Sep 6 01:19:58.049230 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Sep 6 01:19:58.049249 kernel: Linux version 5.15.190-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Fri Sep 5 23:00:12 -00 2025 Sep 6 01:19:58.049258 kernel: earlycon: pl11 at MMIO 0x00000000effec000 (options '') Sep 6 01:19:58.049265 kernel: printk: bootconsole [pl11] enabled Sep 6 01:19:58.049270 kernel: efi: EFI v2.70 by EDK II Sep 6 01:19:58.049276 kernel: efi: ACPI 2.0=0x3fd5f018 SMBIOS=0x3e580000 SMBIOS 3.0=0x3e560000 MEMATTR=0x3f214018 RNG=0x3fd5f998 MEMRESERVE=0x3761cf98 Sep 6 01:19:58.049282 kernel: random: crng init done Sep 6 01:19:58.049288 kernel: ACPI: Early table checksum verification disabled Sep 6 01:19:58.049294 kernel: ACPI: RSDP 0x000000003FD5F018 000024 (v02 VRTUAL) Sep 6 01:19:58.049299 kernel: ACPI: XSDT 0x000000003FD5FF18 00006C (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 01:19:58.049305 kernel: ACPI: FACP 0x000000003FD5FC18 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 01:19:58.049311 kernel: ACPI: DSDT 0x000000003FD41018 01DFCD (v02 MSFTVM DSDT01 00000001 INTL 20230628) Sep 6 01:19:58.049318 kernel: ACPI: DBG2 0x000000003FD5FB18 000072 (v00 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 01:19:58.049324 kernel: ACPI: GTDT 0x000000003FD5FD98 000060 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 01:19:58.049331 kernel: ACPI: OEM0 0x000000003FD5F098 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 01:19:58.049337 kernel: ACPI: SPCR 0x000000003FD5FA98 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 01:19:58.049343 kernel: ACPI: APIC 0x000000003FD5F818 0000FC (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 01:19:58.049350 kernel: ACPI: SRAT 0x000000003FD5F198 000234 (v03 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 01:19:58.049356 kernel: ACPI: PPTT 0x000000003FD5F418 000120 (v01 VRTUAL MICROSFT 00000000 MSFT 00000000) Sep 6 01:19:58.049362 kernel: ACPI: BGRT 0x000000003FD5FE98 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 01:19:58.049368 kernel: ACPI: SPCR: console: pl011,mmio32,0xeffec000,115200 Sep 6 01:19:58.049374 kernel: NUMA: Failed to initialise from firmware Sep 6 01:19:58.049380 kernel: NUMA: Faking a node at [mem 0x0000000000000000-0x00000001bfffffff] Sep 6 01:19:58.049386 kernel: NUMA: NODE_DATA [mem 0x1bf7f3900-0x1bf7f8fff] Sep 6 01:19:58.049392 kernel: Zone ranges: Sep 6 01:19:58.049398 kernel: DMA [mem 0x0000000000000000-0x00000000ffffffff] Sep 6 01:19:58.049404 kernel: DMA32 empty Sep 6 01:19:58.049410 kernel: Normal [mem 0x0000000100000000-0x00000001bfffffff] Sep 6 01:19:58.049418 kernel: Movable zone start for each node Sep 6 01:19:58.049423 kernel: Early memory node ranges Sep 6 01:19:58.049429 kernel: node 0: [mem 0x0000000000000000-0x00000000007fffff] Sep 6 01:19:58.049435 kernel: node 0: [mem 0x0000000000824000-0x000000003e54ffff] Sep 6 01:19:58.049441 kernel: node 0: [mem 0x000000003e550000-0x000000003e87ffff] Sep 6 01:19:58.049447 kernel: node 0: [mem 0x000000003e880000-0x000000003fc7ffff] Sep 6 01:19:58.049453 kernel: node 0: [mem 0x000000003fc80000-0x000000003fcfffff] Sep 6 01:19:58.049459 kernel: node 0: [mem 0x000000003fd00000-0x000000003fffffff] Sep 6 01:19:58.049465 kernel: node 0: [mem 0x0000000100000000-0x00000001bfffffff] Sep 6 01:19:58.049471 kernel: Initmem setup node 0 [mem 0x0000000000000000-0x00000001bfffffff] Sep 6 01:19:58.049477 kernel: On node 0, zone DMA: 36 pages in unavailable ranges Sep 6 01:19:58.049483 kernel: psci: probing for conduit method from ACPI. Sep 6 01:19:58.049493 kernel: psci: PSCIv1.1 detected in firmware. Sep 6 01:19:58.049499 kernel: psci: Using standard PSCI v0.2 function IDs Sep 6 01:19:58.049506 kernel: psci: MIGRATE_INFO_TYPE not supported. Sep 6 01:19:58.049512 kernel: psci: SMC Calling Convention v1.4 Sep 6 01:19:58.049518 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x0 -> Node -1 Sep 6 01:19:58.049526 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x1 -> Node -1 Sep 6 01:19:58.049532 kernel: percpu: Embedded 30 pages/cpu s82968 r8192 d31720 u122880 Sep 6 01:19:58.049538 kernel: pcpu-alloc: s82968 r8192 d31720 u122880 alloc=30*4096 Sep 6 01:19:58.049545 kernel: pcpu-alloc: [0] 0 [0] 1 Sep 6 01:19:58.049551 kernel: Detected PIPT I-cache on CPU0 Sep 6 01:19:58.049558 kernel: CPU features: detected: GIC system register CPU interface Sep 6 01:19:58.049564 kernel: CPU features: detected: Hardware dirty bit management Sep 6 01:19:58.049570 kernel: CPU features: detected: Spectre-BHB Sep 6 01:19:58.049577 kernel: CPU features: kernel page table isolation forced ON by KASLR Sep 6 01:19:58.049583 kernel: CPU features: detected: Kernel page table isolation (KPTI) Sep 6 01:19:58.049589 kernel: CPU features: detected: ARM erratum 1418040 Sep 6 01:19:58.049597 kernel: CPU features: detected: ARM erratum 1542419 (kernel portion) Sep 6 01:19:58.049603 kernel: CPU features: detected: SSBS not fully self-synchronizing Sep 6 01:19:58.049610 kernel: Built 1 zonelists, mobility grouping on. Total pages: 1032156 Sep 6 01:19:58.049616 kernel: Policy zone: Normal Sep 6 01:19:58.049624 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=5cb382ab59aa1336098b36da02e2d4491706a6fda80ee56c4ff8582cce9206a4 Sep 6 01:19:58.049631 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Sep 6 01:19:58.049637 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Sep 6 01:19:58.049644 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Sep 6 01:19:58.049650 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Sep 6 01:19:58.049657 kernel: software IO TLB: mapped [mem 0x000000003a550000-0x000000003e550000] (64MB) Sep 6 01:19:58.049664 kernel: Memory: 3986880K/4194160K available (9792K kernel code, 2094K rwdata, 7592K rodata, 36416K init, 777K bss, 207280K reserved, 0K cma-reserved) Sep 6 01:19:58.049671 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Sep 6 01:19:58.049678 kernel: trace event string verifier disabled Sep 6 01:19:58.049684 kernel: rcu: Preemptible hierarchical RCU implementation. Sep 6 01:19:58.049691 kernel: rcu: RCU event tracing is enabled. Sep 6 01:19:58.049698 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Sep 6 01:19:58.049704 kernel: Trampoline variant of Tasks RCU enabled. Sep 6 01:19:58.049710 kernel: Tracing variant of Tasks RCU enabled. Sep 6 01:19:58.049717 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Sep 6 01:19:58.049723 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Sep 6 01:19:58.049730 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Sep 6 01:19:58.049736 kernel: GICv3: 960 SPIs implemented Sep 6 01:19:58.049744 kernel: GICv3: 0 Extended SPIs implemented Sep 6 01:19:58.049750 kernel: GICv3: Distributor has no Range Selector support Sep 6 01:19:58.049756 kernel: Root IRQ handler: gic_handle_irq Sep 6 01:19:58.049763 kernel: GICv3: 16 PPIs implemented Sep 6 01:19:58.049769 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000effee000 Sep 6 01:19:58.049776 kernel: ITS: No ITS available, not enabling LPIs Sep 6 01:19:58.049782 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Sep 6 01:19:58.049789 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Sep 6 01:19:58.049795 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Sep 6 01:19:58.049802 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Sep 6 01:19:58.049808 kernel: Console: colour dummy device 80x25 Sep 6 01:19:58.049816 kernel: printk: console [tty1] enabled Sep 6 01:19:58.049823 kernel: ACPI: Core revision 20210730 Sep 6 01:19:58.049830 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Sep 6 01:19:58.049837 kernel: pid_max: default: 32768 minimum: 301 Sep 6 01:19:58.049843 kernel: LSM: Security Framework initializing Sep 6 01:19:58.049850 kernel: SELinux: Initializing. Sep 6 01:19:58.049856 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Sep 6 01:19:58.049863 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Sep 6 01:19:58.049870 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3a8030, hints 0xe, misc 0x31e1 Sep 6 01:19:58.049878 kernel: Hyper-V: Host Build 10.0.22477.1619-1-0 Sep 6 01:19:58.049890 kernel: rcu: Hierarchical SRCU implementation. Sep 6 01:19:58.049898 kernel: Remapping and enabling EFI services. Sep 6 01:19:58.049904 kernel: smp: Bringing up secondary CPUs ... Sep 6 01:19:58.059958 kernel: Detected PIPT I-cache on CPU1 Sep 6 01:19:58.059969 kernel: GICv3: CPU1: found redistributor 1 region 1:0x00000000f000e000 Sep 6 01:19:58.059976 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Sep 6 01:19:58.059983 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Sep 6 01:19:58.059991 kernel: smp: Brought up 1 node, 2 CPUs Sep 6 01:19:58.059998 kernel: SMP: Total of 2 processors activated. Sep 6 01:19:58.060010 kernel: CPU features: detected: 32-bit EL0 Support Sep 6 01:19:58.060017 kernel: CPU features: detected: Instruction cache invalidation not required for I/D coherence Sep 6 01:19:58.060024 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Sep 6 01:19:58.060031 kernel: CPU features: detected: CRC32 instructions Sep 6 01:19:58.060037 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Sep 6 01:19:58.060044 kernel: CPU features: detected: LSE atomic instructions Sep 6 01:19:58.060051 kernel: CPU features: detected: Privileged Access Never Sep 6 01:19:58.060057 kernel: CPU: All CPU(s) started at EL1 Sep 6 01:19:58.060064 kernel: alternatives: patching kernel code Sep 6 01:19:58.060073 kernel: devtmpfs: initialized Sep 6 01:19:58.060084 kernel: KASLR enabled Sep 6 01:19:58.060091 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Sep 6 01:19:58.060100 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Sep 6 01:19:58.060107 kernel: pinctrl core: initialized pinctrl subsystem Sep 6 01:19:58.060113 kernel: SMBIOS 3.1.0 present. Sep 6 01:19:58.060121 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 09/28/2024 Sep 6 01:19:58.060128 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Sep 6 01:19:58.060135 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Sep 6 01:19:58.060143 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Sep 6 01:19:58.060151 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Sep 6 01:19:58.060158 kernel: audit: initializing netlink subsys (disabled) Sep 6 01:19:58.060165 kernel: audit: type=2000 audit(0.092:1): state=initialized audit_enabled=0 res=1 Sep 6 01:19:58.060172 kernel: thermal_sys: Registered thermal governor 'step_wise' Sep 6 01:19:58.060179 kernel: cpuidle: using governor menu Sep 6 01:19:58.060186 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Sep 6 01:19:58.060194 kernel: ASID allocator initialised with 32768 entries Sep 6 01:19:58.060201 kernel: ACPI: bus type PCI registered Sep 6 01:19:58.060208 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Sep 6 01:19:58.060215 kernel: Serial: AMBA PL011 UART driver Sep 6 01:19:58.060222 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Sep 6 01:19:58.060229 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Sep 6 01:19:58.060236 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Sep 6 01:19:58.060244 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Sep 6 01:19:58.060251 kernel: cryptd: max_cpu_qlen set to 1000 Sep 6 01:19:58.060259 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Sep 6 01:19:58.060266 kernel: ACPI: Added _OSI(Module Device) Sep 6 01:19:58.060273 kernel: ACPI: Added _OSI(Processor Device) Sep 6 01:19:58.060280 kernel: ACPI: Added _OSI(Processor Aggregator Device) Sep 6 01:19:58.060287 kernel: ACPI: Added _OSI(Linux-Dell-Video) Sep 6 01:19:58.060294 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Sep 6 01:19:58.060301 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Sep 6 01:19:58.060308 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Sep 6 01:19:58.060315 kernel: ACPI: Interpreter enabled Sep 6 01:19:58.060323 kernel: ACPI: Using GIC for interrupt routing Sep 6 01:19:58.060330 kernel: ARMH0011:00: ttyAMA0 at MMIO 0xeffec000 (irq = 12, base_baud = 0) is a SBSA Sep 6 01:19:58.060337 kernel: printk: console [ttyAMA0] enabled Sep 6 01:19:58.060344 kernel: printk: bootconsole [pl11] disabled Sep 6 01:19:58.060352 kernel: ARMH0011:01: ttyAMA1 at MMIO 0xeffeb000 (irq = 13, base_baud = 0) is a SBSA Sep 6 01:19:58.060358 kernel: iommu: Default domain type: Translated Sep 6 01:19:58.060365 kernel: iommu: DMA domain TLB invalidation policy: strict mode Sep 6 01:19:58.060372 kernel: vgaarb: loaded Sep 6 01:19:58.060379 kernel: pps_core: LinuxPPS API ver. 1 registered Sep 6 01:19:58.060386 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Sep 6 01:19:58.060395 kernel: PTP clock support registered Sep 6 01:19:58.060402 kernel: Registered efivars operations Sep 6 01:19:58.060408 kernel: No ACPI PMU IRQ for CPU0 Sep 6 01:19:58.060415 kernel: No ACPI PMU IRQ for CPU1 Sep 6 01:19:58.060422 kernel: clocksource: Switched to clocksource arch_sys_counter Sep 6 01:19:58.060429 kernel: VFS: Disk quotas dquot_6.6.0 Sep 6 01:19:58.060436 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Sep 6 01:19:58.060444 kernel: pnp: PnP ACPI init Sep 6 01:19:58.060451 kernel: pnp: PnP ACPI: found 0 devices Sep 6 01:19:58.060459 kernel: NET: Registered PF_INET protocol family Sep 6 01:19:58.060466 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Sep 6 01:19:58.060473 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Sep 6 01:19:58.060480 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Sep 6 01:19:58.060487 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Sep 6 01:19:58.060494 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Sep 6 01:19:58.060501 kernel: TCP: Hash tables configured (established 32768 bind 32768) Sep 6 01:19:58.060508 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Sep 6 01:19:58.060516 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Sep 6 01:19:58.060523 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Sep 6 01:19:58.060530 kernel: PCI: CLS 0 bytes, default 64 Sep 6 01:19:58.060538 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 1 counters available Sep 6 01:19:58.060545 kernel: kvm [1]: HYP mode not available Sep 6 01:19:58.060551 kernel: Initialise system trusted keyrings Sep 6 01:19:58.060558 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Sep 6 01:19:58.060565 kernel: Key type asymmetric registered Sep 6 01:19:58.060572 kernel: Asymmetric key parser 'x509' registered Sep 6 01:19:58.060580 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Sep 6 01:19:58.060587 kernel: io scheduler mq-deadline registered Sep 6 01:19:58.060595 kernel: io scheduler kyber registered Sep 6 01:19:58.060601 kernel: io scheduler bfq registered Sep 6 01:19:58.060609 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Sep 6 01:19:58.060615 kernel: thunder_xcv, ver 1.0 Sep 6 01:19:58.060622 kernel: thunder_bgx, ver 1.0 Sep 6 01:19:58.060629 kernel: nicpf, ver 1.0 Sep 6 01:19:58.060636 kernel: nicvf, ver 1.0 Sep 6 01:19:58.060772 kernel: rtc-efi rtc-efi.0: registered as rtc0 Sep 6 01:19:58.060839 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-09-06T01:19:57 UTC (1757121597) Sep 6 01:19:58.060850 kernel: efifb: probing for efifb Sep 6 01:19:58.060857 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Sep 6 01:19:58.060864 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Sep 6 01:19:58.060871 kernel: efifb: scrolling: redraw Sep 6 01:19:58.060878 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Sep 6 01:19:58.060885 kernel: Console: switching to colour frame buffer device 128x48 Sep 6 01:19:58.060894 kernel: fb0: EFI VGA frame buffer device Sep 6 01:19:58.060901 kernel: SMCCC: SOC_ID: ARCH_SOC_ID not implemented, skipping .... Sep 6 01:19:58.060923 kernel: hid: raw HID events driver (C) Jiri Kosina Sep 6 01:19:58.060931 kernel: NET: Registered PF_INET6 protocol family Sep 6 01:19:58.060938 kernel: Segment Routing with IPv6 Sep 6 01:19:58.060945 kernel: In-situ OAM (IOAM) with IPv6 Sep 6 01:19:58.060952 kernel: NET: Registered PF_PACKET protocol family Sep 6 01:19:58.060959 kernel: Key type dns_resolver registered Sep 6 01:19:58.060966 kernel: registered taskstats version 1 Sep 6 01:19:58.060973 kernel: Loading compiled-in X.509 certificates Sep 6 01:19:58.060982 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.190-flatcar: 72ab5ba99c2368429c7a4d04fccfc5a39dd84386' Sep 6 01:19:58.060989 kernel: Key type .fscrypt registered Sep 6 01:19:58.060996 kernel: Key type fscrypt-provisioning registered Sep 6 01:19:58.061003 kernel: ima: No TPM chip found, activating TPM-bypass! Sep 6 01:19:58.061010 kernel: ima: Allocated hash algorithm: sha1 Sep 6 01:19:58.061017 kernel: ima: No architecture policies found Sep 6 01:19:58.061024 kernel: clk: Disabling unused clocks Sep 6 01:19:58.061031 kernel: Freeing unused kernel memory: 36416K Sep 6 01:19:58.061039 kernel: Run /init as init process Sep 6 01:19:58.061046 kernel: with arguments: Sep 6 01:19:58.061053 kernel: /init Sep 6 01:19:58.061060 kernel: with environment: Sep 6 01:19:58.061067 kernel: HOME=/ Sep 6 01:19:58.061074 kernel: TERM=linux Sep 6 01:19:58.061082 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Sep 6 01:19:58.061092 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 6 01:19:58.061103 systemd[1]: Detected virtualization microsoft. Sep 6 01:19:58.061110 systemd[1]: Detected architecture arm64. Sep 6 01:19:58.061119 systemd[1]: Running in initrd. Sep 6 01:19:58.061129 systemd[1]: No hostname configured, using default hostname. Sep 6 01:19:58.061136 systemd[1]: Hostname set to . Sep 6 01:19:58.061146 systemd[1]: Initializing machine ID from random generator. Sep 6 01:19:58.061155 systemd[1]: Queued start job for default target initrd.target. Sep 6 01:19:58.061163 systemd[1]: Started systemd-ask-password-console.path. Sep 6 01:19:58.061173 systemd[1]: Reached target cryptsetup.target. Sep 6 01:19:58.061181 systemd[1]: Reached target paths.target. Sep 6 01:19:58.061188 systemd[1]: Reached target slices.target. Sep 6 01:19:58.061197 systemd[1]: Reached target swap.target. Sep 6 01:19:58.061205 systemd[1]: Reached target timers.target. Sep 6 01:19:58.061214 systemd[1]: Listening on iscsid.socket. Sep 6 01:19:58.061224 systemd[1]: Listening on iscsiuio.socket. Sep 6 01:19:58.061233 systemd[1]: Listening on systemd-journald-audit.socket. Sep 6 01:19:58.061243 systemd[1]: Listening on systemd-journald-dev-log.socket. Sep 6 01:19:58.061252 systemd[1]: Listening on systemd-journald.socket. Sep 6 01:19:58.061261 systemd[1]: Listening on systemd-networkd.socket. Sep 6 01:19:58.061270 systemd[1]: Listening on systemd-udevd-control.socket. Sep 6 01:19:58.061278 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 6 01:19:58.061287 systemd[1]: Reached target sockets.target. Sep 6 01:19:58.061295 systemd[1]: Starting kmod-static-nodes.service... Sep 6 01:19:58.061305 systemd[1]: Finished network-cleanup.service. Sep 6 01:19:58.061313 systemd[1]: Starting systemd-fsck-usr.service... Sep 6 01:19:58.061323 systemd[1]: Starting systemd-journald.service... Sep 6 01:19:58.061332 systemd[1]: Starting systemd-modules-load.service... Sep 6 01:19:58.061342 systemd[1]: Starting systemd-resolved.service... Sep 6 01:19:58.061351 systemd[1]: Starting systemd-vconsole-setup.service... Sep 6 01:19:58.061364 systemd-journald[276]: Journal started Sep 6 01:19:58.061416 systemd-journald[276]: Runtime Journal (/run/log/journal/87712b1f974e4e279778528c7e3c2910) is 8.0M, max 78.5M, 70.5M free. Sep 6 01:19:58.053174 systemd-modules-load[277]: Inserted module 'overlay' Sep 6 01:19:58.095936 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Sep 6 01:19:58.096369 systemd-resolved[278]: Positive Trust Anchors: Sep 6 01:19:58.117660 kernel: Bridge firewalling registered Sep 6 01:19:58.117684 systemd[1]: Started systemd-journald.service. Sep 6 01:19:58.096384 systemd-resolved[278]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 6 01:19:58.117000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:58.096411 systemd-resolved[278]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 6 01:19:58.220530 kernel: audit: type=1130 audit(1757121598.117:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:58.220562 kernel: audit: type=1130 audit(1757121598.151:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:58.220574 kernel: SCSI subsystem initialized Sep 6 01:19:58.151000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:58.098685 systemd-resolved[278]: Defaulting to hostname 'linux'. Sep 6 01:19:58.241947 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Sep 6 01:19:58.241967 kernel: device-mapper: uevent: version 1.0.3 Sep 6 01:19:58.112885 systemd-modules-load[277]: Inserted module 'br_netfilter' Sep 6 01:19:58.282083 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Sep 6 01:19:58.282107 kernel: audit: type=1130 audit(1757121598.242:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:58.282117 kernel: audit: type=1130 audit(1757121598.276:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:58.242000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:58.276000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:58.118057 systemd[1]: Started systemd-resolved.service. Sep 6 01:19:58.329249 kernel: audit: type=1130 audit(1757121598.305:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:58.305000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:58.151774 systemd[1]: Finished kmod-static-nodes.service. Sep 6 01:19:58.270833 systemd-modules-load[277]: Inserted module 'dm_multipath' Sep 6 01:19:58.366620 kernel: audit: type=1130 audit(1757121598.334:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:58.334000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:58.270872 systemd[1]: Finished systemd-fsck-usr.service. Sep 6 01:19:58.276740 systemd[1]: Finished systemd-modules-load.service. Sep 6 01:19:58.305719 systemd[1]: Finished systemd-vconsole-setup.service. Sep 6 01:19:58.429105 kernel: audit: type=1130 audit(1757121598.405:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:58.405000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:58.334874 systemd[1]: Reached target nss-lookup.target. Sep 6 01:19:58.371075 systemd[1]: Starting dracut-cmdline-ask.service... Sep 6 01:19:58.465994 kernel: audit: type=1130 audit(1757121598.440:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:58.440000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:58.378321 systemd[1]: Starting systemd-sysctl.service... Sep 6 01:19:58.497313 kernel: audit: type=1130 audit(1757121598.469:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:58.469000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:58.384144 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Sep 6 01:19:58.505260 dracut-cmdline[299]: dracut-dracut-053 Sep 6 01:19:58.395136 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Sep 6 01:19:58.517516 dracut-cmdline[299]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=5cb382ab59aa1336098b36da02e2d4491706a6fda80ee56c4ff8582cce9206a4 Sep 6 01:19:58.429683 systemd[1]: Finished systemd-sysctl.service. Sep 6 01:19:58.440612 systemd[1]: Finished dracut-cmdline-ask.service. Sep 6 01:19:58.470093 systemd[1]: Starting dracut-cmdline.service... Sep 6 01:19:58.607933 kernel: Loading iSCSI transport class v2.0-870. Sep 6 01:19:58.623944 kernel: iscsi: registered transport (tcp) Sep 6 01:19:58.645453 kernel: iscsi: registered transport (qla4xxx) Sep 6 01:19:58.645518 kernel: QLogic iSCSI HBA Driver Sep 6 01:19:58.675617 systemd[1]: Finished dracut-cmdline.service. Sep 6 01:19:58.680000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:58.681600 systemd[1]: Starting dracut-pre-udev.service... Sep 6 01:19:58.736928 kernel: raid6: neonx8 gen() 13741 MB/s Sep 6 01:19:58.757919 kernel: raid6: neonx8 xor() 10821 MB/s Sep 6 01:19:58.778923 kernel: raid6: neonx4 gen() 13543 MB/s Sep 6 01:19:58.800921 kernel: raid6: neonx4 xor() 11301 MB/s Sep 6 01:19:58.821927 kernel: raid6: neonx2 gen() 12940 MB/s Sep 6 01:19:58.842936 kernel: raid6: neonx2 xor() 10233 MB/s Sep 6 01:19:58.864927 kernel: raid6: neonx1 gen() 10636 MB/s Sep 6 01:19:58.884922 kernel: raid6: neonx1 xor() 8786 MB/s Sep 6 01:19:58.905925 kernel: raid6: int64x8 gen() 6279 MB/s Sep 6 01:19:58.927918 kernel: raid6: int64x8 xor() 3542 MB/s Sep 6 01:19:58.948916 kernel: raid6: int64x4 gen() 7243 MB/s Sep 6 01:19:58.969917 kernel: raid6: int64x4 xor() 3862 MB/s Sep 6 01:19:58.991921 kernel: raid6: int64x2 gen() 6150 MB/s Sep 6 01:19:59.012916 kernel: raid6: int64x2 xor() 3322 MB/s Sep 6 01:19:59.033916 kernel: raid6: int64x1 gen() 5044 MB/s Sep 6 01:19:59.059823 kernel: raid6: int64x1 xor() 2647 MB/s Sep 6 01:19:59.059840 kernel: raid6: using algorithm neonx8 gen() 13741 MB/s Sep 6 01:19:59.059849 kernel: raid6: .... xor() 10821 MB/s, rmw enabled Sep 6 01:19:59.064381 kernel: raid6: using neon recovery algorithm Sep 6 01:19:59.086482 kernel: xor: measuring software checksum speed Sep 6 01:19:59.086496 kernel: 8regs : 17249 MB/sec Sep 6 01:19:59.090693 kernel: 32regs : 20676 MB/sec Sep 6 01:19:59.094689 kernel: arm64_neon : 27927 MB/sec Sep 6 01:19:59.094699 kernel: xor: using function: arm64_neon (27927 MB/sec) Sep 6 01:19:59.156924 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Sep 6 01:19:59.166727 systemd[1]: Finished dracut-pre-udev.service. Sep 6 01:19:59.171000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:59.176000 audit: BPF prog-id=7 op=LOAD Sep 6 01:19:59.176000 audit: BPF prog-id=8 op=LOAD Sep 6 01:19:59.177517 systemd[1]: Starting systemd-udevd.service... Sep 6 01:19:59.193738 systemd-udevd[475]: Using default interface naming scheme 'v252'. Sep 6 01:19:59.199636 systemd[1]: Started systemd-udevd.service. Sep 6 01:19:59.205000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:59.211447 systemd[1]: Starting dracut-pre-trigger.service... Sep 6 01:19:59.226500 dracut-pre-trigger[496]: rd.md=0: removing MD RAID activation Sep 6 01:19:59.254244 systemd[1]: Finished dracut-pre-trigger.service. Sep 6 01:19:59.259000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:59.260314 systemd[1]: Starting systemd-udev-trigger.service... Sep 6 01:19:59.296469 systemd[1]: Finished systemd-udev-trigger.service. Sep 6 01:19:59.307000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:59.340941 kernel: hv_vmbus: Vmbus version:5.3 Sep 6 01:19:59.355935 kernel: hv_vmbus: registering driver hid_hyperv Sep 6 01:19:59.356941 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input0 Sep 6 01:19:59.356976 kernel: hid-generic 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Sep 6 01:19:59.359980 kernel: hv_vmbus: registering driver hyperv_keyboard Sep 6 01:19:59.362927 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/MSFT1000:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input1 