6391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.706000 audit[6391]: AVC avc: denied { perfmon } for pid=6391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.706000 audit[6391]: AVC avc: denied { perfmon } for pid=6391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.706000 audit[6391]: AVC avc: denied { perfmon } for pid=6391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.706000 audit[6391]: AVC avc: denied { perfmon } for pid=6391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.706000 audit[6391]: AVC avc: denied { perfmon } for pid=6391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.706000 audit[6391]: AVC avc: denied { bpf } for pid=6391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.706000 audit[6391]: AVC avc: denied { bpf } for pid=6391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.706000 audit: BPF prog-id=243 op=LOAD Sep 6 00:08:15.706000 audit[6391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2249 pid=6391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:08:15.706000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833393338636434313737313838313033656637393066636662386339 Sep 6 00:08:15.707000 audit: BPF prog-id=243 op=UNLOAD Sep 6 00:08:15.707000 audit: BPF prog-id=242 op=UNLOAD Sep 6 00:08:15.707000 audit[6391]: AVC avc: denied { bpf } for pid=6391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.707000 audit[6391]: AVC avc: denied { bpf } for pid=6391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.707000 audit[6391]: AVC avc: denied { bpf } for pid=6391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.707000 audit[6391]: AVC avc: denied { perfmon } for pid=6391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.707000 audit[6391]: AVC avc: denied { perfmon } for pid=6391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.707000 audit[6391]: AVC avc: denied { perfmon } for pid=6391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.707000 audit[6391]: AVC avc: denied { perfmon } for pid=6391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.707000 audit[6391]: AVC avc: denied { perfmon } for pid=6391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.707000 audit[6391]: AVC avc: denied { bpf } for pid=6391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.707000 audit[6391]: AVC avc: denied { bpf } for pid=6391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:15.707000 audit: BPF prog-id=244 op=LOAD Sep 6 00:08:15.707000 audit[6391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2249 pid=6391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:08:15.707000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833393338636434313737313838313033656637393066636662386339 Sep 6 00:08:15.753650 env[1646]: time="2025-09-06T00:08:15.753565945Z" level=info msg="StartContainer for \"83938cd4177188103ef790fcfb8c98fc46f243b94ad48b649e31cb80630e7986\" returns successfully" Sep 6 00:08:17.186851 systemd[1]: run-containerd-runc-k8s.io-a85560e1fb8d918fabc51561572632b319e3a7ebe13e9174987b545b8d9988eb-runc.1p2Xum.mount: Deactivated successfully. Sep 6 00:08:17.707712 systemd[1]: run-containerd-runc-k8s.io-a85560e1fb8d918fabc51561572632b319e3a7ebe13e9174987b545b8d9988eb-runc.C71C2q.mount: Deactivated successfully. Sep 6 00:08:19.555000 audit[6401]: AVC avc: denied { watch } for pid=6401 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6764 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:08:19.558734 kernel: kauditd_printk_skb: 108 callbacks suppressed Sep 6 00:08:19.558888 kernel: audit: type=1400 audit(1757117299.555:1720): avc: denied { watch } for pid=6401 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6764 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:08:19.558000 audit[6401]: AVC avc: denied { watch } for pid=6401 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:08:19.579084 kernel: audit: type=1400 audit(1757117299.558:1721): avc: denied { watch } for pid=6401 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:08:19.558000 audit[6401]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000151020 a2=fc6 a3=0 items=0 ppid=2249 pid=6401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 key=(null) Sep 6 00:08:19.597919 kernel: audit: type=1300 audit(1757117299.558:1721): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000151020 a2=fc6 a3=0 items=0 ppid=2249 pid=6401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 key=(null) Sep 6 00:08:19.558000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:08:19.608595 kernel: audit: type=1327 audit(1757117299.558:1721): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:08:19.555000 audit[6401]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=400050a1e0 a2=fc6 a3=0 items=0 ppid=2249 pid=6401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 key=(null) Sep 6 00:08:19.621524 kernel: audit: type=1300 audit(1757117299.555:1720): arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=400050a1e0 a2=fc6 a3=0 items=0 ppid=2249 pid=6401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c791 key=(null) Sep 6 00:08:19.555000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:08:19.632141 kernel: audit: type=1327 audit(1757117299.555:1720): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:08:19.669013 systemd[1]: cri-containerd-1702285cf0f47ccabe1e84c16e70d8ca1fefd9aabd7c34f37bf1b9f36ccc3e6d.scope: Deactivated successfully. Sep 6 00:08:19.669626 systemd[1]: cri-containerd-1702285cf0f47ccabe1e84c16e70d8ca1fefd9aabd7c34f37bf1b9f36ccc3e6d.scope: Consumed 5.458s CPU time. Sep 6 00:08:19.674000 audit: BPF prog-id=87 op=UNLOAD Sep 6 00:08:19.681734 kernel: audit: type=1334 audit(1757117299.674:1722): prog-id=87 op=UNLOAD Sep 6 00:08:19.681861 kernel: audit: type=1334 audit(1757117299.674:1723): prog-id=103 op=UNLOAD Sep 6 00:08:19.674000 audit: BPF prog-id=103 op=UNLOAD Sep 6 00:08:19.709544 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1702285cf0f47ccabe1e84c16e70d8ca1fefd9aabd7c34f37bf1b9f36ccc3e6d-rootfs.mount: Deactivated successfully. Sep 6 00:08:19.717065 env[1646]: time="2025-09-06T00:08:19.711662161Z" level=info msg="shim disconnected" id=1702285cf0f47ccabe1e84c16e70d8ca1fefd9aabd7c34f37bf1b9f36ccc3e6d Sep 6 00:08:19.717065 env[1646]: time="2025-09-06T00:08:19.711738328Z" level=warning msg="cleaning up after shim disconnected" id=1702285cf0f47ccabe1e84c16e70d8ca1fefd9aabd7c34f37bf1b9f36ccc3e6d namespace=k8s.io Sep 6 00:08:19.717065 env[1646]: time="2025-09-06T00:08:19.711760613Z" level=info msg="cleaning up dead shim" Sep 6 00:08:19.727876 env[1646]: time="2025-09-06T00:08:19.727796514Z" level=warning msg="cleanup warnings time=\"2025-09-06T00:08:19Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6476 runtime=io.containerd.runc.v2\n" Sep 6 00:08:20.591522 kubelet[2752]: I0906 00:08:20.591484 2752 scope.go:117] "RemoveContainer" containerID="1702285cf0f47ccabe1e84c16e70d8ca1fefd9aabd7c34f37bf1b9f36ccc3e6d" Sep 6 00:08:20.595965 env[1646]: time="2025-09-06T00:08:20.595911405Z" level=info msg="CreateContainer within sandbox \"f8dca498f7471a1ffa4a8f7ad4e6c0a828f693d0bb6e96cce745e1a1eb2a0e5d\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Sep 6 00:08:20.627892 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2936068119.mount: Deactivated successfully. Sep 6 00:08:20.634259 env[1646]: time="2025-09-06T00:08:20.634195720Z" level=info msg="CreateContainer within sandbox \"f8dca498f7471a1ffa4a8f7ad4e6c0a828f693d0bb6e96cce745e1a1eb2a0e5d\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"d3da28dcde9c9f4b374f871c5460ec3770ff73ee32c90a0180b3bb7dc3919734\"" Sep 6 00:08:20.635301 env[1646]: time="2025-09-06T00:08:20.635256097Z" level=info msg="StartContainer for \"d3da28dcde9c9f4b374f871c5460ec3770ff73ee32c90a0180b3bb7dc3919734\"" Sep 6 00:08:20.674049 systemd[1]: Started cri-containerd-d3da28dcde9c9f4b374f871c5460ec3770ff73ee32c90a0180b3bb7dc3919734.scope. Sep 6 00:08:20.734307 kernel: audit: type=1400 audit(1757117300.718:1724): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.734577 kernel: audit: type=1400 audit(1757117300.719:1725): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.718000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.725000 audit: BPF prog-id=245 op=LOAD Sep 6 00:08:20.725000 audit[6495]: AVC avc: denied { bpf } for pid=6495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.725000 audit[6495]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2278 