Sep 6 01:19:59.412762 kernel: hv_vmbus: registering driver hv_storvsc Sep 6 01:19:59.412829 kernel: hv_vmbus: registering driver hv_netvsc Sep 6 01:19:59.422016 kernel: scsi host0: storvsc_host_t Sep 6 01:19:59.422216 kernel: scsi host1: storvsc_host_t Sep 6 01:19:59.430761 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Sep 6 01:19:59.439987 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Sep 6 01:19:59.458815 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Sep 6 01:19:59.482701 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Sep 6 01:19:59.482723 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Sep 6 01:19:59.492174 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Sep 6 01:19:59.492285 kernel: sd 0:0:0:0: [sda] Write Protect is off Sep 6 01:19:59.492367 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Sep 6 01:19:59.492448 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Sep 6 01:19:59.492528 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Sep 6 01:19:59.492615 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Sep 6 01:19:59.492631 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Sep 6 01:19:59.540686 kernel: hv_netvsc 000d3af9-bbbc-000d-3af9-bbbc000d3af9 eth0: VF slot 1 added Sep 6 01:19:59.550941 kernel: hv_vmbus: registering driver hv_pci Sep 6 01:19:59.561800 kernel: hv_pci 03b17fb9-61bb-4f6a-8811-7d5aa634647f: PCI VMBus probing: Using version 0x10004 Sep 6 01:19:59.650693 kernel: hv_pci 03b17fb9-61bb-4f6a-8811-7d5aa634647f: PCI host bridge to bus 61bb:00 Sep 6 01:19:59.650800 kernel: pci_bus 61bb:00: root bus resource [mem 0xfc0000000-0xfc00fffff window] Sep 6 01:19:59.650899 kernel: pci_bus 61bb:00: No busn resource found for root bus, will use [bus 00-ff] Sep 6 01:19:59.651004 kernel: pci 61bb:00:02.0: [15b3:1018] type 00 class 0x020000 Sep 6 01:19:59.651107 kernel: pci 61bb:00:02.0: reg 0x10: [mem 0xfc0000000-0xfc00fffff 64bit pref] Sep 6 01:19:59.651188 kernel: pci 61bb:00:02.0: enabling Extended Tags Sep 6 01:19:59.651266 kernel: pci 61bb:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at 61bb:00:02.0 (capable of 126.016 Gb/s with 8.0 GT/s PCIe x16 link) Sep 6 01:19:59.651344 kernel: pci_bus 61bb:00: busn_res: [bus 00-ff] end is updated to 00 Sep 6 01:19:59.651416 kernel: pci 61bb:00:02.0: BAR 0: assigned [mem 0xfc0000000-0xfc00fffff 64bit pref] Sep 6 01:19:59.691413 kernel: mlx5_core 61bb:00:02.0: enabling device (0000 -> 0002) Sep 6 01:20:00.014677 kernel: mlx5_core 61bb:00:02.0: firmware version: 16.31.2424 Sep 6 01:20:00.014794 kernel: mlx5_core 61bb:00:02.0: MLX5E: StrdRq(1) RqSz(8) StrdSz(2048) RxCqeCmprss(0) Sep 6 01:20:00.014880 kernel: hv_netvsc 000d3af9-bbbc-000d-3af9-bbbc000d3af9 eth0: VF registering: eth1 Sep 6 01:20:00.014994 kernel: mlx5_core 61bb:00:02.0 eth1: joined to eth0 Sep 6 01:20:00.023933 kernel: mlx5_core 61bb:00:02.0 enP25019s1: renamed from eth1 Sep 6 01:20:00.155626 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Sep 6 01:20:00.176935 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/sda6 scanned by (udev-worker) (534) Sep 6 01:20:00.190222 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 6 01:20:00.311876 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Sep 6 01:20:00.318617 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Sep 6 01:20:00.349539 systemd[1]: Starting disk-uuid.service... Sep 6 01:20:00.451658 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Sep 6 01:20:01.381932 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Sep 6 01:20:01.384019 disk-uuid[602]: The operation has completed successfully. Sep 6 01:20:01.448544 systemd[1]: disk-uuid.service: Deactivated successfully. Sep 6 01:20:01.452000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:01.452000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:01.448667 systemd[1]: Finished disk-uuid.service. Sep 6 01:20:01.454163 systemd[1]: Starting verity-setup.service... Sep 6 01:20:01.524974 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Sep 6 01:20:01.716207 systemd[1]: Found device dev-mapper-usr.device. Sep 6 01:20:01.722361 systemd[1]: Mounting sysusr-usr.mount... Sep 6 01:20:01.735000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:01.730741 systemd[1]: Finished verity-setup.service. Sep 6 01:20:01.793937 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Sep 6 01:20:01.794227 systemd[1]: Mounted sysusr-usr.mount. Sep 6 01:20:01.802331 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Sep 6 01:20:01.803135 systemd[1]: Starting ignition-setup.service... Sep 6 01:20:01.820285 systemd[1]: Starting parse-ip-for-networkd.service... Sep 6 01:20:01.846769 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Sep 6 01:20:01.846836 kernel: BTRFS info (device sda6): using free space tree Sep 6 01:20:01.851784 kernel: BTRFS info (device sda6): has skinny extents Sep 6 01:20:01.908697 systemd[1]: mnt-oem.mount: Deactivated successfully. Sep 6 01:20:01.920844 systemd[1]: Finished parse-ip-for-networkd.service. Sep 6 01:20:01.925000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:01.930000 audit: BPF prog-id=9 op=LOAD Sep 6 01:20:01.931487 systemd[1]: Starting systemd-networkd.service... Sep 6 01:20:01.956308 systemd-networkd[876]: lo: Link UP Sep 6 01:20:01.956320 systemd-networkd[876]: lo: Gained carrier Sep 6 01:20:01.965000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:01.956757 systemd-networkd[876]: Enumeration completed Sep 6 01:20:01.960322 systemd[1]: Started systemd-networkd.service. Sep 6 01:20:01.960410 systemd-networkd[876]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 6 01:20:01.965802 systemd[1]: Reached target network.target. Sep 6 01:20:01.979866 systemd[1]: Starting iscsiuio.service... Sep 6 01:20:02.003000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:01.995714 systemd[1]: Started iscsiuio.service. Sep 6 01:20:02.036841 kernel: kauditd_printk_skb: 13 callbacks suppressed Sep 6 01:20:02.036865 kernel: audit: type=1130 audit(1757121602.003:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:02.012324 systemd[1]: Starting iscsid.service... Sep 6 01:20:02.040000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:02.060754 iscsid[881]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Sep 6 01:20:02.060754 iscsid[881]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Sep 6 01:20:02.060754 iscsid[881]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Sep 6 01:20:02.060754 iscsid[881]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Sep 6 01:20:02.060754 iscsid[881]: If using hardware iscsi like qla4xxx this message can be ignored. Sep 6 01:20:02.060754 iscsid[881]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Sep 6 01:20:02.060754 iscsid[881]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Sep 6 01:20:02.200981 kernel: audit: type=1130 audit(1757121602.040:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:02.201008 kernel: mlx5_core 61bb:00:02.0 enP25019s1: Link up Sep 6 01:20:02.201193 kernel: audit: type=1130 audit(1757121602.133:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:02.201206 kernel: audit: type=1130 audit(1757121602.173:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:02.133000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:02.173000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:02.034050 systemd[1]: Started iscsid.service. Sep 6 01:20:02.072269 systemd[1]: Starting dracut-initqueue.service... Sep 6 01:20:02.229500 kernel: hv_netvsc 000d3af9-bbbc-000d-3af9-bbbc000d3af9 eth0: Data path switched to VF: enP25019s1 Sep 6 01:20:02.229657 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 6 01:20:02.120398 systemd[1]: Finished ignition-setup.service. Sep 6 01:20:02.158020 systemd[1]: Finished dracut-initqueue.service. Sep 6 01:20:02.173679 systemd[1]: Reached target remote-fs-pre.target. Sep 6 01:20:02.201324 systemd[1]: Reached target remote-cryptsetup.target. Sep 6 01:20:02.272000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:02.224183 systemd[1]: Reached target remote-fs.target. Sep 6 01:20:02.294880 kernel: audit: type=1130 audit(1757121602.272:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:02.229011 systemd-networkd[876]: enP25019s1: Link UP Sep 6 01:20:02.229115 systemd-networkd[876]: eth0: Link UP Sep 6 01:20:02.229256 systemd-networkd[876]: eth0: Gained carrier Sep 6 01:20:02.235318 systemd[1]: Starting dracut-pre-mount.service... Sep 6 01:20:02.244155 systemd-networkd[876]: enP25019s1: Gained carrier Sep 6 01:20:02.245971 systemd[1]: Starting ignition-fetch-offline.service... Sep 6 01:20:02.257392 systemd-networkd[876]: eth0: DHCPv4 address 10.200.20.26/24, gateway 10.200.20.1 acquired from 168.63.129.16 Sep 6 01:20:02.267821 systemd[1]: Finished dracut-pre-mount.service. Sep 6 01:20:04.079013 systemd-networkd[876]: eth0: Gained IPv6LL Sep 6 01:20:04.382156 ignition[893]: Ignition 2.14.0 Sep 6 01:20:04.382172 ignition[893]: Stage: fetch-offline Sep 6 01:20:04.382247 ignition[893]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 01:20:04.382270 ignition[893]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 6 01:20:04.441443 ignition[893]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 6 01:20:04.441581 ignition[893]: parsed url from cmdline: "" Sep 6 01:20:04.441584 ignition[893]: no config URL provided Sep 6 01:20:04.441589 ignition[893]: reading system config file "/usr/lib/ignition/user.ign" Sep 6 01:20:04.463000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.454143 systemd[1]: Finished ignition-fetch-offline.service. Sep 6 01:20:04.491376 kernel: audit: type=1130 audit(1757121604.463:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.441597 ignition[893]: no config at "/usr/lib/ignition/user.ign" Sep 6 01:20:04.485724 systemd[1]: Starting ignition-fetch.service... Sep 6 01:20:04.441603 ignition[893]: failed to fetch config: resource requires networking Sep 6 01:20:04.441948 ignition[893]: Ignition finished successfully Sep 6 01:20:04.496805 ignition[903]: Ignition 2.14.0 Sep 6 01:20:04.496812 ignition[903]: Stage: fetch Sep 6 01:20:04.496955 ignition[903]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 01:20:04.496974 ignition[903]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 6 01:20:04.499864 ignition[903]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 6 01:20:04.502518 ignition[903]: parsed url from cmdline: "" Sep 6 01:20:04.502773 ignition[903]: no config URL provided Sep 6 01:20:04.502782 ignition[903]: reading system config file "/usr/lib/ignition/user.ign" Sep 6 01:20:04.502802 ignition[903]: no config at "/usr/lib/ignition/user.ign" Sep 6 01:20:04.502852 ignition[903]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Sep 6 01:20:04.627665 ignition[903]: GET result: OK Sep 6 01:20:04.627768 ignition[903]: config has been read from IMDS userdata Sep 6 01:20:04.633610 unknown[903]: fetched base config from "system" Sep 6 01:20:04.627821 ignition[903]: parsing config with SHA512: e307accc9ca7508c75c70850960f347051e92b0275fe30531c7692208a6280eb25d7924d0d2b7b2d5928556469afeed36c6c692bfb1026ccb43d8fbb5e644614 Sep 6 01:20:04.633616 unknown[903]: fetched base config from "system" Sep 6 01:20:04.644000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.634149 ignition[903]: fetch: fetch complete Sep 6 01:20:04.672524 kernel: audit: type=1130 audit(1757121604.644:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.633622 unknown[903]: fetched user config from "azure" Sep 6 01:20:04.634154 ignition[903]: fetch: fetch passed Sep 6 01:20:04.636783 systemd[1]: Finished ignition-fetch.service. Sep 6 01:20:04.634197 ignition[903]: Ignition finished successfully Sep 6 01:20:04.646146 systemd[1]: Starting ignition-kargs.service... Sep 6 01:20:04.718590 kernel: audit: type=1130 audit(1757121604.695:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.695000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.676010 ignition[909]: Ignition 2.14.0 Sep 6 01:20:04.691283 systemd[1]: Finished ignition-kargs.service. Sep 6 01:20:04.723000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.676017 ignition[909]: Stage: kargs Sep 6 01:20:04.759107 kernel: audit: type=1130 audit(1757121604.723:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.696751 systemd[1]: Starting ignition-disks.service... Sep 6 01:20:04.676132 ignition[909]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 01:20:04.719247 systemd[1]: Finished ignition-disks.service. Sep 6 01:20:04.676151 ignition[909]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 6 01:20:04.723838 systemd[1]: Reached target initrd-root-device.target. Sep 6 01:20:04.678693 ignition[909]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 6 01:20:04.747984 systemd[1]: Reached target local-fs-pre.target. Sep 6 01:20:04.686700 ignition[909]: kargs: kargs passed Sep 6 01:20:04.756344 systemd[1]: Reached target local-fs.target. Sep 6 01:20:04.686755 ignition[909]: Ignition finished successfully Sep 6 01:20:04.763617 systemd[1]: Reached target sysinit.target. Sep 6 01:20:04.706676 ignition[915]: Ignition 2.14.0 Sep 6 01:20:04.771968 systemd[1]: Reached target basic.target. Sep 6 01:20:04.706683 ignition[915]: Stage: disks Sep 6 01:20:04.782963 systemd[1]: Starting systemd-fsck-root.service... Sep 6 01:20:04.706790 ignition[915]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 01:20:04.706809 ignition[915]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 6 01:20:04.709753 ignition[915]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 6 01:20:04.711820 ignition[915]: disks: disks passed Sep 6 01:20:04.855439 systemd-fsck[923]: ROOT: clean, 629/7326000 files, 481083/7359488 blocks Sep 6 01:20:04.857000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.711872 ignition[915]: Ignition finished successfully Sep 6 01:20:04.886026 kernel: audit: type=1130 audit(1757121604.857:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.853444 systemd[1]: Finished systemd-fsck-root.service. Sep 6 01:20:04.885312 systemd[1]: Mounting sysroot.mount... Sep 6 01:20:04.912938 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Sep 6 01:20:04.913697 systemd[1]: Mounted sysroot.mount. Sep 6 01:20:04.921176 systemd[1]: Reached target initrd-root-fs.target. Sep 6 01:20:04.954860 systemd[1]: Mounting sysroot-usr.mount... Sep 6 01:20:04.959662 systemd[1]: Starting flatcar-metadata-hostname.service... Sep 6 01:20:04.967332 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Sep 6 01:20:04.967364 systemd[1]: Reached target ignition-diskful.target. Sep 6 01:20:04.973230 systemd[1]: Mounted sysroot-usr.mount. Sep 6 01:20:05.036099 systemd[1]: Mounting sysroot-usr-share-oem.mount... Sep 6 01:20:05.042851 systemd[1]: Starting initrd-setup-root.service... Sep 6 01:20:05.066931 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/sda6 scanned by mount (933) Sep 6 01:20:05.079230 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Sep 6 01:20:05.079272 kernel: BTRFS info (device sda6): using free space tree Sep 6 01:20:05.083927 kernel: BTRFS info (device sda6): has skinny extents Sep 6 01:20:05.084062 initrd-setup-root[938]: cut: /sysroot/etc/passwd: No such file or directory Sep 6 01:20:05.095086 systemd[1]: Mounted sysroot-usr-share-oem.mount. Sep 6 01:20:05.109957 initrd-setup-root[964]: cut: /sysroot/etc/group: No such file or directory Sep 6 01:20:05.132004 initrd-setup-root[972]: cut: /sysroot/etc/shadow: No such file or directory Sep 6 01:20:05.141719 initrd-setup-root[980]: cut: /sysroot/etc/gshadow: No such file or directory Sep 6 01:20:05.559350 systemd[1]: Finished initrd-setup-root.service. Sep 6 01:20:05.563000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:05.564942 systemd[1]: Starting ignition-mount.service... Sep 6 01:20:05.574091 systemd[1]: Starting sysroot-boot.service... Sep 6 01:20:05.586006 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Sep 6 01:20:05.586122 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Sep 6 01:20:05.624854 ignition[1001]: INFO : Ignition 2.14.0 Sep 6 01:20:05.624854 ignition[1001]: INFO : Stage: mount Sep 6 01:20:05.624854 ignition[1001]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 01:20:05.624854 ignition[1001]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 6 01:20:05.624854 ignition[1001]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 6 01:20:05.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:05.640000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:05.620211 systemd[1]: Finished sysroot-boot.service. Sep 6 01:20:05.672715 ignition[1001]: INFO : mount: mount passed Sep 6 01:20:05.672715 ignition[1001]: INFO : Ignition finished successfully Sep 6 01:20:05.633134 systemd[1]: Finished ignition-mount.service. Sep 6 01:20:06.071582 coreos-metadata[932]: Sep 06 01:20:06.071 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Sep 6 01:20:06.082519 coreos-metadata[932]: Sep 06 01:20:06.082 INFO Fetch successful Sep 6 01:20:06.117524 coreos-metadata[932]: Sep 06 01:20:06.117 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Sep 6 01:20:06.129701 coreos-metadata[932]: Sep 06 01:20:06.129 INFO Fetch successful Sep 6 01:20:06.146120 coreos-metadata[932]: Sep 06 01:20:06.146 INFO wrote hostname ci-3510.3.8-n-b5f8f4c6c5 to /sysroot/etc/hostname Sep 6 01:20:06.155270 systemd[1]: Finished flatcar-metadata-hostname.service. Sep 6 01:20:06.160000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.161592 systemd[1]: Starting ignition-files.service... Sep 6 01:20:06.177074 systemd[1]: Mounting sysroot-usr-share-oem.mount... Sep 6 01:20:06.196925 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by mount (1011) Sep 6 01:20:06.196957 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Sep 6 01:20:06.208448 kernel: BTRFS info (device sda6): using free space tree Sep 6 01:20:06.208460 kernel: BTRFS info (device sda6): has skinny extents Sep 6 01:20:06.217409 systemd[1]: Mounted sysroot-usr-share-oem.mount. Sep 6 01:20:06.233949 ignition[1030]: INFO : Ignition 2.14.0 Sep 6 01:20:06.238021 ignition[1030]: INFO : Stage: files Sep 6 01:20:06.241799 ignition[1030]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 01:20:06.241799 ignition[1030]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 6 01:20:06.261732 ignition[1030]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 6 01:20:06.261732 ignition[1030]: DEBUG : files: compiled without relabeling support, skipping Sep 6 01:20:06.261732 ignition[1030]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Sep 6 01:20:06.261732 ignition[1030]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Sep 6 01:20:06.328895 ignition[1030]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Sep 6 01:20:06.336409 ignition[1030]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Sep 6 01:20:06.336409 ignition[1030]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Sep 6 01:20:06.329367 unknown[1030]: wrote ssh authorized keys file for user: core Sep 6 01:20:06.356015 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Sep 6 01:20:06.356015 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.13.2-linux-arm64.tar.gz: attempt #1 Sep 6 01:20:06.518055 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Sep 6 01:20:06.767078 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Sep 6 01:20:06.778040 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Sep 6 01:20:06.778040 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Sep 6 01:20:06.778040 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Sep 6 01:20:06.778040 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Sep 6 01:20:06.778040 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 6 01:20:06.778040 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 6 01:20:06.778040 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 6 01:20:06.778040 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 6 01:20:06.778040 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Sep 6 01:20:06.778040 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Sep 6 01:20:06.778040 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Sep 6 01:20:06.778040 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Sep 6 01:20:06.778040 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Sep 6 01:20:06.934869 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(a): oem config not found in "/usr/share/oem", looking on oem partition Sep 6 01:20:06.934869 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem702756176" Sep 6 01:20:06.934869 ignition[1030]: CRITICAL : files: createFilesystemsFiles: createFiles: op(a): op(b): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem702756176": device or resource busy Sep 6 01:20:06.934869 ignition[1030]: ERROR : files: createFilesystemsFiles: createFiles: op(a): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem702756176", trying btrfs: device or resource busy Sep 6 01:20:06.934869 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem702756176" Sep 6 01:20:06.934869 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem702756176" Sep 6 01:20:06.934869 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [started] unmounting "/mnt/oem702756176" Sep 6 01:20:06.934869 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [finished] unmounting "/mnt/oem702756176" Sep 6 01:20:06.934869 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Sep 6 01:20:06.934869 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Sep 6 01:20:06.934869 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(e): oem config not found in "/usr/share/oem", looking on oem partition Sep 6 01:20:06.934869 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(f): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1725434508" Sep 6 01:20:06.934869 ignition[1030]: CRITICAL : files: createFilesystemsFiles: createFiles: op(e): op(f): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1725434508": device or resource busy Sep 6 01:20:06.934869 ignition[1030]: ERROR : files: createFilesystemsFiles: createFiles: op(e): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1725434508", trying btrfs: device or resource busy Sep 6 01:20:07.100070 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(10): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1725434508" Sep 6 01:20:07.100070 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(10): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1725434508" Sep 6 01:20:07.100070 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(11): [started] unmounting "/mnt/oem1725434508" Sep 6 01:20:07.100070 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(11): [finished] unmounting "/mnt/oem1725434508" Sep 6 01:20:07.100070 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Sep 6 01:20:07.100070 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(12): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Sep 6 01:20:07.100070 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(12): GET https://extensions.flatcar.org/extensions/kubernetes-v1.31.8-arm64.raw: attempt #1 Sep 6 01:20:07.401861 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(12): GET result: OK Sep 6 01:20:07.801429 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(12): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Sep 6 01:20:07.801429 ignition[1030]: INFO : files: op(13): [started] processing unit "waagent.service" Sep 6 01:20:07.801429 ignition[1030]: INFO : files: op(13): [finished] processing unit "waagent.service" Sep 6 01:20:07.801429 ignition[1030]: INFO : files: op(14): [started] processing unit "nvidia.service" Sep 6 01:20:07.801429 ignition[1030]: INFO : files: op(14): [finished] processing unit "nvidia.service" Sep 6 01:20:07.801429 ignition[1030]: INFO : files: op(15): [started] processing unit "prepare-helm.service" Sep 6 01:20:07.933041 kernel: kauditd_printk_skb: 4 callbacks suppressed Sep 6 01:20:07.933073 kernel: audit: type=1130 audit(1757121607.826:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:07.933084 kernel: audit: type=1130 audit(1757121607.879:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:07.933094 kernel: audit: type=1131 audit(1757121607.903:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:07.826000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:07.879000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:07.903000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:07.815114 systemd[1]: Finished ignition-files.service. Sep 6 01:20:07.938831 ignition[1030]: INFO : files: op(15): op(16): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 6 01:20:07.938831 ignition[1030]: INFO : files: op(15): op(16): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 6 01:20:07.938831 ignition[1030]: INFO : files: op(15): [finished] processing unit "prepare-helm.service" Sep 6 01:20:07.938831 ignition[1030]: INFO : files: op(17): [started] setting preset to enabled for "waagent.service" Sep 6 01:20:07.938831 ignition[1030]: INFO : files: op(17): [finished] setting preset to enabled for "waagent.service" Sep 6 01:20:07.938831 ignition[1030]: INFO : files: op(18): [started] setting preset to enabled for "nvidia.service" Sep 6 01:20:07.938831 ignition[1030]: INFO : files: op(18): [finished] setting preset to enabled for "nvidia.service" Sep 6 01:20:07.938831 ignition[1030]: INFO : files: op(19): [started] setting preset to enabled for "prepare-helm.service" Sep 6 01:20:07.938831 ignition[1030]: INFO : files: op(19): [finished] setting preset to enabled for "prepare-helm.service" Sep 6 01:20:07.938831 ignition[1030]: INFO : files: createResultFile: createFiles: op(1a): [started] writing file "/sysroot/etc/.ignition-result.json" Sep 6 01:20:07.938831 ignition[1030]: INFO : files: createResultFile: createFiles: op(1a): [finished] writing file "/sysroot/etc/.ignition-result.json" Sep 6 01:20:07.938831 ignition[1030]: INFO : files: files passed Sep 6 01:20:07.938831 ignition[1030]: INFO : Ignition finished successfully Sep 6 01:20:08.124791 kernel: audit: type=1130 audit(1757121607.934:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.124820 kernel: audit: type=1130 audit(1757121608.013:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.124837 kernel: audit: type=1131 audit(1757121608.038:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:07.934000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.013000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.038000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:07.839416 systemd[1]: Starting initrd-setup-root-after-ignition.service... Sep 6 01:20:07.860972 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Sep 6 01:20:08.134000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.161249 initrd-setup-root-after-ignition[1055]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Sep 6 01:20:08.174248 kernel: audit: type=1130 audit(1757121608.134:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:07.862056 systemd[1]: Starting ignition-quench.service... Sep 6 01:20:07.875434 systemd[1]: ignition-quench.service: Deactivated successfully. Sep 6 01:20:07.875538 systemd[1]: Finished ignition-quench.service. Sep 6 01:20:07.904603 systemd[1]: Finished initrd-setup-root-after-ignition.service. Sep 6 01:20:07.935114 systemd[1]: Reached target ignition-complete.target. Sep 6 01:20:08.212000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:07.970232 systemd[1]: Starting initrd-parse-etc.service... Sep 6 01:20:08.003411 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Sep 6 01:20:08.251297 kernel: audit: type=1131 audit(1757121608.212:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.003523 systemd[1]: Finished initrd-parse-etc.service. Sep 6 01:20:08.039271 systemd[1]: Reached target initrd-fs.target. Sep 6 01:20:08.067427 systemd[1]: Reached target initrd.target. Sep 6 01:20:08.080615 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Sep 6 01:20:08.088444 systemd[1]: Starting dracut-pre-pivot.service... Sep 6 01:20:08.125006 systemd[1]: Finished dracut-pre-pivot.service. Sep 6 01:20:08.135576 systemd[1]: Starting initrd-cleanup.service... Sep 6 01:20:08.176839 systemd[1]: Stopped target nss-lookup.target. Sep 6 01:20:08.183972 systemd[1]: Stopped target remote-cryptsetup.target. Sep 6 01:20:08.194081 systemd[1]: Stopped target timers.target. Sep 6 01:20:08.202753 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Sep 6 01:20:08.346000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.202862 systemd[1]: Stopped dracut-pre-pivot.service. Sep 6 01:20:08.236933 systemd[1]: Stopped target initrd.target. Sep 6 01:20:08.382834 kernel: audit: type=1131 audit(1757121608.346:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.246067 systemd[1]: Stopped target basic.target. Sep 6 01:20:08.387000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.255480 systemd[1]: Stopped target ignition-complete.target. Sep 6 01:20:08.264816 systemd[1]: Stopped target ignition-diskful.target. Sep 6 01:20:08.422455 kernel: audit: type=1131 audit(1757121608.387:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.417000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.273986 systemd[1]: Stopped target initrd-root-device.target. Sep 6 01:20:08.426000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.283229 systemd[1]: Stopped target remote-fs.target. Sep 6 01:20:08.436000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.294578 systemd[1]: Stopped target remote-fs-pre.target. Sep 6 01:20:08.303653 systemd[1]: Stopped target sysinit.target. Sep 6 01:20:08.312109 systemd[1]: Stopped target local-fs.target. Sep 6 01:20:08.464556 iscsid[881]: iscsid shutting down. Sep 6 01:20:08.471001 ignition[1068]: INFO : Ignition 2.14.0 Sep 6 01:20:08.471001 ignition[1068]: INFO : Stage: umount Sep 6 01:20:08.471001 ignition[1068]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 01:20:08.471001 ignition[1068]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 6 01:20:08.471001 ignition[1068]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 6 01:20:08.471001 ignition[1068]: INFO : umount: umount passed Sep 6 01:20:08.471001 ignition[1068]: INFO : Ignition finished successfully Sep 6 01:20:08.481000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.502000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.522000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.539000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.320714 systemd[1]: Stopped target local-fs-pre.target. Sep 6 01:20:08.550000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.329888 systemd[1]: Stopped target swap.target. Sep 6 01:20:08.559000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.338537 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Sep 6 01:20:08.568000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.338649 systemd[1]: Stopped dracut-pre-mount.service. Sep 6 01:20:08.578000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.370099 systemd[1]: Stopped target cryptsetup.target. Sep 6 01:20:08.589000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.378968 systemd[1]: dracut-initqueue.service: Deactivated successfully. Sep 6 01:20:08.379082 systemd[1]: Stopped dracut-initqueue.service. Sep 6 01:20:08.407689 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Sep 6 01:20:08.407821 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Sep 6 01:20:08.417831 systemd[1]: ignition-files.service: Deactivated successfully. Sep 6 01:20:08.417936 systemd[1]: Stopped ignition-files.service. Sep 6 01:20:08.648000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.426857 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Sep 6 01:20:08.661000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.426970 systemd[1]: Stopped flatcar-metadata-hostname.service. Sep 6 01:20:08.440460 systemd[1]: Stopping ignition-mount.service... Sep 6 01:20:08.451038 systemd[1]: Stopping iscsid.service... Sep 6 01:20:08.472900 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Sep 6 01:20:08.473104 systemd[1]: Stopped kmod-static-nodes.service. Sep 6 01:20:08.708000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.708000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.482528 systemd[1]: Stopping sysroot-boot.service... Sep 6 01:20:08.717000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.498253 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Sep 6 01:20:08.726000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.726000 audit: BPF prog-id=6 op=UNLOAD Sep 6 01:20:08.498421 systemd[1]: Stopped systemd-udev-trigger.service. Sep 6 01:20:08.503485 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Sep 6 01:20:08.750000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.503580 systemd[1]: Stopped dracut-pre-trigger.service. Sep 6 01:20:08.761000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.525417 systemd[1]: iscsid.service: Deactivated successfully. Sep 6 01:20:08.770000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.525529 systemd[1]: Stopped iscsid.service. Sep 6 01:20:08.541551 systemd[1]: sysroot-boot.mount: Deactivated successfully. Sep 6 01:20:08.542121 systemd[1]: ignition-mount.service: Deactivated successfully. Sep 6 01:20:08.542211 systemd[1]: Stopped ignition-mount.service. Sep 6 01:20:08.550683 systemd[1]: ignition-disks.service: Deactivated successfully. Sep 6 01:20:08.805000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.550789 systemd[1]: Stopped ignition-disks.service. Sep 6 01:20:08.560212 systemd[1]: ignition-kargs.service: Deactivated successfully. Sep 6 01:20:08.560313 systemd[1]: Stopped ignition-kargs.service. Sep 6 01:20:08.835000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.568454 systemd[1]: ignition-fetch.service: Deactivated successfully. Sep 6 01:20:08.845000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.568540 systemd[1]: Stopped ignition-fetch.service. Sep 6 01:20:08.855000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.578389 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Sep 6 01:20:08.578478 systemd[1]: Stopped ignition-fetch-offline.service. Sep 6 01:20:08.590338 systemd[1]: Stopped target paths.target. Sep 6 01:20:08.880000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.594695 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Sep 6 01:20:08.905242 kernel: hv_netvsc 000d3af9-bbbc-000d-3af9-bbbc000d3af9 eth0: Data path switched from VF: enP25019s1 Sep 6 01:20:08.898000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.898000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.604168 systemd[1]: Stopped systemd-ask-password-console.path. Sep 6 01:20:08.609331 systemd[1]: Stopped target slices.target. Sep 6 01:20:08.617844 systemd[1]: Stopped target sockets.target. Sep 6 01:20:08.629133 systemd[1]: iscsid.socket: Deactivated successfully. Sep 6 01:20:08.629224 systemd[1]: Closed iscsid.socket. Sep 6 01:20:08.638220 systemd[1]: ignition-setup.service: Deactivated successfully. Sep 6 01:20:08.638313 systemd[1]: Stopped ignition-setup.service. Sep 6 01:20:08.649100 systemd[1]: Stopping iscsiuio.service... Sep 6 01:20:08.653513 systemd[1]: iscsiuio.service: Deactivated successfully. Sep 6 01:20:08.653598 systemd[1]: Stopped iscsiuio.service. Sep 6 01:20:08.661693 systemd[1]: Stopped target network.target. Sep 6 01:20:08.672207 systemd[1]: iscsiuio.socket: Deactivated successfully. Sep 6 01:20:08.672248 systemd[1]: Closed iscsiuio.socket. Sep 6 01:20:08.680955 systemd[1]: Stopping systemd-networkd.service... Sep 6 01:20:08.689344 systemd[1]: Stopping systemd-resolved.service... Sep 6 01:20:08.698428 systemd[1]: initrd-cleanup.service: Deactivated successfully. Sep 6 01:20:08.698527 systemd[1]: Finished initrd-cleanup.service. Sep 6 01:20:08.703253 systemd-networkd[876]: eth0: DHCPv6 lease lost Sep 6 01:20:08.980000 audit: BPF prog-id=9 op=UNLOAD Sep 6 01:20:08.709476 systemd[1]: systemd-resolved.service: Deactivated successfully. Sep 6 01:20:08.709574 systemd[1]: Stopped systemd-resolved.service. Sep 6 01:20:08.718332 systemd[1]: systemd-networkd.service: Deactivated successfully. Sep 6 01:20:08.718427 systemd[1]: Stopped systemd-networkd.service. Sep 6 01:20:08.727565 systemd[1]: systemd-networkd.socket: Deactivated successfully. Sep 6 01:20:08.727605 systemd[1]: Closed systemd-networkd.socket. Sep 6 01:20:08.737051 systemd[1]: Stopping network-cleanup.service... Sep 6 01:20:08.746178 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Sep 6 01:20:08.746242 systemd[1]: Stopped parse-ip-for-networkd.service. Sep 6 01:20:08.751810 systemd[1]: systemd-sysctl.service: Deactivated successfully. Sep 6 01:20:08.751864 systemd[1]: Stopped systemd-sysctl.service. Sep 6 01:20:09.036000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:08.766001 systemd[1]: systemd-modules-load.service: Deactivated successfully. Sep 6 01:20:08.766053 systemd[1]: Stopped systemd-modules-load.service. Sep 6 01:20:08.775520 systemd[1]: Stopping systemd-udevd.service... Sep 6 01:20:08.783035 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Sep 6 01:20:08.792486 systemd[1]: systemd-udevd.service: Deactivated successfully. Sep 6 01:20:08.792645 systemd[1]: Stopped systemd-udevd.service. Sep 6 01:20:08.806309 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Sep 6 01:20:08.806358 systemd[1]: Closed systemd-udevd-control.socket. Sep 6 01:20:08.815697 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Sep 6 01:20:08.815733 systemd[1]: Closed systemd-udevd-kernel.socket. Sep 6 01:20:08.824705 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Sep 6 01:20:08.824761 systemd[1]: Stopped dracut-pre-udev.service. Sep 6 01:20:08.835886 systemd[1]: dracut-cmdline.service: Deactivated successfully. Sep 6 01:20:08.836011 systemd[1]: Stopped dracut-cmdline.service. Sep 6 01:20:08.845807 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Sep 6 01:20:08.845861 systemd[1]: Stopped dracut-cmdline-ask.service. Sep 6 01:20:08.859653 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Sep 6 01:20:08.870893 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Sep 6 01:20:08.870993 systemd[1]: Stopped systemd-vconsole-setup.service. Sep 6 01:20:08.881325 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Sep 6 01:20:08.881455 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Sep 6 01:20:09.027620 systemd[1]: network-cleanup.service: Deactivated successfully. Sep 6 01:20:09.027748 systemd[1]: Stopped network-cleanup.service. Sep 6 01:20:09.183850 systemd[1]: sysroot-boot.service: Deactivated successfully. Sep 6 01:20:09.183981 systemd[1]: Stopped sysroot-boot.service. Sep 6 01:20:09.196000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:09.197412 systemd[1]: Reached target initrd-switch-root.target. Sep 6 01:20:09.207061 systemd[1]: initrd-setup-root.service: Deactivated successfully. Sep 6 01:20:09.207132 systemd[1]: Stopped initrd-setup-root.service. Sep 6 01:20:09.216000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:09.217881 systemd[1]: Starting initrd-switch-root.service... Sep 6 01:20:09.233859 systemd[1]: Switching root. Sep 6 01:20:09.256533 systemd-journald[276]: Journal stopped Sep 6 01:20:18.926519 systemd-journald[276]: Received SIGTERM from PID 1 (systemd). Sep 6 01:20:18.926540 kernel: SELinux: Class mctp_socket not defined in policy. Sep 6 01:20:18.926553 kernel: SELinux: Class anon_inode not defined in policy. Sep 6 01:20:18.926564 kernel: SELinux: the above unknown classes and permissions will be allowed Sep 6 01:20:18.926572 kernel: SELinux: policy capability network_peer_controls=1 Sep 6 01:20:18.926580 kernel: SELinux: policy capability open_perms=1 Sep 6 01:20:18.926589 kernel: SELinux: policy capability extended_socket_class=1 Sep 6 01:20:18.926597 kernel: SELinux: policy capability always_check_network=0 Sep 6 01:20:18.926605 kernel: SELinux: policy capability cgroup_seclabel=1 Sep 6 01:20:18.926615 kernel: SELinux: policy capability nnp_nosuid_transition=1 Sep 6 01:20:18.926624 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Sep 6 01:20:18.926632 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Sep 6 01:20:18.926641 systemd[1]: Successfully loaded SELinux policy in 248.619ms. Sep 6 01:20:18.926651 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 21.537ms. Sep 6 01:20:18.926663 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 6 01:20:18.926672 systemd[1]: Detected virtualization microsoft. Sep 6 01:20:18.926681 systemd[1]: Detected architecture arm64. Sep 6 01:20:18.926690 systemd[1]: Detected first boot. Sep 6 01:20:18.926699 systemd[1]: Hostname set to . Sep 6 01:20:18.926708 systemd[1]: Initializing machine ID from random generator. Sep 6 01:20:18.926717 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Sep 6 01:20:18.926725 kernel: kauditd_printk_skb: 40 callbacks suppressed Sep 6 01:20:18.926736 kernel: audit: type=1400 audit(1757121612.863:88): avc: denied { associate } for pid=1101 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Sep 6 01:20:18.926747 kernel: audit: type=1300 audit(1757121612.863:88): arch=c00000b7 syscall=5 success=yes exit=0 a0=400014588c a1=40000c6df8 a2=40000cd0c0 a3=32 items=0 ppid=1084 pid=1101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:18.926757 kernel: audit: type=1327 audit(1757121612.863:88): proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 6 01:20:18.926766 kernel: audit: type=1400 audit(1757121612.873:89): avc: denied { associate } for pid=1101 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Sep 6 01:20:18.926776 kernel: audit: type=1300 audit(1757121612.873:89): arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=4000145969 a2=1ed a3=0 items=2 ppid=1084 pid=1101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:18.926785 kernel: audit: type=1307 audit(1757121612.873:89): cwd="/" Sep 6 01:20:18.926794 kernel: audit: type=1302 audit(1757121612.873:89): item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:18.926804 kernel: audit: type=1302 audit(1757121612.873:89): item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:18.926813 kernel: audit: type=1327 audit(1757121612.873:89): proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 6 01:20:18.926822 systemd[1]: Populated /etc with preset unit settings. Sep 6 01:20:18.926832 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 6 01:20:18.926841 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 6 01:20:18.926852 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 6 01:20:18.926861 kernel: audit: type=1334 audit(1757121618.203:90): prog-id=12 op=LOAD Sep 6 01:20:18.926870 kernel: audit: type=1334 audit(1757121618.203:91): prog-id=3 op=UNLOAD Sep 6 01:20:18.926878 kernel: audit: type=1334 audit(1757121618.203:92): prog-id=13 op=LOAD Sep 6 01:20:18.926887 kernel: audit: type=1334 audit(1757121618.203:93): prog-id=14 op=LOAD Sep 6 01:20:18.926896 systemd[1]: initrd-switch-root.service: Deactivated successfully. Sep 6 01:20:18.926917 kernel: audit: type=1334 audit(1757121618.203:94): prog-id=4 op=UNLOAD Sep 6 01:20:18.926928 kernel: audit: type=1334 audit(1757121618.203:95): prog-id=5 op=UNLOAD Sep 6 01:20:18.926938 systemd[1]: Stopped initrd-switch-root.service. Sep 6 01:20:18.926948 kernel: audit: type=1334 audit(1757121618.211:96): prog-id=15 op=LOAD Sep 6 01:20:18.926958 kernel: audit: type=1334 audit(1757121618.211:97): prog-id=12 op=UNLOAD Sep 6 01:20:18.926967 kernel: audit: type=1334 audit(1757121618.217:98): prog-id=16 op=LOAD Sep 6 01:20:18.926975 kernel: audit: type=1334 audit(1757121618.223:99): prog-id=17 op=LOAD Sep 6 01:20:18.926984 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Sep 6 01:20:18.926994 systemd[1]: Created slice system-addon\x2dconfig.slice. Sep 6 01:20:18.927005 systemd[1]: Created slice system-addon\x2drun.slice. Sep 6 01:20:18.927014 systemd[1]: Created slice system-getty.slice. Sep 6 01:20:18.927024 systemd[1]: Created slice system-modprobe.slice. Sep 6 01:20:18.927033 systemd[1]: Created slice system-serial\x2dgetty.slice. Sep 6 01:20:18.927042 systemd[1]: Created slice system-system\x2dcloudinit.slice. Sep 6 01:20:18.927052 systemd[1]: Created slice system-systemd\x2dfsck.slice. Sep 6 01:20:18.927082 systemd[1]: Created slice user.slice. Sep 6 01:20:18.927093 systemd[1]: Started systemd-ask-password-console.path. Sep 6 01:20:18.927102 systemd[1]: Started systemd-ask-password-wall.path. Sep 6 01:20:18.927113 systemd[1]: Set up automount boot.automount. Sep 6 01:20:18.927123 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Sep 6 01:20:18.927132 systemd[1]: Stopped target initrd-switch-root.target. Sep 6 01:20:18.927141 systemd[1]: Stopped target initrd-fs.target. Sep 6 01:20:18.927151 systemd[1]: Stopped target initrd-root-fs.target. Sep 6 01:20:18.927160 systemd[1]: Reached target integritysetup.target. Sep 6 01:20:18.927169 systemd[1]: Reached target remote-cryptsetup.target. Sep 6 01:20:18.927180 systemd[1]: Reached target remote-fs.target. Sep 6 01:20:18.927190 systemd[1]: Reached target slices.target. Sep 6 01:20:18.927200 systemd[1]: Reached target swap.target. Sep 6 01:20:18.927209 systemd[1]: Reached target torcx.target. Sep 6 01:20:18.927218 systemd[1]: Reached target veritysetup.target. Sep 6 01:20:18.927228 systemd[1]: Listening on systemd-coredump.socket. Sep 6 01:20:18.927237 systemd[1]: Listening on systemd-initctl.socket. Sep 6 01:20:18.927246 systemd[1]: Listening on systemd-networkd.socket. Sep 6 01:20:18.927257 systemd[1]: Listening on systemd-udevd-control.socket. Sep 6 01:20:18.927267 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 6 01:20:18.927277 systemd[1]: Listening on systemd-userdbd.socket. Sep 6 01:20:18.927286 systemd[1]: Mounting dev-hugepages.mount... Sep 6 01:20:18.927296 systemd[1]: Mounting dev-mqueue.mount... Sep 6 01:20:18.927306 systemd[1]: Mounting media.mount... Sep 6 01:20:18.927317 systemd[1]: Mounting sys-kernel-debug.mount... Sep 6 01:20:18.927327 systemd[1]: Mounting sys-kernel-tracing.mount... Sep 6 01:20:18.927336 systemd[1]: Mounting tmp.mount... Sep 6 01:20:18.927346 systemd[1]: Starting flatcar-tmpfiles.service... Sep 6 01:20:18.927356 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 01:20:18.927366 systemd[1]: Starting kmod-static-nodes.service... Sep 6 01:20:18.927376 systemd[1]: Starting modprobe@configfs.service... Sep 6 01:20:18.927386 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 01:20:18.927396 systemd[1]: Starting modprobe@drm.service... Sep 6 01:20:18.927407 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 01:20:18.927416 systemd[1]: Starting modprobe@fuse.service... Sep 6 01:20:18.927426 systemd[1]: Starting modprobe@loop.service... Sep 6 01:20:18.927436 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Sep 6 01:20:18.927445 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Sep 6 01:20:18.927456 systemd[1]: Stopped systemd-fsck-root.service. Sep 6 01:20:18.927465 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Sep 6 01:20:18.927475 systemd[1]: Stopped systemd-fsck-usr.service. Sep 6 01:20:18.927484 systemd[1]: Stopped systemd-journald.service. Sep 6 01:20:18.927494 kernel: fuse: init (API version 7.34) Sep 6 01:20:18.927503 systemd[1]: systemd-journald.service: Consumed 3.263s CPU time. Sep 6 01:20:18.927513 systemd[1]: Starting systemd-journald.service... Sep 6 01:20:18.927522 kernel: loop: module loaded Sep 6 01:20:18.927531 systemd[1]: Starting systemd-modules-load.service... Sep 6 01:20:18.927540 systemd[1]: Starting systemd-network-generator.service... Sep 6 01:20:18.927567 systemd[1]: Starting systemd-remount-fs.service... Sep 6 01:20:18.927578 systemd[1]: Starting systemd-udev-trigger.service... Sep 6 01:20:18.927587 systemd[1]: verity-setup.service: Deactivated successfully. Sep 6 01:20:18.927598 systemd[1]: Stopped verity-setup.service. Sep 6 01:20:18.927609 systemd[1]: Mounted dev-hugepages.mount. Sep 6 01:20:18.927618 systemd[1]: Mounted dev-mqueue.mount. Sep 6 01:20:18.927628 systemd[1]: Mounted media.mount. Sep 6 01:20:18.927637 systemd[1]: Mounted sys-kernel-debug.mount. Sep 6 01:20:18.927646 systemd[1]: Mounted sys-kernel-tracing.mount. Sep 6 01:20:18.927656 systemd[1]: Mounted tmp.mount. Sep 6 01:20:18.927665 systemd[1]: Finished flatcar-tmpfiles.service. Sep 6 01:20:18.927679 systemd-journald[1207]: Journal started Sep 6 01:20:18.927720 systemd-journald[1207]: Runtime Journal (/run/log/journal/bab26a2f53a94bcc88e85579f6d2e9f0) is 8.0M, max 78.5M, 70.5M free. Sep 6 01:20:11.085000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Sep 6 01:20:11.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 6 01:20:11.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 6 01:20:11.770000 audit: BPF prog-id=10 op=LOAD Sep 6 01:20:11.770000 audit: BPF prog-id=10 op=UNLOAD Sep 6 01:20:11.770000 audit: BPF prog-id=11 op=LOAD Sep 6 01:20:11.770000 audit: BPF prog-id=11 op=UNLOAD Sep 6 01:20:12.863000 audit[1101]: AVC avc: denied { associate } for pid=1101 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Sep 6 01:20:12.863000 audit[1101]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=400014588c a1=40000c6df8 a2=40000cd0c0 a3=32 items=0 ppid=1084 pid=1101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:12.863000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 6 01:20:12.873000 audit[1101]: AVC avc: denied { associate } for pid=1101 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Sep 6 01:20:12.873000 audit[1101]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=4000145969 a2=1ed a3=0 items=2 ppid=1084 pid=1101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:12.873000 audit: CWD cwd="/" Sep 6 01:20:12.873000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:12.873000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:12.873000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 6 01:20:18.203000 audit: BPF prog-id=12 op=LOAD Sep 6 01:20:18.203000 audit: BPF prog-id=3 op=UNLOAD Sep 6 01:20:18.203000 audit: BPF prog-id=13 op=LOAD Sep 6 01:20:18.203000 audit: BPF prog-id=14 op=LOAD Sep 6 01:20:18.203000 audit: BPF prog-id=4 op=UNLOAD Sep 6 01:20:18.203000 audit: BPF prog-id=5 op=UNLOAD Sep 6 01:20:18.211000 audit: BPF prog-id=15 op=LOAD Sep 6 01:20:18.211000 audit: BPF prog-id=12 op=UNLOAD Sep 6 01:20:18.217000 audit: BPF prog-id=16 op=LOAD Sep 6 01:20:18.223000 audit: BPF prog-id=17 op=LOAD Sep 6 01:20:18.223000 audit: BPF prog-id=13 op=UNLOAD Sep 6 01:20:18.223000 audit: BPF prog-id=14 op=UNLOAD Sep 6 01:20:18.224000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:18.258000 audit: BPF prog-id=15 op=UNLOAD Sep 6 01:20:18.275000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:18.275000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:18.751000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:18.767000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:18.781000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:18.781000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:18.788000 audit: BPF prog-id=18 op=LOAD Sep 6 01:20:18.788000 audit: BPF prog-id=19 op=LOAD Sep 6 01:20:18.788000 audit: BPF prog-id=20 op=LOAD Sep 6 01:20:18.788000 audit: BPF prog-id=16 op=UNLOAD Sep 6 01:20:18.788000 audit: BPF prog-id=17 op=UNLOAD Sep 6 01:20:18.874000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:18.923000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Sep 6 01:20:18.923000 audit[1207]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=3 a1=fffff5c04ba0 a2=4000 a3=1 items=0 ppid=1 pid=1207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:18.923000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Sep 6 01:20:18.202574 systemd[1]: Queued start job for default target multi-user.target. Sep 6 01:20:12.821661 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-09-06T01:20:12Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 6 01:20:18.202587 systemd[1]: Unnecessary job was removed for dev-sda6.device. Sep 6 01:20:12.822039 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-09-06T01:20:12Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 6 01:20:18.225000 systemd[1]: systemd-journald.service: Deactivated successfully. Sep 6 01:20:12.822057 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-09-06T01:20:12Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 6 01:20:18.225377 systemd[1]: systemd-journald.service: Consumed 3.263s CPU time. Sep 6 01:20:12.822093 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-09-06T01:20:12Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Sep 6 01:20:12.822103 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-09-06T01:20:12Z" level=debug msg="skipped missing lower profile" missing profile=oem Sep 6 01:20:12.822132 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-09-06T01:20:12Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Sep 6 01:20:12.822144 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-09-06T01:20:12Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Sep 6 01:20:12.822342 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-09-06T01:20:12Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Sep 6 01:20:12.822374 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-09-06T01:20:12Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 6 01:20:12.822386 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-09-06T01:20:12Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 6 01:20:12.849703 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-09-06T01:20:12Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Sep 