pid=6495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:08:20.725000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433646132386463646539633966346233373466383731633534363065 Sep 6 00:08:20.725000 audit[6495]: AVC avc: denied { perfmon } for pid=6495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.725000 audit[6495]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2278 pid=6495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:08:20.725000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433646132386463646539633966346233373466383731633534363065 Sep 6 00:08:20.725000 audit[6495]: AVC avc: denied { bpf } for pid=6495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.725000 audit[6495]: AVC avc: denied { bpf } for pid=6495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.725000 audit[6495]: AVC avc: denied { bpf } for pid=6495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.725000 audit[6495]: AVC avc: denied { perfmon } for pid=6495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.725000 audit[6495]: AVC avc: denied { perfmon } for pid=6495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.725000 audit[6495]: AVC avc: denied { perfmon } for pid=6495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.725000 audit[6495]: AVC avc: denied { perfmon } for pid=6495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.725000 audit[6495]: AVC avc: denied { perfmon } for pid=6495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.725000 audit[6495]: AVC avc: denied { bpf } for pid=6495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.725000 audit[6495]: AVC avc: denied { bpf } for pid=6495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.725000 audit: BPF prog-id=246 op=LOAD Sep 6 00:08:20.725000 audit[6495]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2278 pid=6495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:08:20.725000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433646132386463646539633966346233373466383731633534363065 Sep 6 00:08:20.733000 audit[6495]: AVC avc: denied { bpf } for pid=6495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.733000 audit[6495]: AVC avc: denied { bpf } for pid=6495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.733000 audit[6495]: AVC avc: denied { perfmon } for pid=6495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.733000 audit[6495]: AVC avc: denied { perfmon } for pid=6495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.733000 audit[6495]: AVC avc: denied { perfmon } for pid=6495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.733000 audit[6495]: AVC avc: denied { perfmon } for pid=6495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.733000 audit[6495]: AVC avc: denied { perfmon } for pid=6495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.733000 audit[6495]: AVC avc: denied { bpf } for pid=6495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.733000 audit[6495]: AVC avc: denied { bpf } for pid=6495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.733000 audit: BPF prog-id=247 op=LOAD Sep 6 00:08:20.733000 audit[6495]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2278 pid=6495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:08:20.733000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433646132386463646539633966346233373466383731633534363065 Sep 6 00:08:20.733000 audit: BPF prog-id=247 op=UNLOAD Sep 6 00:08:20.733000 audit: BPF prog-id=246 op=UNLOAD Sep 6 00:08:20.733000 audit[6495]: AVC avc: denied { bpf } for pid=6495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.733000 audit[6495]: AVC avc: denied { bpf } for pid=6495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.733000 audit[6495]: AVC avc: denied { bpf } for pid=6495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.733000 audit[6495]: AVC avc: denied { perfmon } for pid=6495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.733000 audit[6495]: AVC avc: denied { perfmon } for pid=6495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.733000 audit[6495]: AVC avc: denied { perfmon } for pid=6495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.733000 audit[6495]: AVC avc: denied { perfmon } for pid=6495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.733000 