6 01:20:12.849761 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-09-06T01:20:12Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Sep 6 01:20:12.849783 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-09-06T01:20:12Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Sep 6 01:20:12.849798 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-09-06T01:20:12Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Sep 6 01:20:12.849818 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-09-06T01:20:12Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Sep 6 01:20:12.849831 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-09-06T01:20:12Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Sep 6 01:20:17.316494 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-09-06T01:20:17Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 6 01:20:17.316755 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-09-06T01:20:17Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 6 01:20:17.316853 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-09-06T01:20:17Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 6 01:20:17.317040 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-09-06T01:20:17Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 6 01:20:17.317090 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-09-06T01:20:17Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Sep 6 01:20:17.317147 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-09-06T01:20:17Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Sep 6 01:20:18.936000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:18.947128 systemd[1]: Started systemd-journald.service. Sep 6 01:20:18.947000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:18.953000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:18.948078 systemd[1]: Finished kmod-static-nodes.service. Sep 6 01:20:18.953732 systemd[1]: modprobe@configfs.service: Deactivated successfully. Sep 6 01:20:18.954185 systemd[1]: Finished modprobe@configfs.service. Sep 6 01:20:18.958000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:18.958000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:18.959443 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 01:20:18.959584 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 01:20:18.963000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:18.963000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:18.964395 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 6 01:20:18.964523 systemd[1]: Finished modprobe@drm.service. Sep 6 01:20:18.968000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:18.968000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:18.969339 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 01:20:18.969459 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 01:20:18.974000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:18.974000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:18.974578 systemd[1]: modprobe@fuse.service: Deactivated successfully. Sep 6 01:20:18.974696 systemd[1]: Finished modprobe@fuse.service. Sep 6 01:20:18.978000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:18.978000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:18.979382 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 01:20:18.979501 systemd[1]: Finished modprobe@loop.service. Sep 6 01:20:18.983000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:18.983000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:18.984491 systemd[1]: Finished systemd-modules-load.service. Sep 6 01:20:18.989000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:18.989674 systemd[1]: Finished systemd-network-generator.service. Sep 6 01:20:18.994000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:18.995177 systemd[1]: Finished systemd-remount-fs.service. Sep 6 01:20:18.999000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:19.000376 systemd[1]: Finished systemd-udev-trigger.service. Sep 6 01:20:19.004000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:19.005676 systemd[1]: Reached target network-pre.target. Sep 6 01:20:19.011294 systemd[1]: Mounting sys-fs-fuse-connections.mount... Sep 6 01:20:19.017152 systemd[1]: Mounting sys-kernel-config.mount... Sep 6 01:20:19.021160 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Sep 6 01:20:19.022895 systemd[1]: Starting systemd-hwdb-update.service... Sep 6 01:20:19.028347 systemd[1]: Starting systemd-journal-flush.service... Sep 6 01:20:19.033038 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 6 01:20:19.034241 systemd[1]: Starting systemd-random-seed.service... Sep 6 01:20:19.038513 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 6 01:20:19.039626 systemd[1]: Starting systemd-sysctl.service... Sep 6 01:20:19.044788 systemd[1]: Starting systemd-sysusers.service... Sep 6 01:20:19.050079 systemd[1]: Starting systemd-udev-settle.service... Sep 6 01:20:19.056376 systemd[1]: Mounted sys-fs-fuse-connections.mount. Sep 6 01:20:19.061286 systemd[1]: Mounted sys-kernel-config.mount. Sep 6 01:20:19.068133 udevadm[1222]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Sep 6 01:20:19.091183 systemd-journald[1207]: Time spent on flushing to /var/log/journal/bab26a2f53a94bcc88e85579f6d2e9f0 is 14.071ms for 1095 entries. Sep 6 01:20:19.091183 systemd-journald[1207]: System Journal (/var/log/journal/bab26a2f53a94bcc88e85579f6d2e9f0) is 8.0M, max 2.6G, 2.6G free. Sep 6 01:20:19.157629 systemd-journald[1207]: Received client request to flush runtime journal. Sep 6 01:20:19.110000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:19.135000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:19.106132 systemd[1]: Finished systemd-random-seed.service. Sep 6 01:20:19.111333 systemd[1]: Reached target first-boot-complete.target. Sep 6 01:20:19.131771 systemd[1]: Finished systemd-sysctl.service. Sep 6 01:20:19.158576 systemd[1]: Finished systemd-journal-flush.service. Sep 6 01:20:19.163000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:19.541890 systemd[1]: Finished systemd-sysusers.service. Sep 6 01:20:19.546000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:19.972405 systemd[1]: Finished systemd-hwdb-update.service. Sep 6 01:20:19.976000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:19.977000 audit: BPF prog-id=21 op=LOAD Sep 6 01:20:19.977000 audit: BPF prog-id=22 op=LOAD Sep 6 01:20:19.977000 audit: BPF prog-id=7 op=UNLOAD Sep 6 01:20:19.977000 audit: BPF prog-id=8 op=UNLOAD Sep 6 01:20:19.979048 systemd[1]: Starting systemd-udevd.service... Sep 6 01:20:19.998241 systemd-udevd[1225]: Using default interface naming scheme 'v252'. Sep 6 01:20:20.141093 systemd[1]: Started systemd-udevd.service. Sep 6 01:20:20.149000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:20.150000 audit: BPF prog-id=23 op=LOAD Sep 6 01:20:20.152406 systemd[1]: Starting systemd-networkd.service... Sep 6 01:20:20.179756 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Sep 6 01:20:20.216000 audit: BPF prog-id=24 op=LOAD Sep 6 01:20:20.216000 audit: BPF prog-id=25 op=LOAD Sep 6 01:20:20.216000 audit: BPF prog-id=26 op=LOAD Sep 6 01:20:20.218462 systemd[1]: Starting systemd-userdbd.service... Sep 6 01:20:20.237949 kernel: mousedev: PS/2 mouse device common for all mice Sep 6 01:20:20.281000 audit[1226]: AVC avc: denied { confidentiality } for pid=1226 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Sep 6 01:20:20.298760 kernel: hv_vmbus: registering driver hv_balloon Sep 6 01:20:20.298844 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Sep 6 01:20:20.298861 kernel: hv_balloon: Memory hot add disabled on ARM64 Sep 6 01:20:20.300134 systemd[1]: Started systemd-userdbd.service. Sep 6 01:20:20.303000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:20.321018 kernel: hv_vmbus: registering driver hyperv_fb Sep 6 01:20:20.321119 kernel: hv_utils: Registering HyperV Utility Driver Sep 6 01:20:20.321136 kernel: hv_vmbus: registering driver hv_utils Sep 6 01:20:20.321160 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Sep 6 01:20:20.281000 audit[1226]: SYSCALL arch=c00000b7 syscall=105 success=yes exit=0 a0=aaab116c0640 a1=aa2c a2=ffff986924b0 a3=aaab11621010 items=12 ppid=1225 pid=1226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:20.281000 audit: CWD cwd="/" Sep 6 01:20:20.281000 audit: PATH item=0 name=(null) inode=6397 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:20.281000 audit: PATH item=1 name=(null) inode=10152 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:20.281000 audit: PATH item=2 name=(null) inode=10152 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:20.281000 audit: PATH item=3 name=(null) inode=10153 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:20.281000 audit: PATH item=4 name=(null) inode=10152 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:20.281000 audit: PATH item=5 name=(null) inode=10154 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:20.281000 audit: PATH item=6 name=(null) inode=10152 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:20.281000 audit: PATH item=7 name=(null) inode=10155 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:20.281000 audit: PATH item=8 name=(null) inode=10152 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:20.281000 audit: PATH item=9 name=(null) inode=10156 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:20.281000 audit: PATH item=10 name=(null) inode=10152 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:20.281000 audit: PATH item=11 name=(null) inode=10157 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:20.281000 audit: PROCTITLE proctitle="(udev-worker)" Sep 6 01:20:20.334938 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Sep 6 01:20:20.335025 kernel: hv_utils: Heartbeat IC version 3.0 Sep 6 01:20:20.658123 kernel: hv_utils: Shutdown IC version 3.2 Sep 6 01:20:20.658200 kernel: hv_utils: TimeSync IC version 4.0 Sep 6 01:20:20.662795 kernel: Console: switching to colour dummy device 80x25 Sep 6 01:20:20.674142 kernel: Console: switching to colour frame buffer device 128x48 Sep 6 01:20:20.836496 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 6 01:20:20.842430 systemd[1]: Finished systemd-udev-settle.service. Sep 6 01:20:20.846000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:20.848918 systemd[1]: Starting lvm2-activation-early.service... Sep 6 01:20:20.860681 systemd-networkd[1246]: lo: Link UP Sep 6 01:20:20.860954 systemd-networkd[1246]: lo: Gained carrier Sep 6 01:20:20.861538 systemd-networkd[1246]: Enumeration completed Sep 6 01:20:20.861739 systemd[1]: Started systemd-networkd.service. Sep 6 01:20:20.865000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:20.867598 systemd[1]: Starting systemd-networkd-wait-online.service... Sep 6 01:20:20.894407 systemd-networkd[1246]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 6 01:20:20.947137 kernel: mlx5_core 61bb:00:02.0 enP25019s1: Link up Sep 6 01:20:20.991136 kernel: hv_netvsc 000d3af9-bbbc-000d-3af9-bbbc000d3af9 eth0: Data path switched to VF: enP25019s1 Sep 6 01:20:20.992293 systemd-networkd[1246]: enP25019s1: Link UP Sep 6 01:20:20.992484 systemd-networkd[1246]: eth0: Link UP Sep 6 01:20:20.992541 systemd-networkd[1246]: eth0: Gained carrier Sep 6 01:20:20.998575 systemd-networkd[1246]: enP25019s1: Gained carrier Sep 6 01:20:21.010237 systemd-networkd[1246]: eth0: DHCPv4 address 10.200.20.26/24, gateway 10.200.20.1 acquired from 168.63.129.16 Sep 6 01:20:21.112339 lvm[1303]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 6 01:20:21.150108 systemd[1]: Finished lvm2-activation-early.service. Sep 6 01:20:21.154000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.155495 systemd[1]: Reached target cryptsetup.target. Sep 6 01:20:21.161367 systemd[1]: Starting lvm2-activation.service... Sep 6 01:20:21.165859 lvm[1305]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 6 01:20:21.190067 systemd[1]: Finished lvm2-activation.service. Sep 6 01:20:21.193000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.195102 systemd[1]: Reached target local-fs-pre.target. Sep 6 01:20:21.199963 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Sep 6 01:20:21.199992 systemd[1]: Reached target local-fs.target. Sep 6 01:20:21.204467 systemd[1]: Reached target machines.target. Sep 6 01:20:21.210297 systemd[1]: Starting ldconfig.service... Sep 6 01:20:21.214175 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 01:20:21.214246 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 01:20:21.215578 systemd[1]: Starting systemd-boot-update.service... Sep 6 01:20:21.221019 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Sep 6 01:20:21.227964 systemd[1]: Starting systemd-machine-id-commit.service... Sep 6 01:20:21.233833 systemd[1]: Starting systemd-sysext.service... Sep 6 01:20:21.269569 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1307 (bootctl) Sep 6 01:20:21.271036 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Sep 6 01:20:21.314673 systemd[1]: Unmounting usr-share-oem.mount... Sep 6 01:20:21.323020 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Sep 6 01:20:21.328000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.345023 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Sep 6 01:20:21.345699 systemd[1]: Finished systemd-machine-id-commit.service. Sep 6 01:20:21.350000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.361889 systemd[1]: usr-share-oem.mount: Deactivated successfully. Sep 6 01:20:21.362068 systemd[1]: Unmounted usr-share-oem.mount. Sep 6 01:20:21.417203 kernel: loop0: detected capacity change from 0 to 203944 Sep 6 01:20:21.460152 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Sep 6 01:20:21.480183 kernel: loop1: detected capacity change from 0 to 203944 Sep 6 01:20:21.487631 (sd-sysext)[1319]: Using extensions 'kubernetes'. Sep 6 01:20:21.488902 (sd-sysext)[1319]: Merged extensions into '/usr'. Sep 6 01:20:21.502149 systemd-fsck[1315]: fsck.fat 4.2 (2021-01-31) Sep 6 01:20:21.502149 systemd-fsck[1315]: /dev/sda1: 236 files, 117310/258078 clusters Sep 6 01:20:21.505094 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Sep 6 01:20:21.511000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.513784 systemd[1]: Mounting boot.mount... Sep 6 01:20:21.522299 systemd[1]: Mounting usr-share-oem.mount... Sep 6 01:20:21.526783 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 01:20:21.528211 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 01:20:21.533604 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 01:20:21.539347 systemd[1]: Starting modprobe@loop.service... Sep 6 01:20:21.544591 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 01:20:21.544757 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 01:20:21.547694 systemd[1]: Mounted boot.mount. Sep 6 01:20:21.551797 systemd[1]: Mounted usr-share-oem.mount. Sep 6 01:20:21.556699 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 01:20:21.556834 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 01:20:21.560000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.560000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.561979 systemd[1]: Finished systemd-boot-update.service. Sep 6 01:20:21.565000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.567311 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 01:20:21.567439 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 01:20:21.571000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.571000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.573006 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 01:20:21.573138 systemd[1]: Finished modprobe@loop.service. Sep 6 01:20:21.576000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.576000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.580065 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 6 01:20:21.580123 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 6 01:20:21.581035 systemd[1]: Finished systemd-sysext.service. Sep 6 01:20:21.584000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.586862 systemd[1]: Starting ensure-sysext.service... Sep 6 01:20:21.592422 systemd[1]: Starting systemd-tmpfiles-setup.service... Sep 6 01:20:21.600615 systemd[1]: Reloading. Sep 6 01:20:21.650281 /usr/lib/systemd/system-generators/torcx-generator[1349]: time="2025-09-06T01:20:21Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 6 01:20:21.650314 /usr/lib/systemd/system-generators/torcx-generator[1349]: time="2025-09-06T01:20:21Z" level=info msg="torcx already run" Sep 6 01:20:21.732514 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 6 01:20:21.732535 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 6 01:20:21.736437 systemd-tmpfiles[1330]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Sep 6 01:20:21.748799 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 6 01:20:21.808661 systemd-tmpfiles[1330]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Sep 6 01:20:21.811000 audit: BPF prog-id=27 op=LOAD Sep 6 01:20:21.811000 audit: BPF prog-id=18 op=UNLOAD Sep 6 01:20:21.811000 audit: BPF prog-id=28 op=LOAD Sep 6 01:20:21.811000 audit: BPF prog-id=29 op=LOAD Sep 6 01:20:21.811000 audit: BPF prog-id=19 op=UNLOAD Sep 6 01:20:21.811000 audit: BPF prog-id=20 op=UNLOAD Sep 6 01:20:21.812000 audit: BPF prog-id=30 op=LOAD Sep 6 01:20:21.812000 audit: BPF prog-id=31 op=LOAD Sep 6 01:20:21.812000 audit: BPF prog-id=21 op=UNLOAD Sep 6 01:20:21.812000 audit: BPF prog-id=22 op=UNLOAD Sep 6 01:20:21.813000 audit: BPF prog-id=32 op=LOAD Sep 6 01:20:21.813000 audit: BPF prog-id=24 op=UNLOAD Sep 6 01:20:21.813000 audit: BPF prog-id=33 op=LOAD Sep 6 01:20:21.813000 audit: BPF prog-id=34 op=LOAD Sep 6 01:20:21.813000 audit: BPF prog-id=25 op=UNLOAD Sep 6 01:20:21.813000 audit: BPF prog-id=26 op=UNLOAD Sep 6 01:20:21.814000 audit: BPF prog-id=35 op=LOAD Sep 6 01:20:21.814000 audit: BPF prog-id=23 op=UNLOAD Sep 6 01:20:21.826998 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 01:20:21.828308 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 01:20:21.833652 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 01:20:21.839394 systemd[1]: Starting modprobe@loop.service... Sep 6 01:20:21.843365 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 01:20:21.843501 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 01:20:21.844377 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 01:20:21.844524 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 01:20:21.848000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.848000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.849563 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 01:20:21.849701 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 01:20:21.853000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.853000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.855422 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 01:20:21.855552 systemd[1]: Finished modprobe@loop.service. Sep 6 01:20:21.859000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.859000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.862606 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 01:20:21.863956 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 01:20:21.869792 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 01:20:21.875832 systemd[1]: Starting modprobe@loop.service... Sep 6 01:20:21.880713 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 01:20:21.880863 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 01:20:21.881686 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 01:20:21.881845 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 01:20:21.885000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.885000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.887008 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 01:20:21.887146 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 01:20:21.891000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.891000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.894063 systemd-tmpfiles[1330]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Sep 6 01:20:21.894731 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 01:20:21.894876 systemd[1]: Finished modprobe@loop.service. Sep 6 01:20:21.898000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.898000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.901973 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 01:20:21.903421 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 01:20:21.909614 systemd[1]: Starting modprobe@drm.service... Sep 6 01:20:21.915004 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 01:20:21.920469 systemd[1]: Starting modprobe@loop.service... Sep 6 01:20:21.924955 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 01:20:21.925557 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 01:20:21.927282 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 01:20:21.927422 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 01:20:21.930000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.930000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.932279 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 6 01:20:21.932411 systemd[1]: Finished modprobe@drm.service. Sep 6 01:20:21.936000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.936000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.937628 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 01:20:21.937753 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 01:20:21.942000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.942000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.943617 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 01:20:21.943749 systemd[1]: Finished modprobe@loop.service. Sep 6 01:20:21.947000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.947000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.950637 systemd[1]: Finished ensure-sysext.service. Sep 6 01:20:21.954000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:21.956292 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 6 01:20:21.956338 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 6 01:20:22.332895 systemd[1]: Finished systemd-tmpfiles-setup.service. Sep 6 01:20:22.337000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:22.339797 systemd[1]: Starting audit-rules.service... Sep 6 01:20:22.345540 systemd[1]: Starting clean-ca-certificates.service... Sep 6 01:20:22.351843 systemd[1]: Starting systemd-journal-catalog-update.service... Sep 6 01:20:22.357000 audit: BPF prog-id=36 op=LOAD Sep 6 01:20:22.359715 systemd[1]: Starting systemd-resolved.service... Sep 6 01:20:22.364000 audit: BPF prog-id=37 op=LOAD Sep 6 01:20:22.366964 systemd[1]: Starting systemd-timesyncd.service... Sep 6 01:20:22.373824 systemd[1]: Starting systemd-update-utmp.service... Sep 6 01:20:22.404000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:22.400310 systemd[1]: Finished clean-ca-certificates.service. Sep 6 01:20:22.406018 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 6 01:20:22.413000 audit[1426]: SYSTEM_BOOT pid=1426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Sep 6 01:20:22.420000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:22.416567 systemd[1]: Finished systemd-update-utmp.service. Sep 6 01:20:22.454171 systemd[1]: Started systemd-timesyncd.service. Sep 6 01:20:22.457000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:22.459199 systemd[1]: Reached target time-set.target. Sep 6 01:20:22.509300 systemd-networkd[1246]: eth0: Gained IPv6LL Sep 6 01:20:22.510929 systemd[1]: Finished systemd-networkd-wait-online.service. Sep 6 01:20:22.516000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:22.530287 systemd-resolved[1424]: Positive Trust Anchors: Sep 6 01:20:22.530304 systemd-resolved[1424]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 6 01:20:22.530332 systemd-resolved[1424]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 6 01:20:22.565554 systemd[1]: Finished systemd-journal-catalog-update.service. Sep 6 01:20:22.570000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:22.599276 systemd-resolved[1424]: Using system hostname 'ci-3510.3.8-n-b5f8f4c6c5'. Sep 6 01:20:22.600954 systemd[1]: Started systemd-resolved.service. Sep 6 01:20:22.604000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:22.605930 systemd[1]: Reached target network.target. Sep 6 01:20:22.610446 systemd[1]: Reached target network-online.target. Sep 6 01:20:22.615399 systemd[1]: Reached target nss-lookup.target. Sep 6 01:20:22.687272 systemd-timesyncd[1425]: Contacted time server 66.59.198.178:123 (0.flatcar.pool.ntp.org). Sep 6 01:20:22.687346 systemd-timesyncd[1425]: Initial clock synchronization to Sat 2025-09-06 01:20:22.691624 UTC. Sep 6 01:20:22.701000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Sep 6 01:20:22.701000 audit[1441]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff5e22660 a2=420 a3=0 items=0 ppid=1420 pid=1441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:22.701000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Sep 6 01:20:22.717815 augenrules[1441]: No rules Sep 6 01:20:22.718898 systemd[1]: Finished audit-rules.service. Sep 6 01:20:27.393092 ldconfig[1306]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Sep 6 01:20:27.407376 systemd[1]: Finished ldconfig.service. Sep 6 01:20:27.413495 systemd[1]: Starting systemd-update-done.service... Sep 6 01:20:27.446655 systemd[1]: Finished systemd-update-done.service. Sep 6 01:20:27.451613 systemd[1]: Reached target sysinit.target. Sep 6 01:20:27.455971 systemd[1]: Started motdgen.path. Sep 6 01:20:27.459769 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Sep 6 01:20:27.466253 systemd[1]: Started logrotate.timer. Sep 6 01:20:27.471157 systemd[1]: Started mdadm.timer. Sep 6 01:20:27.475262 systemd[1]: Started systemd-tmpfiles-clean.timer. Sep 6 01:20:27.480715 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Sep 6 01:20:27.480745 systemd[1]: Reached target paths.target. Sep 6 01:20:27.484983 systemd[1]: Reached target timers.target. Sep 6 01:20:27.490036 systemd[1]: Listening on dbus.socket. Sep 6 01:20:27.496674 systemd[1]: Starting docker.socket... Sep 6 01:20:27.516697 systemd[1]: Listening on sshd.socket. Sep 6 01:20:27.520919 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 01:20:27.521457 systemd[1]: Listening on docker.socket. Sep 6 01:20:27.525878 systemd[1]: Reached target sockets.target. Sep 6 01:20:27.530144 systemd[1]: Reached target basic.target. Sep 6 01:20:27.534350 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 6 01:20:27.534383 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 6 01:20:27.535565 systemd[1]: Starting containerd.service... Sep 6 01:20:27.540305 systemd[1]: Starting dbus.service... Sep 6 01:20:27.544961 systemd[1]: Starting enable-oem-cloudinit.service... Sep 6 01:20:27.550510 systemd[1]: Starting extend-filesystems.service... Sep 6 01:20:27.554827 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Sep 6 01:20:27.556186 systemd[1]: Starting kubelet.service... Sep 6 01:20:27.561833 systemd[1]: Starting motdgen.service... Sep 6 01:20:27.566739 systemd[1]: Started nvidia.service. Sep 6 01:20:27.572431 systemd[1]: Starting prepare-helm.service... Sep 6 01:20:27.579630 systemd[1]: Starting ssh-key-proc-cmdline.service... Sep 6 01:20:27.585919 systemd[1]: Starting sshd-keygen.service... Sep 6 01:20:27.594563 systemd[1]: Starting systemd-logind.service... Sep 6 01:20:27.599056 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 01:20:27.599185 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Sep 6 01:20:27.599676 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Sep 6 01:20:27.601015 systemd[1]: Starting update-engine.service... Sep 6 01:20:27.607038 systemd[1]: Starting update-ssh-keys-after-ignition.service... Sep 6 01:20:27.618509 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Sep 6 01:20:27.618705 systemd[1]: Finished ssh-key-proc-cmdline.service. Sep 6 01:20:27.634511 jq[1469]: true Sep 6 01:20:27.634775 jq[1451]: false Sep 6 01:20:27.640396 systemd[1]: motdgen.service: Deactivated successfully. Sep 6 01:20:27.640588 systemd[1]: Finished motdgen.service. Sep 6 01:20:27.648725 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Sep 6 01:20:27.648928 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Sep 6 01:20:27.669860 extend-filesystems[1452]: Found loop1 Sep 6 01:20:27.669860 extend-filesystems[1452]: Found sda Sep 6 01:20:27.669860 extend-filesystems[1452]: Found sda1 Sep 6 01:20:27.669860 extend-filesystems[1452]: Found sda2 Sep 6 01:20:27.669860 extend-filesystems[1452]: Found sda3 Sep 6 01:20:27.669860 extend-filesystems[1452]: Found usr Sep 6 01:20:27.669860 extend-filesystems[1452]: Found sda4 Sep 6 01:20:27.669860 extend-filesystems[1452]: Found sda6 Sep 6 01:20:27.669860 extend-filesystems[1452]: Found sda7 Sep 6 01:20:27.669860 extend-filesystems[1452]: Found sda9 Sep 6 01:20:27.669860 extend-filesystems[1452]: Checking size of /dev/sda9 Sep 6 01:20:27.804597 extend-filesystems[1452]: Old size kept for /dev/sda9 Sep 6 01:20:27.804597 extend-filesystems[1452]: Found sr0 Sep 6 01:20:27.850723 tar[1472]: linux-arm64/helm Sep 6 01:20:27.850947 jq[1479]: true Sep 6 01:20:27.690688 systemd-logind[1465]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Sep 6 01:20:27.851216 env[1474]: time="2025-09-06T01:20:27.731678026Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Sep 6 01:20:27.702013 systemd-logind[1465]: New seat seat0. Sep 6 01:20:27.764925 systemd[1]: extend-filesystems.service: Deactivated successfully. Sep 6 01:20:27.851740 bash[1512]: Updated "/home/core/.ssh/authorized_keys" Sep 6 01:20:27.765180 systemd[1]: Finished extend-filesystems.service. Sep 6 01:20:27.838848 systemd[1]: Finished update-ssh-keys-after-ignition.service. Sep 6 01:20:27.862873 env[1474]: time="2025-09-06T01:20:27.860082911Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Sep 6 01:20:27.862873 env[1474]: time="2025-09-06T01:20:27.860272232Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Sep 6 01:20:27.871412 dbus-daemon[1450]: [system] SELinux support is enabled Sep 6 01:20:27.871602 systemd[1]: Started dbus.service. Sep 6 01:20:27.877739 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Sep 6 01:20:27.878379 dbus-daemon[1450]: [system] Successfully activated service 'org.freedesktop.systemd1' Sep 6 01:20:27.877767 systemd[1]: Reached target system-config.target. Sep 6 01:20:27.885556 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Sep 6 01:20:27.885583 systemd[1]: Reached target user-config.target. Sep 6 01:20:27.893562 systemd[1]: Started systemd-logind.service. Sep 6 01:20:27.904467 env[1474]: time="2025-09-06T01:20:27.904359819Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.190-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Sep 6 01:20:27.904467 env[1474]: time="2025-09-06T01:20:27.904408349Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Sep 6 01:20:27.904731 env[1474]: time="2025-09-06T01:20:27.904695371Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 6 01:20:27.904731 env[1474]: time="2025-09-06T01:20:27.904721297Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Sep 6 01:20:27.904839 env[1474]: time="2025-09-06T01:20:27.904745462Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Sep 6 01:20:27.904839 env[1474]: time="2025-09-06T01:20:27.904756465Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Sep 6 01:20:27.904881 env[1474]: time="2025-09-06T01:20:27.904846804Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Sep 6 01:20:27.905151 env[1474]: time="2025-09-06T01:20:27.905110941Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Sep 6 01:20:27.905312 env[1474]: time="2025-09-06T01:20:27.905284539Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 6 01:20:27.905312 env[1474]: time="2025-09-06T01:20:27.905307184Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Sep 6 01:20:27.905409 env[1474]: time="2025-09-06T01:20:27.905385881Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Sep 6 01:20:27.905409 env[1474]: time="2025-09-06T01:20:27.905403765Z" level=info msg="metadata content store policy set" policy=shared Sep 6 01:20:27.924817 env[1474]: time="2025-09-06T01:20:27.924754315Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Sep 6 01:20:27.924817 env[1474]: time="2025-09-06T01:20:27.924805366Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Sep 6 01:20:27.924817 env[1474]: time="2025-09-06T01:20:27.924820369Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Sep 6 01:20:27.924987 env[1474]: time="2025-09-06T01:20:27.924859298Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Sep 6 01:20:27.924987 env[1474]: time="2025-09-06T01:20:27.924877902Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Sep 6 01:20:27.924987 env[1474]: time="2025-09-06T01:20:27.924892465Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Sep 6 01:20:27.924987 env[1474]: time="2025-09-06T01:20:27.924905588Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Sep 6 01:20:27.925305 env[1474]: time="2025-09-06T01:20:27.925276868Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Sep 6 01:20:27.925305 env[1474]: time="2025-09-06T01:20:27.925301073Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Sep 6 01:20:27.925381 env[1474]: time="2025-09-06T01:20:27.925315076Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Sep 6 01:20:27.925381 env[1474]: time="2025-09-06T01:20:27.925328559Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Sep 6 01:20:27.925381 env[1474]: time="2025-09-06T01:20:27.925342002Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Sep 6 01:20:27.925493 env[1474]: time="2025-09-06T01:20:27.925470110Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Sep 6 01:20:27.925570 env[1474]: time="2025-09-06T01:20:27.925549567Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Sep 6 01:20:27.925812 env[1474]: time="2025-09-06T01:20:27.925789499Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Sep 6 01:20:27.925849 env[1474]: time="2025-09-06T01:20:27.925819706Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Sep 6 01:20:27.925849 env[1474]: time="2025-09-06T01:20:27.925834149Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Sep 6 01:20:27.925900 env[1474]: time="2025-09-06T01:20:27.925882199Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Sep 6 01:20:27.925900 env[1474]: time="2025-09-06T01:20:27.925896162Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Sep 6 01:20:27.925948 env[1474]: time="2025-09-06T01:20:27.925909245Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Sep 6 01:20:27.925948 env[1474]: time="2025-09-06T01:20:27.925920808Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Sep 6 01:20:27.925948 env[1474]: time="2025-09-06T01:20:27.925933570Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Sep 6 01:20:27.926012 env[1474]: time="2025-09-06T01:20:27.925948814Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Sep 6 01:20:27.926012 env[1474]: time="2025-09-06T01:20:27.925960816Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Sep 6 01:20:27.926012 env[1474]: time="2025-09-06T01:20:27.925972299Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Sep 6 01:20:27.926012 env[1474]: time="2025-09-06T01:20:27.925986262Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Sep 6 01:20:27.926230 env[1474]: time="2025-09-06T01:20:27.926099326Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Sep 6 01:20:27.926230 env[1474]: time="2025-09-06T01:20:27.926145416Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Sep 6 01:20:27.926230 env[1474]: time="2025-09-06T01:20:27.926175103Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Sep 6 01:20:27.926230 env[1474]: time="2025-09-06T01:20:27.926187425Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Sep 6 01:20:27.926230 env[1474]: time="2025-09-06T01:20:27.926202949Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Sep 6 01:20:27.926230 env[1474]: time="2025-09-06T01:20:27.926214271Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Sep 6 01:20:27.926230 env[1474]: time="2025-09-06T01:20:27.926233235Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Sep 6 01:20:27.926396 env[1474]: time="2025-09-06T01:20:27.926268203Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Sep 6 01:20:27.926522 env[1474]: time="2025-09-06T01:20:27.926460324Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Sep 6 01:20:27.926522 env[1474]: time="2025-09-06T01:20:27.926518537Z" level=info msg="Connect containerd service" Sep 6 01:20:27.945044 env[1474]: time="2025-09-06T01:20:27.926548624Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Sep 6 01:20:27.945044 env[1474]: time="2025-09-06T01:20:27.927250976Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 6 01:20:27.945044 env[1474]: time="2025-09-06T01:20:27.927480825Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Sep 6 01:20:27.945044 env[1474]: time="2025-09-06T01:20:27.927515593Z" level=info msg=serving... address=/run/containerd/containerd.sock Sep 6 01:20:27.945044 env[1474]: time="2025-09-06T01:20:27.937249861Z" level=info msg="Start subscribing containerd event" Sep 6 01:20:27.945044 env[1474]: time="2025-09-06T01:20:27.937280988Z" level=info msg="containerd successfully booted in 0.228524s" Sep 6 01:20:27.945044 env[1474]: time="2025-09-06T01:20:27.937323597Z" level=info msg="Start recovering state" Sep 6 01:20:27.945044 env[1474]: time="2025-09-06T01:20:27.937420098Z" level=info msg="Start event monitor" Sep 6 01:20:27.945044 env[1474]: time="2025-09-06T01:20:27.937441062Z" level=info msg="Start snapshots syncer" Sep 6 01:20:27.945044 env[1474]: time="2025-09-06T01:20:27.937453345Z" level=info msg="Start cni network conf syncer for default" Sep 6 01:20:27.945044 env[1474]: time="2025-09-06T01:20:27.937462027Z" level=info msg="Start streaming server" Sep 6 01:20:27.927624 systemd[1]: Started containerd.service. Sep 6 01:20:27.959143 systemd[1]: nvidia.service: Deactivated successfully. Sep 6 01:20:28.321524 update_engine[1468]: I0906 01:20:28.309691 1468 main.cc:92] Flatcar Update Engine starting Sep 6 01:20:28.364423 systemd[1]: Started update-engine.service. Sep 6 01:20:28.371205 update_engine[1468]: I0906 01:20:28.371165 1468 update_check_scheduler.cc:74] Next update check in 3m57s Sep 6 01:20:28.373382 systemd[1]: Started locksmithd.service. Sep 6 01:20:28.379254 tar[1472]: linux-arm64/LICENSE Sep 6 01:20:28.379254 tar[1472]: linux-arm64/README.md Sep 6 01:20:28.388340 systemd[1]: Finished prepare-helm.service. Sep 6 01:20:28.673573 systemd[1]: Started kubelet.service. Sep 6 01:20:29.074269 kubelet[1556]: E0906 01:20:29.074154 1556 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 01:20:29.076026 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 01:20:29.076176 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 01:20:29.397759 sshd_keygen[1467]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Sep 6 01:20:29.415348 systemd[1]: Finished sshd-keygen.service. Sep 6 01:20:29.421442 systemd[1]: Starting issuegen.service... Sep 6 01:20:29.426513 systemd[1]: Started waagent.service. Sep 6 01:20:29.431437 systemd[1]: issuegen.service: Deactivated successfully. Sep 6 01:20:29.431628 systemd[1]: Finished issuegen.service. Sep 6 01:20:29.437520 systemd[1]: Starting systemd-user-sessions.service... Sep 6 01:20:29.470647 systemd[1]: Finished systemd-user-sessions.service. Sep 6 01:20:29.479812 systemd[1]: Started getty@tty1.service. Sep 6 01:20:29.485769 systemd[1]: Started serial-getty@ttyAMA0.service. Sep 6 01:20:29.491063 systemd[1]: Reached target getty.target. Sep 6 01:20:29.495879 systemd[1]: Reached target multi-user.target. Sep 6 01:20:29.502415 systemd[1]: Starting systemd-update-utmp-runlevel.service... Sep 6 01:20:29.510773 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Sep 6 01:20:29.510935 systemd[1]: Finished systemd-update-utmp-runlevel.service. Sep 6 01:20:29.516929 systemd[1]: Startup finished in 777ms (kernel) + 13.008s (initrd) + 18.533s (userspace) = 32.318s. Sep 6 01:20:29.599532 locksmithd[1552]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Sep 6 01:20:30.110911 login[1578]: pam_lastlog(login:session): file /var/log/lastlog is locked/write Sep 6 01:20:30.170086 login[1579]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Sep 6 01:20:30.224420 systemd[1]: Created slice user-500.slice. Sep 6 01:20:30.225603 systemd[1]: Starting user-runtime-dir@500.service... Sep 6 01:20:30.228722 systemd-logind[1465]: New session 2 of user core. Sep 6 01:20:30.322685 systemd[1]: Finished user-runtime-dir@500.service. Sep 6 01:20:30.324309 systemd[1]: Starting user@500.service... Sep 6 01:20:30.358960 (systemd)[1583]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:20:30.532072 systemd[1583]: Queued start job for default target default.target. Sep 6 01:20:30.532590 systemd[1583]: Reached target paths.target. Sep 6 01:20:30.532610 systemd[1583]: Reached target sockets.target. Sep 6 01:20:30.532621 systemd[1583]: Reached target timers.target. Sep 6 01:20:30.532635 systemd[1583]: Reached target basic.target. Sep 6 01:20:30.532682 systemd[1583]: Reached target default.target. Sep 6 01:20:30.532705 systemd[1583]: Startup finished in 167ms. Sep 6 01:20:30.532749 systemd[1]: Started user@500.service. Sep 6 01:20:30.533678 systemd[1]: Started session-2.scope. Sep 6 01:20:31.111584 login[1578]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Sep 6 01:20:31.115602 systemd-logind[1465]: New session 1 of user core. Sep 6 01:20:31.116397 systemd[1]: Started session-1.scope. Sep 6 01:20:35.694594 waagent[1575]: 2025-09-06T01:20:35.694477Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Sep 6 01:20:35.715414 waagent[1575]: 2025-09-06T01:20:35.715311Z INFO Daemon Daemon OS: flatcar 3510.3.8 Sep 6 01:20:35.720951 waagent[1575]: 2025-09-06T01:20:35.720850Z INFO Daemon Daemon Python: 3.9.16 Sep 6 01:20:35.726555 waagent[1575]: 2025-09-06T01:20:35.726451Z INFO Daemon Daemon Run daemon Sep 6 01:20:35.731668 waagent[1575]: 2025-09-06T01:20:35.731599Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.8' Sep 6 01:20:35.750787 waagent[1575]: 2025-09-06T01:20:35.750625Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Sep 6 01:20:35.768608 waagent[1575]: 2025-09-06T01:20:35.768446Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Sep 6 01:20:35.780331 waagent[1575]: 2025-09-06T01:20:35.780241Z INFO Daemon Daemon cloud-init is enabled: False Sep 6 01:20:35.786072 waagent[1575]: 2025-09-06T01:20:35.785984Z INFO Daemon Daemon Using waagent for provisioning Sep 6 01:20:35.792519 waagent[1575]: 2025-09-06T01:20:35.792438Z INFO Daemon Daemon Activate resource disk Sep 6 01:20:35.797759 waagent[1575]: 2025-09-06T01:20:35.797681Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Sep 6 01:20:35.813345 waagent[1575]: 2025-09-06T01:20:35.813252Z INFO Daemon Daemon Found device: None Sep 6 01:20:35.818374 waagent[1575]: 2025-09-06T01:20:35.818282Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Sep 6 01:20:35.827750 waagent[1575]: 2025-09-06T01:20:35.827663Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Sep 6 01:20:35.840932 waagent[1575]: 2025-09-06T01:20:35.840856Z INFO Daemon Daemon Clean protocol and wireserver endpoint Sep 6 01:20:35.847564 waagent[1575]: 2025-09-06T01:20:35.847481Z INFO Daemon Daemon Running default provisioning handler Sep 6 01:20:35.862007 waagent[1575]: 2025-09-06T01:20:35.861839Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Sep 6 01:20:35.879796 waagent[1575]: 2025-09-06T01:20:35.879633Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Sep 6 01:20:35.892423 waagent[1575]: 2025-09-06T01:20:35.892328Z INFO Daemon Daemon cloud-init is enabled: False Sep 6 01:20:35.899684 waagent[1575]: 2025-09-06T01:20:35.899594Z INFO Daemon Daemon Copying ovf-env.xml Sep 6 01:20:35.984191 waagent[1575]: 2025-09-06T01:20:35.983952Z INFO Daemon Daemon Successfully mounted dvd Sep 6 01:20:36.060984 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Sep 6 01:20:36.095158 waagent[1575]: 2025-09-06T01:20:36.094394Z INFO Daemon Daemon Detect protocol endpoint Sep 6 01:20:36.101006 waagent[1575]: 2025-09-06T01:20:36.100900Z INFO Daemon Daemon Clean protocol and wireserver endpoint Sep 6 01:20:36.108377 waagent[1575]: 2025-09-06T01:20:36.108270Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Sep 6 01:20:36.117547 waagent[1575]: 2025-09-06T01:20:36.117454Z INFO Daemon Daemon Test for route to 168.63.129.16 Sep 6 01:20:36.124537 waagent[1575]: 2025-09-06T01:20:36.124459Z INFO Daemon Daemon Route to 168.63.129.16 exists Sep 6 01:20:36.131332 waagent[1575]: 2025-09-06T01:20:36.131252Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Sep 6 01:20:36.289668 waagent[1575]: 2025-09-06T01:20:36.289543Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Sep 6 01:20:36.297935 waagent[1575]: 2025-09-06T01:20:36.297885Z INFO Daemon Daemon Wire protocol version:2012-11-30 Sep 6 01:20:36.305385 waagent[1575]: 2025-09-06T01:20:36.305285Z INFO Daemon Daemon Server preferred version:2015-04-05 Sep 6 01:20:37.250097 waagent[1575]: 2025-09-06T01:20:37.249932Z INFO Daemon Daemon Initializing goal state during protocol detection Sep 6 01:20:37.272233 waagent[1575]: 2025-09-06T01:20:37.272135Z INFO Daemon Daemon Forcing an update of the goal state.. Sep 6 01:20:37.278513 waagent[1575]: 2025-09-06T01:20:37.278419Z INFO Daemon Daemon Fetching goal state [incarnation 1] Sep 6 01:20:37.445266 waagent[1575]: 2025-09-06T01:20:37.445104Z INFO Daemon Daemon Found private key matching thumbprint A2D6D7C13F4F12CF56A86D49DFC0C368C5E0A4CD Sep 6 01:20:37.457821 waagent[1575]: 2025-09-06T01:20:37.457714Z INFO Daemon Daemon Fetch goal state completed Sep 6 01:20:37.494065 waagent[1575]: 2025-09-06T01:20:37.494007Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: 4de2900e-ca8d-46ab-b643-a79ae5c183d1 New eTag: 3791128975930056223] Sep 6 01:20:37.509803 waagent[1575]: 2025-09-06T01:20:37.509659Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Sep 6 01:20:37.528652 waagent[1575]: 2025-09-06T01:20:37.528584Z INFO Daemon Daemon Starting provisioning Sep 6 01:20:37.535728 waagent[1575]: 2025-09-06T01:20:37.535628Z INFO Daemon Daemon Handle ovf-env.xml. Sep 6 01:20:37.541912 waagent[1575]: 2025-09-06T01:20:37.541818Z INFO Daemon Daemon Set hostname [ci-3510.3.8-n-b5f8f4c6c5] Sep 6 01:20:37.581306 waagent[1575]: 2025-09-06T01:20:37.581158Z INFO Daemon Daemon Publish hostname [ci-3510.3.8-n-b5f8f4c6c5] Sep 6 01:20:37.589429 waagent[1575]: 2025-09-06T01:20:37.589332Z INFO Daemon Daemon Examine /proc/net/route for primary interface Sep 6 01:20:37.597847 waagent[1575]: 2025-09-06T01:20:37.597758Z INFO Daemon Daemon Primary interface is [eth0] Sep 6 01:20:37.616816 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Sep 6 01:20:37.616984 systemd[1]: Stopped systemd-networkd-wait-online.service. Sep 6 01:20:37.617046 systemd[1]: Stopping systemd-networkd-wait-online.service... Sep 6 01:20:37.617322 systemd[1]: Stopping systemd-networkd.service... Sep 6 01:20:37.622177 systemd-networkd[1246]: eth0: DHCPv6 lease lost Sep 6 01:20:37.623708 systemd[1]: systemd-networkd.service: Deactivated successfully. Sep 6 01:20:37.623901 systemd[1]: Stopped systemd-networkd.service. Sep 6 01:20:37.625953 systemd[1]: Starting systemd-networkd.service... Sep 6 01:20:37.655192 systemd-networkd[1625]: enP25019s1: Link UP Sep 6 01:20:37.655204 systemd-networkd[1625]: enP25019s1: Gained carrier Sep 6 01:20:37.656290 systemd-networkd[1625]: eth0: Link UP Sep 6 01:20:37.656299 systemd-networkd[1625]: eth0: Gained carrier Sep 6 01:20:37.656646 systemd-networkd[1625]: lo: Link UP Sep 6 01:20:37.656655 systemd-networkd[1625]: lo: Gained carrier Sep 6 01:20:37.656891 systemd-networkd[1625]: eth0: Gained IPv6LL Sep 6 01:20:37.657834 systemd-networkd[1625]: Enumeration completed Sep 6 01:20:37.657957 systemd[1]: Started systemd-networkd.service. Sep 6 01:20:37.659433 systemd-networkd[1625]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 6 01:20:37.659780 systemd[1]: Starting systemd-networkd-wait-online.service... Sep 6 01:20:37.666882 waagent[1575]: 2025-09-06T01:20:37.666729Z INFO Daemon Daemon Create user account if not exists Sep 6 01:20:37.674472 waagent[1575]: 2025-09-06T01:20:37.674368Z INFO Daemon Daemon User core already exists, skip useradd Sep 6 01:20:37.682335 waagent[1575]: 2025-09-06T01:20:37.682240Z INFO Daemon Daemon Configure sudoer Sep 6 01:20:37.688197 systemd-networkd[1625]: eth0: DHCPv4 address 10.200.20.26/24, gateway 10.200.20.1 acquired from 168.63.129.16 Sep 6 01:20:37.688805 waagent[1575]: 2025-09-06T01:20:37.688712Z INFO Daemon Daemon Configure sshd Sep 6 01:20:37.695787 systemd[1]: Finished systemd-networkd-wait-online.service. Sep 6 01:20:37.696408 waagent[1575]: 2025-09-06T01:20:37.696302Z INFO Daemon Daemon Deploy ssh public key. Sep 6 01:20:38.897125 waagent[1575]: 2025-09-06T01:20:38.897025Z INFO Daemon Daemon Provisioning complete Sep 6 01:20:38.917660 waagent[1575]: 2025-09-06T01:20:38.917595Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Sep 6 01:20:38.925143 waagent[1575]: 2025-09-06T01:20:38.925043Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Sep 6 01:20:38.935883 waagent[1575]: 2025-09-06T01:20:38.935801Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Sep 6 01:20:39.081963 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Sep 6 01:20:39.082158 systemd[1]: Stopped kubelet.service. Sep 6 01:20:39.083532 systemd[1]: Starting kubelet.service... Sep 6 01:20:39.180804 systemd[1]: Started kubelet.service. Sep 6 01:20:39.264022 waagent[1631]: 2025-09-06T01:20:39.263901Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Sep 6 01:20:39.264853 waagent[1631]: 2025-09-06T01:20:39.264783Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 6 01:20:39.264994 waagent[1631]: 2025-09-06T01:20:39.264943Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 6 01:20:39.278368 waagent[1631]: 2025-09-06T01:20:39.278256Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Sep 6 01:20:39.278564 waagent[1631]: 2025-09-06T01:20:39.278509Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Sep 6 01:20:39.291512 kubelet[1638]: E0906 01:20:39.291470 1638 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 01:20:39.293926 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 01:20:39.294080 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 01:20:39.346051 waagent[1631]: 2025-09-06T01:20:39.345893Z INFO ExtHandler ExtHandler Found private key matching thumbprint A2D6D7C13F4F12CF56A86D49DFC0C368C5E0A4CD Sep 6 01:20:39.346406 waagent[1631]: 2025-09-06T01:20:39.346346Z INFO ExtHandler ExtHandler Fetch goal state completed Sep 6 01:20:39.362287 waagent[1631]: 2025-09-06T01:20:39.362228Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: 07003ece-27d1-4a39-bf81-c3762c72f6c5 New eTag: 3791128975930056223] Sep 6 01:20:39.362915 waagent[1631]: 2025-09-06T01:20:39.362851Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Sep 6 01:20:39.600048 waagent[1631]: 2025-09-06T01:20:39.599882Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.8; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Sep 6 01:20:39.622429 waagent[1631]: 2025-09-06T01:20:39.622338Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1631 Sep 6 01:20:39.626221 waagent[1631]: 2025-09-06T01:20:39.626148Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.8', '', 'Flatcar Container Linux by Kinvolk'] Sep 6 01:20:39.627508 waagent[1631]: 2025-09-06T01:20:39.627452Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Sep 6 01:20:39.730479 waagent[1631]: 2025-09-06T01:20:39.730414Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Sep 6 01:20:39.730888 waagent[1631]: 2025-09-06T01:20:39.730830Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Sep 6 01:20:39.738755 waagent[1631]: 2025-09-06T01:20:39.738687Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Sep 6 01:20:39.739333 waagent[1631]: 2025-09-06T01:20:39.739272Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Sep 6 01:20:39.740535 waagent[1631]: 2025-09-06T01:20:39.740470Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Sep 6 01:20:39.742670 waagent[1631]: 2025-09-06T01:20:39.742595Z INFO ExtHandler ExtHandler Starting env monitor service. Sep 6 01:20:39.743211 waagent[1631]: 2025-09-06T01:20:39.743107Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 6 01:20:39.743589 waagent[1631]: 2025-09-06T01:20:39.743527Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 6 01:20:39.744284 waagent[1631]: 2025-09-06T01:20:39.744227Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Sep 6 01:20:39.744683 waagent[1631]: 2025-09-06T01:20:39.744630Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Sep 6 01:20:39.744683 waagent[1631]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Sep 6 01:20:39.744683 waagent[1631]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Sep 6 01:20:39.744683 waagent[1631]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Sep 6 01:20:39.744683 waagent[1631]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Sep 6 01:20:39.744683 waagent[1631]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Sep 6 01:20:39.744683 waagent[1631]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Sep 6 01:20:39.747209 waagent[1631]: 2025-09-06T01:20:39.747003Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Sep 