audit[6495]: AVC avc: denied { perfmon } for pid=6495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.733000 audit[6495]: AVC avc: denied { bpf } for pid=6495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.733000 audit[6495]: AVC avc: denied { bpf } for pid=6495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:08:20.733000 audit: BPF prog-id=248 op=LOAD Sep 6 00:08:20.733000 audit[6495]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2278 pid=6495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:08:20.733000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433646132386463646539633966346233373466383731633534363065 Sep 6 00:08:20.781594 env[1646]: time="2025-09-06T00:08:20.781524136Z" level=info msg="StartContainer for \"d3da28dcde9c9f4b374f871c5460ec3770ff73ee32c90a0180b3bb7dc3919734\" returns successfully" Sep 6 00:08:22.428328 kubelet[2752]: E0906 00:08:22.428267 2752 controller.go:195] "Failed to update lease" err="Put \"https://172.31.29.17:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-29-17?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Sep 6 00:08:25.112000 audit[2429]: AVC avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:08:25.115479 kernel: kauditd_printk_skb: 55 callbacks suppressed Sep 6 00:08:25.115585 kernel: audit: type=1400 audit(1757117305.112:1742): avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:08:25.112000 audit[2429]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6b a1=40066fc1b0 a2=fc6 a3=0 items=0 ppid=2279 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 key=(null) Sep 6 00:08:25.137680 kernel: audit: type=1300 audit(1757117305.112:1742): arch=c00000b7 syscall=27 success=no exit=-13 a0=6b a1=40066fc1b0 a2=fc6 a3=0 items=0 ppid=2279 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 key=(null) Sep 6 00:08:25.137803 kernel: audit: type=1327 audit(1757117305.112:1742): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 00:08:25.112000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 00:08:25.122000 audit[2429]: AVC avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6764 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:08:25.157737 kernel: audit: type=1400 audit(1757117305.122:1743): avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6764 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:08:25.122000 audit[2429]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6b a1=40066fc420 a2=fc6 a3=0 items=0 ppid=2279 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 key=(null) Sep 6 00:08:25.169895 kernel: audit: type=1300 audit(1757117305.122:1743): arch=c00000b7 syscall=27 success=no exit=-13 a0=6b a1=40066fc420 a2=fc6 a3=0 items=0 ppid=2279 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 key=(null) Sep 6 00:08:25.169993 kernel: audit: type=1327 audit(1757117305.122:1743): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 00:08:25.122000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 00:08:25.152000 audit[2429]: AVC avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:08:25.190845 kernel: audit: type=1400 audit(1757117305.152:1744): avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:08:25.152000 audit[2429]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6b a1=400a7165c0 a2=fc6 a3=0 items=0 ppid=2279 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 key=(null) Sep 6 00:08:25.152000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 00:08:25.214794 kernel: audit: type=1300 audit(1757117305.152:1744): arch=c00000b7 syscall=27 success=no exit=-13 a0=6b a1=400a7165c0 a2=fc6 a3=0 items=0 ppid=2279 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 key=(null) Sep 6 00:08:25.214896 kernel: audit: type=1327 audit(1757117305.152:1744): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 00:08:25.214952 kernel: audit: type=1400 audit(1757117305.154:1745): avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6764 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:08:25.154000 audit[2429]: AVC avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6764 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:08:25.154000 audit[2429]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6b