6 01:20:39.747878 waagent[1631]: 2025-09-06T01:20:39.747804Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 6 01:20:39.748428 waagent[1631]: 2025-09-06T01:20:39.748363Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 6 01:20:39.749093 waagent[1631]: 2025-09-06T01:20:39.749032Z INFO EnvHandler ExtHandler Configure routes Sep 6 01:20:39.749382 waagent[1631]: 2025-09-06T01:20:39.749328Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Sep 6 01:20:39.749494 waagent[1631]: 2025-09-06T01:20:39.749237Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Sep 6 01:20:39.750024 waagent[1631]: 2025-09-06T01:20:39.749951Z INFO EnvHandler ExtHandler Gateway:None Sep 6 01:20:39.750425 waagent[1631]: 2025-09-06T01:20:39.750368Z INFO EnvHandler ExtHandler Routes:None Sep 6 01:20:39.751380 waagent[1631]: 2025-09-06T01:20:39.751302Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Sep 6 01:20:39.751735 waagent[1631]: 2025-09-06T01:20:39.751671Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Sep 6 01:20:39.753203 waagent[1631]: 2025-09-06T01:20:39.753111Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Sep 6 01:20:39.763697 waagent[1631]: 2025-09-06T01:20:39.763619Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Sep 6 01:20:39.764371 waagent[1631]: 2025-09-06T01:20:39.764305Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Sep 6 01:20:39.765491 waagent[1631]: 2025-09-06T01:20:39.765427Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Sep 6 01:20:39.794168 waagent[1631]: 2025-09-06T01:20:39.794007Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1625' Sep 6 01:20:39.808721 waagent[1631]: 2025-09-06T01:20:39.808636Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Sep 6 01:20:39.880239 waagent[1631]: 2025-09-06T01:20:39.879991Z INFO MonitorHandler ExtHandler Network interfaces: Sep 6 01:20:39.880239 waagent[1631]: Executing ['ip', '-a', '-o', 'link']: Sep 6 01:20:39.880239 waagent[1631]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Sep 6 01:20:39.880239 waagent[1631]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:f9:bb:bc brd ff:ff:ff:ff:ff:ff Sep 6 01:20:39.880239 waagent[1631]: 3: enP25019s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:f9:bb:bc brd ff:ff:ff:ff:ff:ff\ altname enP25019p0s2 Sep 6 01:20:39.880239 waagent[1631]: Executing ['ip', '-4', '-a', '-o', 'address']: Sep 6 01:20:39.880239 waagent[1631]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Sep 6 01:20:39.880239 waagent[1631]: 2: eth0 inet 10.200.20.26/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Sep 6 01:20:39.880239 waagent[1631]: Executing ['ip', '-6', '-a', '-o', 'address']: Sep 6 01:20:39.880239 waagent[1631]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Sep 6 01:20:39.880239 waagent[1631]: 2: eth0 inet6 fe80::20d:3aff:fef9:bbbc/64 scope link \ valid_lft forever preferred_lft forever Sep 6 01:20:40.142284 waagent[1631]: 2025-09-06T01:20:40.142051Z INFO EnvHandler ExtHandler Successfully added Azure fabric firewall rules Sep 6 01:20:40.148552 waagent[1631]: 2025-09-06T01:20:40.148407Z INFO EnvHandler ExtHandler Firewall rules: Sep 6 01:20:40.148552 waagent[1631]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Sep 6 01:20:40.148552 waagent[1631]: pkts bytes target prot opt in out source destination Sep 6 01:20:40.148552 waagent[1631]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Sep 6 01:20:40.148552 waagent[1631]: pkts bytes target prot opt in out source destination Sep 6 01:20:40.148552 waagent[1631]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Sep 6 01:20:40.148552 waagent[1631]: pkts bytes target prot opt in out source destination Sep 6 01:20:40.148552 waagent[1631]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Sep 6 01:20:40.148552 waagent[1631]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Sep 6 01:20:40.150313 waagent[1631]: 2025-09-06T01:20:40.150248Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Sep 6 01:20:40.158983 waagent[1631]: 2025-09-06T01:20:40.158923Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.14.0.1 -- exiting Sep 6 01:20:40.940544 waagent[1575]: 2025-09-06T01:20:40.940411Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Sep 6 01:20:40.946252 waagent[1575]: 2025-09-06T01:20:40.946192Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.14.0.1 to be the latest agent Sep 6 01:20:42.241271 waagent[1679]: 2025-09-06T01:20:42.241172Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.14.0.1) Sep 6 01:20:42.242388 waagent[1679]: 2025-09-06T01:20:42.242328Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.8 Sep 6 01:20:42.242647 waagent[1679]: 2025-09-06T01:20:42.242599Z INFO ExtHandler ExtHandler Python: 3.9.16 Sep 6 01:20:42.242872 waagent[1679]: 2025-09-06T01:20:42.242827Z INFO ExtHandler ExtHandler CPU Arch: aarch64 Sep 6 01:20:42.258391 waagent[1679]: 2025-09-06T01:20:42.258264Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.8; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; Arch: aarch64; systemd: True; systemd_version: systemd 252 (252); LISDrivers: Absent; logrotate: logrotate 3.20.1; Sep 6 01:20:42.258986 waagent[1679]: 2025-09-06T01:20:42.258933Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 6 01:20:42.259293 waagent[1679]: 2025-09-06T01:20:42.259245Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 6 01:20:42.259618 waagent[1679]: 2025-09-06T01:20:42.259570Z INFO ExtHandler ExtHandler Initializing the goal state... Sep 6 01:20:42.276184 waagent[1679]: 2025-09-06T01:20:42.276067Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Sep 6 01:20:42.289679 waagent[1679]: 2025-09-06T01:20:42.289616Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.175 Sep 6 01:20:42.291007 waagent[1679]: 2025-09-06T01:20:42.290952Z INFO ExtHandler Sep 6 01:20:42.291318 waagent[1679]: 2025-09-06T01:20:42.291269Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: 59e7d58f-21c6-49dd-b3d2-f0f980882012 eTag: 3791128975930056223 source: Fabric] Sep 6 01:20:42.292234 waagent[1679]: 2025-09-06T01:20:42.292179Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Sep 6 01:20:42.293647 waagent[1679]: 2025-09-06T01:20:42.293590Z INFO ExtHandler Sep 6 01:20:42.293897 waagent[1679]: 2025-09-06T01:20:42.293851Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Sep 6 01:20:42.301399 waagent[1679]: 2025-09-06T01:20:42.301344Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Sep 6 01:20:42.302075 waagent[1679]: 2025-09-06T01:20:42.302031Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Sep 6 01:20:42.324160 waagent[1679]: 2025-09-06T01:20:42.324050Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Sep 6 01:20:42.393798 waagent[1679]: 2025-09-06T01:20:42.393668Z INFO ExtHandler Downloaded certificate {'thumbprint': 'A2D6D7C13F4F12CF56A86D49DFC0C368C5E0A4CD', 'hasPrivateKey': True} Sep 6 01:20:42.395435 waagent[1679]: 2025-09-06T01:20:42.395373Z INFO ExtHandler Fetch goal state from WireServer completed Sep 6 01:20:42.396507 waagent[1679]: 2025-09-06T01:20:42.396452Z INFO ExtHandler ExtHandler Goal state initialization completed. Sep 6 01:20:42.417965 waagent[1679]: 2025-09-06T01:20:42.417841Z INFO ExtHandler ExtHandler OpenSSL version: OpenSSL 3.0.15 3 Sep 2024 (Library: OpenSSL 3.0.15 3 Sep 2024) Sep 6 01:20:42.427011 waagent[1679]: 2025-09-06T01:20:42.426897Z INFO ExtHandler ExtHandler Using iptables [version 1.8.8] to manage firewall rules Sep 6 01:20:42.431460 waagent[1679]: 2025-09-06T01:20:42.431323Z INFO ExtHandler ExtHandler Did not find a legacy firewall rule: ['iptables', '-w', '-t', 'security', '-C', 'OUTPUT', '-d', '168.63.129.16', '-p', 'tcp', '-m', 'conntrack', '--ctstate', 'INVALID,NEW', '-j', 'ACCEPT'] Sep 6 01:20:42.431881 waagent[1679]: 2025-09-06T01:20:42.431829Z INFO ExtHandler ExtHandler Checking state of the firewall Sep 6 01:20:42.482842 waagent[1679]: 2025-09-06T01:20:42.482719Z WARNING ExtHandler ExtHandler The firewall rules for Azure Fabric are not setup correctly (the environment thread will fix it): The following rules are missing: ['ACCEPT DNS'] due to: ['iptables: Bad rule (does a matching rule exist in that chain?).\n']. Current state: Sep 6 01:20:42.482842 waagent[1679]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Sep 6 01:20:42.482842 waagent[1679]: pkts bytes target prot opt in out source destination Sep 6 01:20:42.482842 waagent[1679]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Sep 6 01:20:42.482842 waagent[1679]: pkts bytes target prot opt in out source destination Sep 6 01:20:42.482842 waagent[1679]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Sep 6 01:20:42.482842 waagent[1679]: pkts bytes target prot opt in out source destination Sep 6 01:20:42.482842 waagent[1679]: 55 7857 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Sep 6 01:20:42.482842 waagent[1679]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Sep 6 01:20:42.484415 waagent[1679]: 2025-09-06T01:20:42.484355Z INFO ExtHandler ExtHandler Setting up persistent firewall rules Sep 6 01:20:42.487571 waagent[1679]: 2025-09-06T01:20:42.487459Z INFO ExtHandler ExtHandler The firewalld service is not present on the system Sep 6 01:20:42.487977 waagent[1679]: 2025-09-06T01:20:42.487927Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Sep 6 01:20:42.488552 waagent[1679]: 2025-09-06T01:20:42.488496Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Sep 6 01:20:42.496966 waagent[1679]: 2025-09-06T01:20:42.496858Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Sep 6 01:20:42.497780 waagent[1679]: 2025-09-06T01:20:42.497720Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Sep 6 01:20:42.506712 waagent[1679]: 2025-09-06T01:20:42.506629Z INFO ExtHandler ExtHandler WALinuxAgent-2.14.0.1 running as process 1679 Sep 6 01:20:42.510442 waagent[1679]: 2025-09-06T01:20:42.510358Z INFO ExtHandler ExtHandler [CGI] Cgroups is not currently supported on ['flatcar', '3510.3.8', '', 'Flatcar Container Linux by Kinvolk'] Sep 6 01:20:42.511540 waagent[1679]: 2025-09-06T01:20:42.511483Z INFO ExtHandler ExtHandler [CGI] Agent will reset the quotas in case cgroup usage went from enabled to disabled Sep 6 01:20:42.512648 waagent[1679]: 2025-09-06T01:20:42.512593Z INFO ExtHandler ExtHandler [CGI] Agent cgroups enabled: False Sep 6 01:20:42.515626 waagent[1679]: 2025-09-06T01:20:42.515566Z INFO ExtHandler ExtHandler Signing certificate written to /var/lib/waagent/microsoft_root_certificate.pem Sep 6 01:20:42.516089 waagent[1679]: 2025-09-06T01:20:42.516037Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: 1. configuration enabled [True], 2. cgroups v1 enabled [False] OR cgroups v2 is in use and v2 resource limiting configuration enabled [False], 3. python supported: [True] Sep 6 01:20:42.517630 waagent[1679]: 2025-09-06T01:20:42.517565Z INFO ExtHandler ExtHandler Starting env monitor service. Sep 6 01:20:42.517927 waagent[1679]: 2025-09-06T01:20:42.517863Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 6 01:20:42.518274 waagent[1679]: 2025-09-06T01:20:42.518206Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 6 01:20:42.519249 waagent[1679]: 2025-09-06T01:20:42.519183Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Sep 6 01:20:42.519645 waagent[1679]: 2025-09-06T01:20:42.519582Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Sep 6 01:20:42.519645 waagent[1679]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Sep 6 01:20:42.519645 waagent[1679]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Sep 6 01:20:42.519645 waagent[1679]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Sep 6 01:20:42.519645 waagent[1679]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Sep 6 01:20:42.519645 waagent[1679]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Sep 6 01:20:42.519645 waagent[1679]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Sep 6 01:20:42.522420 waagent[1679]: 2025-09-06T01:20:42.522317Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Sep 6 01:20:42.522907 waagent[1679]: 2025-09-06T01:20:42.522843Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 6 01:20:42.523664 waagent[1679]: 2025-09-06T01:20:42.523594Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 6 01:20:42.524419 waagent[1679]: 2025-09-06T01:20:42.524350Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Sep 6 01:20:42.526306 waagent[1679]: 2025-09-06T01:20:42.526066Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Sep 6 01:20:42.527211 waagent[1679]: 2025-09-06T01:20:42.527094Z INFO EnvHandler ExtHandler Configure routes Sep 6 01:20:42.528158 waagent[1679]: 2025-09-06T01:20:42.528054Z INFO EnvHandler ExtHandler Gateway:None Sep 6 01:20:42.528751 waagent[1679]: 2025-09-06T01:20:42.528684Z INFO EnvHandler ExtHandler Routes:None Sep 6 01:20:42.532159 waagent[1679]: 2025-09-06T01:20:42.531969Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Sep 6 01:20:42.532671 waagent[1679]: 2025-09-06T01:20:42.532595Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Sep 6 01:20:42.534720 waagent[1679]: 2025-09-06T01:20:42.534666Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Sep 6 01:20:42.544437 waagent[1679]: 2025-09-06T01:20:42.544344Z INFO MonitorHandler ExtHandler Network interfaces: Sep 6 01:20:42.544437 waagent[1679]: Executing ['ip', '-a', '-o', 'link']: Sep 6 01:20:42.544437 waagent[1679]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Sep 6 01:20:42.544437 waagent[1679]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:f9:bb:bc brd ff:ff:ff:ff:ff:ff Sep 6 01:20:42.544437 waagent[1679]: 3: enP25019s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:f9:bb:bc brd ff:ff:ff:ff:ff:ff\ altname enP25019p0s2 Sep 6 01:20:42.544437 waagent[1679]: Executing ['ip', '-4', '-a', '-o', 'address']: Sep 6 01:20:42.544437 waagent[1679]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Sep 6 01:20:42.544437 waagent[1679]: 2: eth0 inet 10.200.20.26/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Sep 6 01:20:42.544437 waagent[1679]: Executing ['ip', '-6', '-a', '-o', 'address']: Sep 6 01:20:42.544437 waagent[1679]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Sep 6 01:20:42.544437 waagent[1679]: 2: eth0 inet6 fe80::20d:3aff:fef9:bbbc/64 scope link \ valid_lft forever preferred_lft forever Sep 6 01:20:42.550311 waagent[1679]: 2025-09-06T01:20:42.550217Z INFO ExtHandler ExtHandler Downloading agent manifest Sep 6 01:20:42.595385 waagent[1679]: 2025-09-06T01:20:42.594985Z INFO ExtHandler ExtHandler Sep 6 01:20:42.596652 waagent[1679]: 2025-09-06T01:20:42.596583Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: 074826a5-258c-4d03-8827-1775f5155124 correlation d62429cc-2dc7-465d-af1d-286198de8c12 created: 2025-09-06T01:19:16.760063Z] Sep 6 01:20:42.597841 waagent[1679]: 2025-09-06T01:20:42.597774Z INFO EnvHandler ExtHandler Using iptables [version 1.8.8] to manage firewall rules Sep 6 01:20:42.605187 waagent[1679]: 2025-09-06T01:20:42.604306Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Sep 6 01:20:42.616585 waagent[1679]: 2025-09-06T01:20:42.616445Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 21 ms] Sep 6 01:20:42.622453 waagent[1679]: 2025-09-06T01:20:42.622378Z WARNING EnvHandler ExtHandler The firewall is not configured correctly. The following rules are missing: ['ACCEPT DNS'] due to: ['iptables: Bad rule (does a matching rule exist in that chain?).\n']. Will reset it. Current state: Sep 6 01:20:42.622453 waagent[1679]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Sep 6 01:20:42.622453 waagent[1679]: pkts bytes target prot opt in out source destination Sep 6 01:20:42.622453 waagent[1679]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Sep 6 01:20:42.622453 waagent[1679]: pkts bytes target prot opt in out source destination Sep 6 01:20:42.622453 waagent[1679]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Sep 6 01:20:42.622453 waagent[1679]: pkts bytes target prot opt in out source destination Sep 6 01:20:42.622453 waagent[1679]: 77 10606 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Sep 6 01:20:42.622453 waagent[1679]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Sep 6 01:20:42.656376 waagent[1679]: 2025-09-06T01:20:42.656306Z INFO ExtHandler ExtHandler Looking for existing remote access users. Sep 6 01:20:42.659142 waagent[1679]: 2025-09-06T01:20:42.659057Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.14.0.1 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: 9676E24B-36F3-486C-9189-840710042DBA;UpdateGSErrors: 0;AutoUpdate: 1;UpdateMode: SelfUpdate;] Sep 6 01:20:42.693767 waagent[1679]: 2025-09-06T01:20:42.693648Z INFO EnvHandler ExtHandler The firewall was setup successfully: Sep 6 01:20:42.693767 waagent[1679]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Sep 6 01:20:42.693767 waagent[1679]: pkts bytes target prot opt in out source destination Sep 6 01:20:42.693767 waagent[1679]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Sep 6 01:20:42.693767 waagent[1679]: pkts bytes target prot opt in out source destination Sep 6 01:20:42.693767 waagent[1679]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Sep 6 01:20:42.693767 waagent[1679]: pkts bytes target prot opt in out source destination Sep 6 01:20:42.693767 waagent[1679]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Sep 6 01:20:42.693767 waagent[1679]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Sep 6 01:20:42.693767 waagent[1679]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Sep 6 01:20:49.332064 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Sep 6 01:20:49.332255 systemd[1]: Stopped kubelet.service. Sep 6 01:20:49.333610 systemd[1]: Starting kubelet.service... Sep 6 01:20:49.623999 systemd[1]: Started kubelet.service. Sep 6 01:20:49.668899 kubelet[1729]: E0906 01:20:49.668837 1729 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 01:20:49.671132 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 01:20:49.671257 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 01:20:59.831978 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Sep 6 01:20:59.832166 systemd[1]: Stopped kubelet.service. Sep 6 01:20:59.833733 systemd[1]: Starting kubelet.service... Sep 6 01:21:00.125976 systemd[1]: Started kubelet.service. Sep 6 01:21:00.162270 kubelet[1738]: E0906 01:21:00.162213 1738 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 01:21:00.164308 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 01:21:00.164425 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 01:21:03.509037 systemd[1]: Created slice system-sshd.slice. Sep 6 01:21:03.510656 systemd[1]: Started sshd@0-10.200.20.26:22-10.200.16.10:39132.service. Sep 6 01:21:04.159273 sshd[1744]: Accepted publickey for core from 10.200.16.10 port 39132 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:21:04.174966 sshd[1744]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:21:04.178893 systemd-logind[1465]: New session 3 of user core. Sep 6 01:21:04.179340 systemd[1]: Started session-3.scope. Sep 6 01:21:04.571263 systemd[1]: Started sshd@1-10.200.20.26:22-10.200.16.10:39138.service. Sep 6 01:21:05.018714 sshd[1749]: Accepted publickey for core from 10.200.16.10 port 39138 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:21:05.027953 sshd[1749]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:21:05.032055 systemd[1]: Started session-4.scope. Sep 6 01:21:05.032637 systemd-logind[1465]: New session 4 of user core. Sep 6 01:21:05.340293 sshd[1749]: pam_unix(sshd:session): session closed for user core Sep 6 01:21:05.342768 systemd[1]: sshd@1-10.200.20.26:22-10.200.16.10:39138.service: Deactivated successfully. Sep 6 01:21:05.343488 systemd[1]: session-4.scope: Deactivated successfully. Sep 6 01:21:05.343999 systemd-logind[1465]: Session 4 logged out. Waiting for processes to exit. Sep 6 01:21:05.344700 systemd-logind[1465]: Removed session 4. Sep 6 01:21:05.421979 systemd[1]: Started sshd@2-10.200.20.26:22-10.200.16.10:39140.service. Sep 6 01:21:05.869742 sshd[1755]: Accepted publickey for core from 10.200.16.10 port 39140 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:21:05.870997 sshd[1755]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:21:05.875242 systemd[1]: Started session-5.scope. Sep 6 01:21:05.875543 systemd-logind[1465]: New session 5 of user core. Sep 6 01:21:06.217455 sshd[1755]: pam_unix(sshd:session): session closed for user core Sep 6 01:21:06.220029 systemd[1]: sshd@2-10.200.20.26:22-10.200.16.10:39140.service: Deactivated successfully. Sep 6 01:21:06.220712 systemd[1]: session-5.scope: Deactivated successfully. Sep 6 01:21:06.221265 systemd-logind[1465]: Session 5 logged out. Waiting for processes to exit. Sep 6 01:21:06.222084 systemd-logind[1465]: Removed session 5. Sep 6 01:21:06.299524 systemd[1]: Started sshd@3-10.200.20.26:22-10.200.16.10:39150.service. Sep 6 01:21:06.788775 sshd[1761]: Accepted publickey for core from 10.200.16.10 port 39150 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:21:06.790063 sshd[1761]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:21:06.793914 systemd-logind[1465]: New session 6 of user core. Sep 6 01:21:06.794340 systemd[1]: Started session-6.scope. Sep 6 01:21:07.161485 sshd[1761]: pam_unix(sshd:session): session closed for user core Sep 6 01:21:07.164302 systemd-logind[1465]: Session 6 logged out. Waiting for processes to exit. Sep 6 01:21:07.165476 systemd[1]: session-6.scope: Deactivated successfully. Sep 6 01:21:07.166425 systemd[1]: sshd@3-10.200.20.26:22-10.200.16.10:39150.service: Deactivated successfully. Sep 6 01:21:07.167523 systemd-logind[1465]: Removed session 6. Sep 6 01:21:07.229729 systemd[1]: Started sshd@4-10.200.20.26:22-10.200.16.10:39152.service. Sep 6 01:21:07.678657 sshd[1767]: Accepted publickey for core from 10.200.16.10 port 39152 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:21:07.680282 sshd[1767]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:21:07.684019 systemd-logind[1465]: New session 7 of user core. Sep 6 01:21:07.684510 systemd[1]: Started session-7.scope. Sep 6 01:21:08.213817 sudo[1770]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Sep 6 01:21:08.214028 sudo[1770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 6 01:21:08.259065 dbus-daemon[1450]: avc: received setenforce notice (enforcing=1) Sep 6 01:21:08.259260 sudo[1770]: pam_unix(sudo:session): session closed for user root Sep 6 01:21:08.343697 sshd[1767]: pam_unix(sshd:session): session closed for user core Sep 6 01:21:08.346776 systemd[1]: sshd@4-10.200.20.26:22-10.200.16.10:39152.service: Deactivated successfully. Sep 6 01:21:08.347580 systemd[1]: session-7.scope: Deactivated successfully. Sep 6 01:21:08.348221 systemd-logind[1465]: Session 7 logged out. Waiting for processes to exit. Sep 6 01:21:08.349270 systemd-logind[1465]: Removed session 7. Sep 6 01:21:08.412832 systemd[1]: Started sshd@5-10.200.20.26:22-10.200.16.10:39158.service. Sep 6 01:21:08.766135 kernel: hv_balloon: Max. dynamic memory size: 4096 MB Sep 6 01:21:08.829803 sshd[1774]: Accepted publickey for core from 10.200.16.10 port 39158 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:21:08.831154 sshd[1774]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:21:08.834985 systemd-logind[1465]: New session 8 of user core. Sep 6 01:21:08.835448 systemd[1]: Started session-8.scope. Sep 6 01:21:09.066358 sudo[1778]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Sep 6 01:21:09.066690 sudo[1778]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 6 01:21:09.069362 sudo[1778]: pam_unix(sudo:session): session closed for user root Sep 6 01:21:09.073922 sudo[1777]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Sep 6 01:21:09.074444 sudo[1777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 6 01:21:09.082862 systemd[1]: Stopping audit-rules.service... Sep 6 01:21:09.089841 kernel: kauditd_printk_skb: 136 callbacks suppressed Sep 6 01:21:09.089954 kernel: audit: type=1305 audit(1757121669.083:217): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 6 01:21:09.083000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 6 01:21:09.084591 systemd[1]: audit-rules.service: Deactivated successfully. Sep 6 01:21:09.090205 auditctl[1781]: No rules Sep 6 01:21:09.084763 systemd[1]: Stopped audit-rules.service. Sep 6 01:21:09.086241 systemd[1]: Starting audit-rules.service... Sep 6 01:21:09.083000 audit[1781]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc06212b0 a2=420 a3=0 items=0 ppid=1 pid=1781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:09.110953 augenrules[1798]: No rules Sep 6 01:21:09.111925 systemd[1]: Finished audit-rules.service. Sep 6 01:21:09.125066 kernel: audit: type=1300 audit(1757121669.083:217): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc06212b0 a2=420 a3=0 items=0 ppid=1 pid=1781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:09.125355 sudo[1777]: pam_unix(sudo:session): session closed for user root Sep 6 01:21:09.083000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Sep 6 01:21:09.133103 kernel: audit: type=1327 audit(1757121669.083:217): proctitle=2F7362696E2F617564697463746C002D44 Sep 6 01:21:09.133165 kernel: audit: type=1131 audit(1757121669.084:218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:09.084000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:09.112000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:09.166502 kernel: audit: type=1130 audit(1757121669.112:219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:09.166570 kernel: audit: type=1106 audit(1757121669.125:220): pid=1777 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 01:21:09.125000 audit[1777]: USER_END pid=1777 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 01:21:09.125000 audit[1777]: CRED_DISP pid=1777 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 01:21:09.202136 kernel: audit: type=1104 audit(1757121669.125:221): pid=1777 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 01:21:09.206191 sshd[1774]: pam_unix(sshd:session): session closed for user core Sep 6 01:21:09.207000 audit[1774]: USER_END pid=1774 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:09.232075 systemd[1]: sshd@5-10.200.20.26:22-10.200.16.10:39158.service: Deactivated successfully. Sep 6 01:21:09.207000 audit[1774]: CRED_DISP pid=1774 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:09.251758 kernel: audit: type=1106 audit(1757121669.207:222): pid=1774 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:09.251864 kernel: audit: type=1104 audit(1757121669.207:223): pid=1774 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:09.232866 systemd[1]: session-8.scope: Deactivated successfully. Sep 6 01:21:09.252365 systemd-logind[1465]: Session 8 logged out. Waiting for processes to exit. Sep 6 01:21:09.232000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.26:22-10.200.16.10:39158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:09.253340 systemd-logind[1465]: Removed session 8. Sep 6 01:21:09.273156 kernel: audit: type=1131 audit(1757121669.232:224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.26:22-10.200.16.10:39158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:09.277000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.26:22-10.200.16.10:39164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:09.277158 systemd[1]: Started sshd@6-10.200.20.26:22-10.200.16.10:39164.service. Sep 6 01:21:09.686000 audit[1804]: USER_ACCT pid=1804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:09.686510 sshd[1804]: Accepted publickey for core from 10.200.16.10 port 39164 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:21:09.687000 audit[1804]: CRED_ACQ pid=1804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:09.687000 audit[1804]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdffe4cd0 a2=3 a3=1 items=0 ppid=1 pid=1804 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:09.687000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:21:09.688160 sshd[1804]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:21:09.692164 systemd-logind[1465]: New session 9 of user core. Sep 6 01:21:09.692576 systemd[1]: Started session-9.scope. Sep 6 01:21:09.696000 audit[1804]: USER_START pid=1804 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:09.698000 audit[1806]: CRED_ACQ pid=1806 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:09.922000 audit[1807]: USER_ACCT pid=1807 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 01:21:09.922794 sudo[1807]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Sep 6 01:21:09.922000 audit[1807]: CRED_REFR pid=1807 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 01:21:09.923007 sudo[1807]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 6 01:21:09.924000 audit[1807]: USER_START pid=1807 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 01:21:09.944688 systemd[1]: Starting docker.service... Sep 6 01:21:09.996879 env[1817]: time="2025-09-06T01:21:09.996831854Z" level=info msg="Starting up" Sep 6 01:21:10.006371 env[1817]: time="2025-09-06T01:21:10.006332465Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 6 01:21:10.006371 env[1817]: time="2025-09-06T01:21:10.006362385Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 6 01:21:10.006521 env[1817]: time="2025-09-06T01:21:10.006383346Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 6 01:21:10.006521 env[1817]: time="2025-09-06T01:21:10.006393706Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 6 01:21:10.008301 env[1817]: time="2025-09-06T01:21:10.008270291Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 6 01:21:10.008301 env[1817]: time="2025-09-06T01:21:10.008295851Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 6 01:21:10.008410 env[1817]: time="2025-09-06T01:21:10.008313412Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 6 01:21:10.008410 env[1817]: time="2025-09-06T01:21:10.008322572Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 6 01:21:10.332000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:10.332000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:10.331957 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 4. Sep 6 01:21:10.332150 systemd[1]: Stopped kubelet.service. Sep 6 01:21:10.333606 systemd[1]: Starting kubelet.service... Sep 6 01:21:11.048000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:11.048151 systemd[1]: Started kubelet.service. Sep 6 01:21:11.184976 kubelet[1828]: E0906 01:21:11.184934 1828 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 01:21:11.187000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 01:21:14.157526 update_engine[1468]: I0906 01:21:13.202217 1468 update_attempter.cc:509] Updating boot flags... Sep 6 01:21:11.186971 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 01:21:11.187088 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 01:21:14.425249 env[1817]: time="2025-09-06T01:21:14.424639126Z" level=info msg="Loading containers: start." Sep 6 01:21:14.533000 audit[1919]: NETFILTER_CFG table=nat:9 family=2 entries=2 op=nft_register_chain pid=1919 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:14.538625 kernel: kauditd_printk_skb: 15 callbacks suppressed Sep 6 01:21:14.538738 kernel: audit: type=1325 audit(1757121674.533:238): table=nat:9 family=2 entries=2 op=nft_register_chain pid=1919 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:14.533000 audit[1919]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffd3825530 a2=0 a3=1 items=0 ppid=1817 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:14.574190 kernel: audit: type=1300 audit(1757121674.533:238): arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffd3825530 a2=0 a3=1 items=0 ppid=1817 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:14.574328 kernel: audit: type=1327 audit(1757121674.533:238): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Sep 6 01:21:14.533000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Sep 6 01:21:14.539000 audit[1921]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1921 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:14.598832 kernel: audit: type=1325 audit(1757121674.539:239): table=filter:10 family=2 entries=2 op=nft_register_chain pid=1921 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:14.598876 kernel: audit: type=1300 audit(1757121674.539:239): arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffe1d77e60 a2=0 a3=1 items=0 ppid=1817 pid=1921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:14.539000 audit[1921]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffe1d77e60 a2=0 a3=1 items=0 ppid=1817 pid=1921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:14.539000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Sep 6 01:21:14.638048 kernel: audit: type=1327 audit(1757121674.539:239): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Sep 6 01:21:14.638174 kernel: audit: type=1325 audit(1757121674.541:240): table=filter:11 family=2 entries=1 op=nft_register_chain pid=1923 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:14.541000 audit[1923]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_chain pid=1923 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:14.541000 audit[1923]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffec41b510 a2=0 a3=1 items=0 ppid=1817 pid=1923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:14.677478 kernel: audit: type=1300 audit(1757121674.541:240): arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffec41b510 a2=0 a3=1 items=0 ppid=1817 pid=1923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:14.541000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 6 01:21:14.692750 kernel: audit: type=1327 audit(1757121674.541:240): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 6 01:21:14.692820 kernel: audit: type=1325 audit(1757121674.543:241): table=filter:12 family=2 entries=1 op=nft_register_chain pid=1925 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:14.543000 audit[1925]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_chain pid=1925 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:14.543000 audit[1925]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffffb2fab40 a2=0 a3=1 items=0 ppid=1817 pid=1925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:14.543000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 6 01:21:14.545000 audit[1927]: NETFILTER_CFG table=filter:13 family=2 entries=1 op=nft_register_rule pid=1927 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:14.545000 audit[1927]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe5730cd0 a2=0 a3=1 items=0 ppid=1817 pid=1927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:14.545000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Sep 6 01:21:14.546000 audit[1929]: NETFILTER_CFG table=filter:14 family=2 entries=1 op=nft_register_rule pid=1929 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:14.546000 audit[1929]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe1d6ffe0 a2=0 a3=1 items=0 ppid=1817 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:14.546000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Sep 6 01:21:14.716000 audit[1931]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_chain pid=1931 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:14.716000 audit[1931]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc98e0c70 a2=0 a3=1 items=0 ppid=1817 pid=1931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:14.716000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Sep 6 01:21:14.718000 audit[1933]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1933 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:14.718000 audit[1933]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffe8ab67c0 a2=0 a3=1 items=0 ppid=1817 pid=1933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:14.718000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Sep 6 01:21:14.720000 audit[1935]: NETFILTER_CFG table=filter:17 family=2 entries=2 op=nft_register_chain pid=1935 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:14.720000 audit[1935]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffd8570030 a2=0 a3=1 items=0 ppid=1817 pid=1935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:14.720000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 6 01:21:14.770000 audit[1939]: NETFILTER_CFG table=filter:18 family=2 entries=1 op=nft_unregister_rule pid=1939 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:14.770000 audit[1939]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffcb239c30 a2=0 a3=1 items=0 ppid=1817 pid=1939 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:14.770000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 6 01:21:14.777000 audit[1940]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1940 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:14.777000 audit[1940]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffe1b9fa70 a2=0 a3=1 items=0 ppid=1817 pid=1940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:14.777000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 6 01:21:14.839142 kernel: Initializing XFRM netlink socket Sep 6 01:21:14.859278 env[1817]: time="2025-09-06T01:21:14.859235139Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Sep 6 01:21:14.955000 audit[1947]: NETFILTER_CFG table=nat:20 family=2 entries=2 op=nft_register_chain pid=1947 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:14.955000 audit[1947]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=fffffd3a0db0 a2=0 a3=1 items=0 ppid=1817 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:14.955000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Sep 6 01:21:14.979000 audit[1951]: NETFILTER_CFG table=nat:21 family=2 entries=1 op=nft_register_rule pid=1951 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:14.979000 audit[1951]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffd31a0640 a2=0 a3=1 items=0 ppid=1817 pid=1951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:14.979000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Sep 6 01:21:14.982000 audit[1954]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1954 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:14.982000 audit[1954]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffcb1192b0 a2=0 a3=1 items=0 ppid=1817 pid=1954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:14.982000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Sep 6 01:21:14.984000 audit[1956]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1956 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:14.984000 audit[1956]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffdcb07250 a2=0 a3=1 items=0 ppid=1817 pid=1956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:14.984000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Sep 6 01:21:14.985000 audit[1958]: NETFILTER_CFG table=nat:24 family=2 entries=2 op=nft_register_chain pid=1958 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:14.985000 audit[1958]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffd2212d40 a2=0 a3=1 items=0 ppid=1817 pid=1958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:14.985000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Sep 6 01:21:14.987000 audit[1960]: NETFILTER_CFG table=nat:25 family=2 entries=2 op=nft_register_chain pid=1960 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:14.987000 audit[1960]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffe5b20700 a2=0 a3=1 items=0 ppid=1817 pid=1960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:14.987000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Sep 6 01:21:14.989000 audit[1962]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1962 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:14.989000 audit[1962]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=fffffd17d4d0 a2=0 a3=1 items=0 ppid=1817 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:14.989000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Sep 6 01:21:14.991000 audit[1964]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_rule pid=1964 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:14.991000 audit[1964]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffc7dd8880 a2=0 a3=1 items=0 ppid=1817 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:14.991000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Sep 6 01:21:14.992000 audit[1966]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_register_rule pid=1966 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:14.992000 audit[1966]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffc3f13460 a2=0 a3=1 items=0 ppid=1817 pid=1966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:14.992000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 6 01:21:14.994000 audit[1968]: NETFILTER_CFG table=filter:29 family=2 entries=1 op=nft_register_rule pid=1968 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:14.994000 audit[1968]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffc51553c0 a2=0 a3=1 items=0 ppid=1817 pid=1968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:14.994000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 6 01:21:14.996000 audit[1970]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1970 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:14.996000 audit[1970]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc8604170 a2=0 a3=1 items=0 ppid=1817 pid=1970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:14.996000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Sep 6 01:21:14.997907 systemd-networkd[1625]: docker0: Link UP Sep 6 01:21:15.058000 audit[1974]: NETFILTER_CFG table=filter:31 family=2 entries=1 op=nft_unregister_rule pid=1974 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:15.058000 audit[1974]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd0bf5360 a2=0 a3=1 items=0 ppid=1817 pid=1974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:15.058000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 6 01:21:15.063000 audit[1975]: NETFILTER_CFG table=filter:32 family=2 entries=1 op=nft_register_rule pid=1975 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:15.063000 audit[1975]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffcfcc3180 a2=0 a3=1 items=0 ppid=1817 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:15.063000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 6 01:21:15.065401 env[1817]: time="2025-09-06T01:21:15.065376247Z" level=info msg="Loading containers: done." Sep 6 01:21:15.074523 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck3935704616-merged.mount: Deactivated successfully. Sep 6 01:21:17.405460 env[1817]: time="2025-09-06T01:21:17.405408091Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Sep 6 01:21:17.405839 env[1817]: time="2025-09-06T01:21:17.405612573Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Sep 6 01:21:17.405839 env[1817]: time="2025-09-06T01:21:17.405718174Z" level=info msg="Daemon has completed initialization" Sep 6 01:21:17.575708 systemd[1]: Started docker.service. Sep 6 01:21:17.574000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:17.582065 env[1817]: time="2025-09-06T01:21:17.581988569Z" level=info msg="API listen on /run/docker.sock" Sep 6 01:21:18.776874 env[1474]: time="2025-09-06T01:21:18.776832301Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.12\"" Sep 6 01:21:19.679993 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3807949181.mount: Deactivated successfully. Sep 6 01:21:21.331942 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 5. Sep 6 01:21:21.357110 kernel: kauditd_printk_skb: 63 callbacks suppressed Sep 6 01:21:21.357174 kernel: audit: type=1130 audit(1757121681.331:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:21.331000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:21.331000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:21.332129 systemd[1]: Stopped kubelet.service. Sep 6 01:21:21.377389 systemd[1]: Starting kubelet.service... Sep 6 01:21:21.378237 kernel: audit: type=1131 audit(1757121681.331:264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:21.468000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:21.469856 systemd[1]: Started kubelet.service. Sep 6 01:21:21.496141 kernel: audit: type=1130 audit(1757121681.468:265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:21.598357 kubelet[2014]: E0906 01:21:21.598235 2014 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 01:21:21.600092 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 01:21:21.600233 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 01:21:21.599000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 01:21:21.621139 kernel: audit: type=1131 audit(1757121681.599:266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 01:21:21.961327 env[1474]: time="2025-09-06T01:21:21.961216199Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:21.972548 env[1474]: time="2025-09-06T01:21:21.972482633Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:25d00c9505e8a4a7a6c827030f878b50e58bbf63322e01a7d92807bcb4db6b3d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:21.980331 env[1474]: time="2025-09-06T01:21:21.980281605Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:21.985034 env[1474]: time="2025-09-06T01:21:21.984987596Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:e9011c3bee8c06ecabd7816e119dca4e448c92f7a78acd891de3d2db1dc6c234,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:21.985887 env[1474]: time="2025-09-06T01:21:21.985859562Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.12\" returns image reference \"sha256:25d00c9505e8a4a7a6c827030f878b50e58bbf63322e01a7d92807bcb4db6b3d\"" Sep 6 01:21:21.987082 env[1474]: time="2025-09-06T01:21:21.987045370Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.12\"" Sep 6 01:21:23.622193 env[1474]: time="2025-09-06T01:21:23.622135712Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:23.632704 env[1474]: time="2025-09-06T01:21:23.632641734Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:04df324666956d4cb57096c0edff6bfe1d75e71fb8f508dec8818f2842f821e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:23.649491 env[1474]: time="2025-09-06T01:21:23.649441632Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:23.658455 env[1474]: time="2025-09-06T01:21:23.658419604Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:d2862f94d87320267fddbd55db26556a267aa802e51d6b60f25786b4c428afc8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:23.659319 env[1474]: time="2025-09-06T01:21:23.659289049Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.12\" returns image reference \"sha256:04df324666956d4cb57096c0edff6bfe1d75e71fb8f508dec8818f2842f821e1\"" Sep 6 01:21:23.661385 env[1474]: time="2025-09-06T01:21:23.661341941Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.12\"" Sep 6 01:21:25.424554 env[1474]: time="2025-09-06T01:21:25.424510089Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:25.434204 env[1474]: time="2025-09-06T01:21:25.434164019Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:00b0619122c2d4fd3b5e102e9850d8c732e08a386b9c172c409b3a5cd552e07d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:25.442280 env[1474]: time="2025-09-06T01:21:25.442238580Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:25.450800 env[1474]: time="2025-09-06T01:21:25.450760904Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:152943b7e30244f4415fd0a5860a2dccd91660fe983d30a28a10edb0cc8f6756,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:25.451773 env[1474]: time="2025-09-06T01:21:25.451747829Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.12\" returns image reference \"sha256:00b0619122c2d4fd3b5e102e9850d8c732e08a386b9c172c409b3a5cd552e07d\"" Sep 6 01:21:25.452693 env[1474]: time="2025-09-06T01:21:25.452660994Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.12\"" Sep 6 01:21:26.745518 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3444132482.mount: Deactivated successfully. Sep 6 01:21:27.296435 env[1474]: time="2025-09-06T01:21:27.296377873Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:27.310766 env[1474]: time="2025-09-06T01:21:27.310714422Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:25c7652bd0d893b147dce9135dc6a68c37da76f9a20dceec1d520782031b2f36,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:27.319344 env[1474]: time="2025-09-06T01:21:27.319308008Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:27.326492 env[1474]: time="2025-09-06T01:21:27.326448062Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:90aa6b5f4065937521ff8438bc705317485d0be3f8b00a07145e697d92cc2cc6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:27.326995 env[1474]: time="2025-09-06T01:21:27.326969666Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.12\" returns image reference \"sha256:25c7652bd0d893b147dce9135dc6a68c37da76f9a20dceec1d520782031b2f36\"" Sep 6 01:21:27.327576 env[1474]: time="2025-09-06T01:21:27.327548351Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Sep 6 01:21:31.832040 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 6. Sep 6 01:21:31.832243 systemd[1]: Stopped kubelet.service. Sep 6 01:21:31.831000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:31.833641 systemd[1]: Starting kubelet.service... Sep 6 01:21:31.831000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:31.869542 kernel: audit: type=1130 audit(1757121691.831:267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:31.869644 kernel: audit: type=1131 audit(1757121691.831:268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:37.774000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:37.775419 systemd[1]: Started kubelet.service. Sep 6 01:21:37.794174 kernel: audit: type=1130 audit(1757121697.774:269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:37.827147 kubelet[2024]: E0906 01:21:37.827078 2024 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 01:21:37.828846 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 01:21:37.828000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 01:21:37.828964 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 01:21:37.848220 kernel: audit: type=1131 audit(1757121697.828:270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 01:21:38.122169 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1230677518.mount: Deactivated successfully. Sep 6 01:21:46.013098 env[1474]: time="2025-09-06T01:21:46.013039544Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:46.025068 env[1474]: time="2025-09-06T01:21:46.025029879Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:46.033671 env[1474]: time="2025-09-06T01:21:46.033630918Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:46.041359 env[1474]: time="2025-09-06T01:21:46.041318353Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:46.042427 env[1474]: time="2025-09-06T01:21:46.042395958Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4\"" Sep 6 01:21:46.043797 env[1474]: time="2025-09-06T01:21:46.043772164Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Sep 6 01:21:46.764864 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3775157189.mount: Deactivated successfully. Sep 6 01:21:46.806924 env[1474]: time="2025-09-06T01:21:46.806866361Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:46.819836 env[1474]: time="2025-09-06T01:21:46.819794420Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:46.827003 env[1474]: time="2025-09-06T01:21:46.826948213Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:46.833894 env[1474]: time="2025-09-06T01:21:46.833849764Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:46.834512 env[1474]: time="2025-09-06T01:21:46.834484087Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Sep 6 01:21:46.835187 env[1474]: time="2025-09-06T01:21:46.835163290Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\"" Sep 6 01:21:47.636145 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2094070906.mount: Deactivated successfully. Sep 6 01:21:47.831949 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 7. Sep 6 01:21:47.832162 systemd[1]: Stopped kubelet.service. Sep 6 01:21:47.831000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:47.871385 kernel: audit: type=1130 audit(1757121707.831:271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:47.871445 kernel: audit: type=1131 audit(1757121707.831:272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:47.831000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:47.833556 systemd[1]: Starting kubelet.service... Sep 6 01:21:47.944245 systemd[1]: Started kubelet.service. Sep 6 01:21:47.943000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:47.967193 kernel: audit: type=1130 audit(1757121707.943:273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:47.996338 kubelet[2035]: E0906 01:21:47.996284 2035 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 01:21:47.998035 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 01:21:47.998178 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 01:21:47.997000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 01:21:48.019160 kernel: audit: type=1131 audit(1757121707.997:274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 01:21:50.702292 env[1474]: time="2025-09-06T01:21:50.702187640Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:50.713213 env[1474]: time="2025-09-06T01:21:50.713171525Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:27e3830e1402783674d8b594038967deea9d51f0d91b34c93c8f39d2f68af7da,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:50.721961 env[1474]: time="2025-09-06T01:21:50.721907281Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:50.728612 env[1474]: time="2025-09-06T01:21:50.728556588Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:a6dc63e6e8cfa0307d7851762fa6b629afb18f28d8aa3fab5a6e91b4af60026a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:50.729600 env[1474]: time="2025-09-06T01:21:50.729570432Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\" returns image reference \"sha256:27e3830e1402783674d8b594038967deea9d51f0d91b34c93c8f39d2f68af7da\"" Sep 6 01:21:55.909617 systemd[1]: Stopped kubelet.service. Sep 6 01:21:55.908000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:55.930267 systemd[1]: Starting kubelet.service... Sep 6 01:21:55.908000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:55.950302 kernel: audit: type=1130 audit(1757121715.908:275): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:55.950431 kernel: audit: type=1131 audit(1757121715.908:276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:55.976344 systemd[1]: Reloading. Sep 6 01:21:56.051288 /usr/lib/systemd/system-generators/torcx-generator[2086]: time="2025-09-06T01:21:56Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 6 01:21:56.057486 /usr/lib/systemd/system-generators/torcx-generator[2086]: time="2025-09-06T01:21:56Z" level=info msg="torcx already run" Sep 6 01:21:56.133723 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 6 01:21:56.133743 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 6 01:21:56.149484 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 6 01:21:56.