a1=40066fc480 a2=fc6 a3=0 items=0 ppid=2279 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 key=(null) Sep 6 00:08:25.154000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 00:08:25.273000 audit[2429]: AVC avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=6766 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:08:25.273000 audit[2429]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6b a1=40066fc540 a2=fc6 a3=0 items=0 ppid=2279 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 key=(null) Sep 6 00:08:25.273000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 00:08:25.274000 audit[2429]: AVC avc: denied { watch } for pid=2429 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6756 scontext=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:08:25.274000 audit[2429]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6b a1=400a716600 a2=fc6 a3=0 items=0 ppid=2279 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c512,c686 key=(null) Sep 6 00:08:25.274000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 00:08:26.500000 audit: BPF prog-id=237 op=UNLOAD Sep 6 00:08:26.501352 systemd[1]: cri-containerd-737b8d582bddda5d5a931962657faca61725430bed6d1e0afee3f644134b3ebd.scope: Deactivated successfully. Sep 6 00:08:26.505000 audit: BPF prog-id=240 op=UNLOAD Sep 6 00:08:26.536780 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-737b8d582bddda5d5a931962657faca61725430bed6d1e0afee3f644134b3ebd-rootfs.mount: Deactivated successfully. Sep 6 00:08:26.561153 env[1646]: time="2025-09-06T00:08:26.561057321Z" level=info msg="shim disconnected" id=737b8d582bddda5d5a931962657faca61725430bed6d1e0afee3f644134b3ebd Sep 6 00:08:26.562009 env[1646]: time="2025-09-06T00:08:26.561958900Z" level=warning msg="cleaning up after shim disconnected" id=737b8d582bddda5d5a931962657faca61725430bed6d1e0afee3f644134b3ebd namespace=k8s.io Sep 6 00:08:26.562175 env[1646]: time="2025-09-06T00:08:26.562146013Z" level=info msg="cleaning up dead shim" Sep 6 00:08:26.579303 env[1646]: time="2025-09-06T00:08:26.579245346Z" level=warning msg="cleanup warnings time=\"2025-09-06T00:08:26Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6538 runtime=io.containerd.runc.v2\n" Sep 6 00:08:26.612915 kubelet[2752]: I0906 00:08:26.612869 2752 scope.go:117] "RemoveContainer" containerID="54738a2681c690dc2f23024c701ac04c4af58c069828104d222b56ac45b7c686" Sep 6 00:08:26.613600 kubelet[2752]: I0906 00:08:26.613442 2752 scope.go:117] "RemoveContainer" containerID="737b8d582bddda5d5a931962657faca61725430bed6d1e0afee3f644134b3ebd" Sep 6 00:08:26.613791 kubelet[2752]: E0906 00:08:26.613743 2752 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"tigera-operator\" with CrashLoopBackOff: \"back-off 10s restarting failed container=tigera-operator pod=tigera-operator-755d956888-gg5vh_tigera-operator(4729e41a-9b08-4c52-b9cb-e134ae770c63)\"" pod="tigera-operator/tigera-operator-755d956888-gg5vh" podUID="4729e41a-9b08-4c52-b9cb-e134ae770c63" Sep 6 00:08:26.616457 env[1646]: time="2025-09-06T00:08:26.616400493Z" level=info msg="RemoveContainer for \"54738a2681c690dc2f23024c701ac04c4af58c069828104d222b56ac45b7c686\"" Sep 6 00:08:26.623580 env[1646]: time="2025-09-06T00:08:26.623468421Z" level=info msg="RemoveContainer for \"54738a2681c690dc2f23024c701ac04c4af58c069828104d222b56ac45b7c686\" returns successfully" Sep 6 00:08:28.242464 systemd[1]: run-containerd-runc-k8s.io-7ce0b90df7b14838032d00b7c0255255869d9c62fc6cb08e5fbf252fea685a08-runc.4Fg5xT.mount: Deactivated successfully. Sep 6 00:08:31.717543 amazon-ssm-agent[1640]: 2025-09-06 00:08:31 INFO [HealthCheck] HealthCheck reporting agent health. Sep 6 00:08:32.429653 kubelet[2752]: E0906 00:08:32.429573 2752 controller.go:195] "Failed to update lease" err="Put \"https://172.31.29.17:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-29-17?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Sep 6 00:08:33.689777 systemd[1]: run-containerd-runc-k8s.io-7ce0b90df7b14838032d00b7c0255255869d9c62fc6cb08e5fbf252fea685a08-runc.uyPXnN.mount: Deactivated successfully. Sep 6 00:08:34.888790 systemd[1]: run-containerd-runc-k8s.io-c6a2acb69a70a3ae65c19c181429a477a85838184c46b1159dd7548b48321083-runc.BlcjJa.mount: Deactivated successfully.