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.260901 kernel: audit: type=1400 audit(1757121716.221:277): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.260995 kernel: audit: type=1400 audit(1757121716.221:278): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.279681 kernel: audit: type=1400 audit(1757121716.221:279): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.279824 kernel: audit: type=1400 audit(1757121716.221:280): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.316508 kernel: audit: type=1400 audit(1757121716.221:281): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.316614 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Sep 6 01:21:56.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.340361 kernel: audit: type=1400 audit(1757121716.221:282): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.340458 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Sep 6 01:21:56.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.239000 audit: BPF prog-id=44 op=LOAD Sep 6 01:21:56.239000 audit: BPF prog-id=27 op=UNLOAD Sep 6 01:21:56.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.260000 audit: BPF prog-id=45 op=LOAD Sep 6 01:21:56.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.260000 audit: BPF prog-id=46 op=LOAD Sep 6 01:21:56.260000 audit: BPF prog-id=28 op=UNLOAD Sep 6 01:21:56.260000 audit: BPF prog-id=29 op=UNLOAD Sep 6 01:21:56.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.279000 audit: BPF prog-id=47 op=LOAD Sep 6 01:21:56.279000 audit: BPF prog-id=36 op=UNLOAD Sep 6 01:21:56.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.297000 audit: BPF prog-id=48 op=LOAD Sep 6 01:21:56.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.297000 audit: BPF prog-id=49 op=LOAD Sep 6 01:21:56.297000 audit: BPF prog-id=30 op=UNLOAD Sep 6 01:21:56.297000 audit: BPF prog-id=31 op=UNLOAD Sep 6 01:21:56.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.345000 audit: BPF prog-id=50 op=LOAD Sep 6 01:21:56.346000 audit: BPF prog-id=37 op=UNLOAD Sep 6 01:21:56.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.346000 audit: BPF prog-id=51 op=LOAD Sep 6 01:21:56.346000 audit: BPF prog-id=41 op=UNLOAD Sep 6 01:21:56.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.348000 audit: BPF prog-id=52 op=LOAD Sep 6 01:21:56.348000 audit: BPF prog-id=38 op=UNLOAD Sep 6 01:21:56.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.348000 audit: BPF prog-id=53 op=LOAD Sep 6 01:21:56.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.348000 audit: BPF prog-id=54 op=LOAD Sep 6 01:21:56.348000 audit: BPF prog-id=39 op=UNLOAD Sep 6 01:21:56.348000 audit: BPF prog-id=40 op=UNLOAD Sep 6 01:21:56.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit: BPF prog-id=55 op=LOAD Sep 6 01:21:56.349000 audit: BPF prog-id=32 op=UNLOAD Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit: BPF prog-id=56 op=LOAD Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit: BPF prog-id=57 op=LOAD Sep 6 01:21:56.349000 audit: BPF prog-id=33 op=UNLOAD Sep 6 01:21:56.349000 audit: BPF prog-id=34 op=UNLOAD Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:56.349000 audit: BPF prog-id=58 op=LOAD Sep 6 01:21:56.349000 audit: BPF prog-id=43 op=UNLOAD Sep 6 01:21:56.371000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:56.372381 systemd[1]: Started kubelet.service. Sep 6 01:21:56.380935 systemd[1]: Stopping kubelet.service... Sep 6 01:21:56.381506 systemd[1]: kubelet.service: Deactivated successfully. Sep 6 01:21:56.381678 systemd[1]: Stopped kubelet.service. Sep 6 01:21:56.380000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:56.383791 systemd[1]: Starting kubelet.service... Sep 6 01:21:56.971652 systemd[1]: Started kubelet.service. Sep 6 01:21:56.972000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:57.021419 kubelet[2156]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 6 01:21:57.021419 kubelet[2156]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Sep 6 01:21:57.021419 kubelet[2156]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 6 01:21:57.021781 kubelet[2156]: I0906 01:21:57.021463 2156 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 6 01:21:57.808111 kubelet[2156]: I0906 01:21:57.808070 2156 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Sep 6 01:21:57.808111 kubelet[2156]: I0906 01:21:57.808103 2156 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 6 01:21:57.808387 kubelet[2156]: I0906 01:21:57.808364 2156 server.go:934] "Client rotation is on, will bootstrap in background" Sep 6 01:21:57.827426 kubelet[2156]: E0906 01:21:57.827388 2156 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.200.20.26:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.200.20.26:6443: connect: connection refused" logger="UnhandledError" Sep 6 01:21:57.828286 kubelet[2156]: I0906 01:21:57.828265 2156 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 6 01:21:57.833838 kubelet[2156]: E0906 01:21:57.833784 2156 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 6 01:21:57.833992 kubelet[2156]: I0906 01:21:57.833980 2156 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 6 01:21:57.838130 kubelet[2156]: I0906 01:21:57.838092 2156 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 6 01:21:57.838367 kubelet[2156]: I0906 01:21:57.838356 2156 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Sep 6 01:21:57.838625 kubelet[2156]: I0906 01:21:57.838599 2156 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 6 01:21:57.838877 kubelet[2156]: I0906 01:21:57.838688 2156 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-3510.3.8-n-b5f8f4c6c5","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 6 01:21:57.839002 kubelet[2156]: I0906 01:21:57.838990 2156 topology_manager.go:138] "Creating topology manager with none policy" Sep 6 01:21:57.839062 kubelet[2156]: I0906 01:21:57.839054 2156 container_manager_linux.go:300] "Creating device plugin manager" Sep 6 01:21:57.839258 kubelet[2156]: I0906 01:21:57.839246 2156 state_mem.go:36] "Initialized new in-memory state store" Sep 6 01:21:57.841484 kubelet[2156]: I0906 01:21:57.841465 2156 kubelet.go:408] "Attempting to sync node with API server" Sep 6 01:21:57.841591 kubelet[2156]: I0906 01:21:57.841579 2156 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 6 01:21:57.841661 kubelet[2156]: I0906 01:21:57.841652 2156 kubelet.go:314] "Adding apiserver pod source" Sep 6 01:21:57.841722 kubelet[2156]: I0906 01:21:57.841713 2156 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 6 01:21:57.847387 kubelet[2156]: W0906 01:21:57.847319 2156 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.200.20.26:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-b5f8f4c6c5&limit=500&resourceVersion=0": dial tcp 10.200.20.26:6443: connect: connection refused Sep 6 01:21:57.847387 kubelet[2156]: E0906 01:21:57.847386 2156 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.200.20.26:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-b5f8f4c6c5&limit=500&resourceVersion=0\": dial tcp 10.200.20.26:6443: connect: connection refused" logger="UnhandledError" Sep 6 01:21:57.848553 kubelet[2156]: W0906 01:21:57.848496 2156 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.200.20.26:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.200.20.26:6443: connect: connection refused Sep 6 01:21:57.848553 kubelet[2156]: E0906 01:21:57.848551 2156 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.200.20.26:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.200.20.26:6443: connect: connection refused" logger="UnhandledError" Sep 6 01:21:57.848688 kubelet[2156]: I0906 01:21:57.848665 2156 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 6 01:21:57.849181 kubelet[2156]: I0906 01:21:57.849157 2156 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Sep 6 01:21:57.849235 kubelet[2156]: W0906 01:21:57.849207 2156 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Sep 6 01:21:57.850562 kubelet[2156]: I0906 01:21:57.850532 2156 server.go:1274] "Started kubelet" Sep 6 01:21:57.862224 kubelet[2156]: E0906 01:21:57.857277 2156 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.200.20.26:6443/api/v1/namespaces/default/events\": dial tcp 10.200.20.26:6443: connect: connection refused" event="&Event{ObjectMeta:{ci-3510.3.8-n-b5f8f4c6c5.18628ce48b9a8f05 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ci-3510.3.8-n-b5f8f4c6c5,UID:ci-3510.3.8-n-b5f8f4c6c5,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ci-3510.3.8-n-b5f8f4c6c5,},FirstTimestamp:2025-09-06 01:21:57.850509061 +0000 UTC m=+0.866570204,LastTimestamp:2025-09-06 01:21:57.850509061 +0000 UTC m=+0.866570204,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ci-3510.3.8-n-b5f8f4c6c5,}" Sep 6 01:21:57.862521 kubelet[2156]: I0906 01:21:57.862473 2156 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Sep 6 01:21:57.862000 audit[2156]: AVC avc: denied { mac_admin } for pid=2156 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:57.862000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 01:21:57.862000 audit[2156]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b60960 a1=4000934708 a2=4000b60930 a3=25 items=0 ppid=1 pid=2156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:57.862000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 01:21:57.862000 audit[2156]: AVC avc: denied { mac_admin } for pid=2156 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:57.862000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 01:21:57.862000 audit[2156]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000407fe0 a1=4000934720 a2=4000b609f0 a3=25 items=0 ppid=1 pid=2156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:57.862000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 01:21:57.864356 kubelet[2156]: I0906 01:21:57.863990 2156 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Sep 6 01:21:57.864356 kubelet[2156]: I0906 01:21:57.864040 2156 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Sep 6 01:21:57.864356 kubelet[2156]: I0906 01:21:57.864098 2156 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 6 01:21:57.865960 kubelet[2156]: I0906 01:21:57.865903 2156 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 6 01:21:57.866249 kubelet[2156]: I0906 01:21:57.866224 2156 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 6 01:21:57.866525 kubelet[2156]: I0906 01:21:57.866506 2156 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 6 01:21:57.866000 audit[2168]: NETFILTER_CFG table=mangle:33 family=2 entries=2 op=nft_register_chain pid=2168 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:57.866000 audit[2168]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff469d6d0 a2=0 a3=1 items=0 ppid=2156 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:57.866000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 6 01:21:57.868912 kubelet[2156]: I0906 01:21:57.868896 2156 volume_manager.go:289] "Starting Kubelet Volume Manager" Sep 6 01:21:57.869429 kubelet[2156]: E0906 01:21:57.869411 2156 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-b5f8f4c6c5\" not found" Sep 6 01:21:57.870336 kubelet[2156]: I0906 01:21:57.870319 2156 server.go:449] "Adding debug handlers to kubelet server" Sep 6 01:21:57.871389 kubelet[2156]: I0906 01:21:57.871376 2156 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Sep 6 01:21:57.871576 kubelet[2156]: I0906 01:21:57.871567 2156 reconciler.go:26] "Reconciler: start to sync state" Sep 6 01:21:57.872829 kubelet[2156]: E0906 01:21:57.872741 2156 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.26:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-b5f8f4c6c5?timeout=10s\": dial tcp 10.200.20.26:6443: connect: connection refused" interval="200ms" Sep 6 01:21:57.873792 kubelet[2156]: W0906 01:21:57.873711 2156 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.200.20.26:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.26:6443: connect: connection refused Sep 6 01:21:57.874026 kubelet[2156]: E0906 01:21:57.874000 2156 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.200.20.26:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.200.20.26:6443: connect: connection refused" logger="UnhandledError" Sep 6 01:21:57.874594 kubelet[2156]: I0906 01:21:57.874531 2156 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 6 01:21:57.874000 audit[2169]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_chain pid=2169 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:57.874000 audit[2169]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc278c2f0 a2=0 a3=1 items=0 ppid=2156 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:57.874000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 6 01:21:57.881451 kubelet[2156]: E0906 01:21:57.881419 2156 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Sep 6 01:21:57.882046 kubelet[2156]: I0906 01:21:57.882026 2156 factory.go:221] Registration of the containerd container factory successfully Sep 6 01:21:57.882200 kubelet[2156]: I0906 01:21:57.882148 2156 factory.go:221] Registration of the systemd container factory successfully Sep 6 01:21:57.888000 audit[2172]: NETFILTER_CFG table=filter:35 family=2 entries=2 op=nft_register_chain pid=2172 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:57.888000 audit[2172]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe8408940 a2=0 a3=1 items=0 ppid=2156 pid=2172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:57.888000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 6 01:21:57.891000 audit[2174]: NETFILTER_CFG table=filter:36 family=2 entries=2 op=nft_register_chain pid=2174 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:57.891000 audit[2174]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc129dc50 a2=0 a3=1 items=0 ppid=2156 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:57.891000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 6 01:21:57.970979 kubelet[2156]: E0906 01:21:57.970952 2156 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-b5f8f4c6c5\" not found" Sep 6 01:21:57.971000 audit[2178]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_rule pid=2178 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:57.971000 audit[2178]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffffb18bb0 a2=0 a3=1 items=0 ppid=2156 pid=2178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:57.971000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Sep 6 01:21:57.972990 kubelet[2156]: I0906 01:21:57.972941 2156 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Sep 6 01:21:57.972000 audit[2181]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2181 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:57.972000 audit[2181]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff0f345d0 a2=0 a3=1 items=0 ppid=2156 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:57.972000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 6 01:21:57.973000 audit[2180]: NETFILTER_CFG table=mangle:39 family=10 entries=2 op=nft_register_chain pid=2180 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:57.973000 audit[2180]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffdff47d90 a2=0 a3=1 items=0 ppid=2156 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:57.973000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 6 01:21:57.974916 kubelet[2156]: I0906 01:21:57.974887 2156 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Sep 6 01:21:57.975050 kubelet[2156]: I0906 01:21:57.975041 2156 status_manager.go:217] "Starting to sync pod status with apiserver" Sep 6 01:21:57.975335 kubelet[2156]: I0906 01:21:57.975321 2156 kubelet.go:2321] "Starting kubelet main sync loop" Sep 6 01:21:57.975500 kubelet[2156]: E0906 01:21:57.975469 2156 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Sep 6 01:21:57.974000 audit[2184]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2184 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:57.974000 audit[2184]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffce7d5a90 a2=0 a3=1 items=0 ppid=2156 pid=2184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:57.974000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 6 01:21:57.975000 audit[2185]: NETFILTER_CFG table=mangle:41 family=10 entries=1 op=nft_register_chain pid=2185 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:57.975000 audit[2185]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffef741680 a2=0 a3=1 items=0 ppid=2156 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:57.975000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 6 01:21:57.977870 kubelet[2156]: W0906 01:21:57.977840 2156 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.200.20.26:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.26:6443: connect: connection refused Sep 6 01:21:57.978002 kubelet[2156]: E0906 01:21:57.977981 2156 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.200.20.26:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.200.20.26:6443: connect: connection refused" logger="UnhandledError" Sep 6 01:21:57.976000 audit[2187]: NETFILTER_CFG table=nat:42 family=10 entries=2 op=nft_register_chain pid=2187 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:57.976000 audit[2187]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffe5f084b0 a2=0 a3=1 items=0 ppid=2156 pid=2187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:57.976000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 6 01:21:57.977000 audit[2188]: NETFILTER_CFG table=filter:43 family=10 entries=2 op=nft_register_chain pid=2188 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:57.977000 audit[2188]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd24564b0 a2=0 a3=1 items=0 ppid=2156 pid=2188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:57.977000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 6 01:21:57.978000 audit[2186]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2186 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:57.978000 audit[2186]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcb0aa0e0 a2=0 a3=1 items=0 ppid=2156 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:57.978000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 6 01:21:58.027671 kubelet[2156]: I0906 01:21:58.027624 2156 cpu_manager.go:214] "Starting CPU manager" policy="none" Sep 6 01:21:58.027671 kubelet[2156]: I0906 01:21:58.027660 2156 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Sep 6 01:21:58.027671 kubelet[2156]: I0906 01:21:58.027681 2156 state_mem.go:36] "Initialized new in-memory state store" Sep 6 01:21:58.038296 kubelet[2156]: I0906 01:21:58.038267 2156 policy_none.go:49] "None policy: Start" Sep 6 01:21:58.039211 kubelet[2156]: I0906 01:21:58.039196 2156 memory_manager.go:170] "Starting memorymanager" policy="None" Sep 6 01:21:58.039334 kubelet[2156]: I0906 01:21:58.039323 2156 state_mem.go:35] "Initializing new in-memory state store" Sep 6 01:21:58.057516 systemd[1]: Created slice kubepods.slice. Sep 6 01:21:58.062496 systemd[1]: Created slice kubepods-burstable.slice. Sep 6 01:21:58.067601 systemd[1]: Created slice kubepods-besteffort.slice. Sep 6 01:21:58.072210 kubelet[2156]: E0906 01:21:58.072169 2156 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-b5f8f4c6c5\" not found" Sep 6 01:21:58.073899 kubelet[2156]: E0906 01:21:58.073850 2156 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.26:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-b5f8f4c6c5?timeout=10s\": dial tcp 10.200.20.26:6443: connect: connection refused" interval="400ms" Sep 6 01:21:58.075020 kubelet[2156]: I0906 01:21:58.074998 2156 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Sep 6 01:21:58.073000 audit[2156]: AVC avc: denied { mac_admin } for pid=2156 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:58.073000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 01:21:58.073000 audit[2156]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d62360 a1=4000d5f158 a2=4000d62330 a3=25 items=0 ppid=1 pid=2156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:58.073000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 01:21:58.075302 kubelet[2156]: I0906 01:21:58.075083 2156 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Sep 6 01:21:58.075302 kubelet[2156]: I0906 01:21:58.075219 2156 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 6 01:21:58.075302 kubelet[2156]: I0906 01:21:58.075231 2156 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 6 01:21:58.077056 kubelet[2156]: I0906 01:21:58.077035 2156 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 6 01:21:58.079273 kubelet[2156]: E0906 01:21:58.079256 2156 eviction_manager.go:285] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.8-n-b5f8f4c6c5\" not found" Sep 6 01:21:58.087230 systemd[1]: Created slice kubepods-burstable-pod7d6e5771c07fa8cce8bdd6524652f8fe.slice. Sep 6 01:21:58.107653 systemd[1]: Created slice kubepods-burstable-pod04fb5141b2feab7ebbd39118ede665b3.slice. Sep 6 01:21:58.118609 systemd[1]: Created slice kubepods-burstable-podd4de1728cbdd0271643052936ef9db65.slice. Sep 6 01:21:58.173178 kubelet[2156]: I0906 01:21:58.173099 2156 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d4de1728cbdd0271643052936ef9db65-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.8-n-b5f8f4c6c5\" (UID: \"d4de1728cbdd0271643052936ef9db65\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:21:58.173178 kubelet[2156]: I0906 01:21:58.173184 2156 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/04fb5141b2feab7ebbd39118ede665b3-ca-certs\") pod \"kube-apiserver-ci-3510.3.8-n-b5f8f4c6c5\" (UID: \"04fb5141b2feab7ebbd39118ede665b3\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:21:58.173348 kubelet[2156]: I0906 01:21:58.173243 2156 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/04fb5141b2feab7ebbd39118ede665b3-k8s-certs\") pod \"kube-apiserver-ci-3510.3.8-n-b5f8f4c6c5\" (UID: \"04fb5141b2feab7ebbd39118ede665b3\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:21:58.173348 kubelet[2156]: I0906 01:21:58.173259 2156 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d4de1728cbdd0271643052936ef9db65-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.8-n-b5f8f4c6c5\" (UID: \"d4de1728cbdd0271643052936ef9db65\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:21:58.173348 kubelet[2156]: I0906 01:21:58.173274 2156 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d4de1728cbdd0271643052936ef9db65-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-b5f8f4c6c5\" (UID: \"d4de1728cbdd0271643052936ef9db65\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:21:58.173348 kubelet[2156]: I0906 01:21:58.173327 2156 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d4de1728cbdd0271643052936ef9db65-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.8-n-b5f8f4c6c5\" (UID: \"d4de1728cbdd0271643052936ef9db65\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:21:58.173348 kubelet[2156]: I0906 01:21:58.173342 2156 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/7d6e5771c07fa8cce8bdd6524652f8fe-kubeconfig\") pod \"kube-scheduler-ci-3510.3.8-n-b5f8f4c6c5\" (UID: \"7d6e5771c07fa8cce8bdd6524652f8fe\") " pod="kube-system/kube-scheduler-ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:21:58.173460 kubelet[2156]: I0906 01:21:58.173391 2156 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/04fb5141b2feab7ebbd39118ede665b3-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.8-n-b5f8f4c6c5\" (UID: \"04fb5141b2feab7ebbd39118ede665b3\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:21:58.173460 kubelet[2156]: I0906 01:21:58.173407 2156 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d4de1728cbdd0271643052936ef9db65-ca-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-b5f8f4c6c5\" (UID: \"d4de1728cbdd0271643052936ef9db65\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:21:58.177520 kubelet[2156]: I0906 01:21:58.177503 2156 kubelet_node_status.go:72] "Attempting to register node" node="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:21:58.177976 kubelet[2156]: E0906 01:21:58.177954 2156 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.200.20.26:6443/api/v1/nodes\": dial tcp 10.200.20.26:6443: connect: connection refused" node="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:21:58.380021 kubelet[2156]: I0906 01:21:58.379991 2156 kubelet_node_status.go:72] "Attempting to register node" node="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:21:58.380356 kubelet[2156]: E0906 01:21:58.380330 2156 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.200.20.26:6443/api/v1/nodes\": dial tcp 10.200.20.26:6443: connect: connection refused" node="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:21:58.411549 env[1474]: time="2025-09-06T01:21:58.411373090Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.8-n-b5f8f4c6c5,Uid:7d6e5771c07fa8cce8bdd6524652f8fe,Namespace:kube-system,Attempt:0,}" Sep 6 01:21:58.411549 env[1474]: time="2025-09-06T01:21:58.411432930Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.8-n-b5f8f4c6c5,Uid:04fb5141b2feab7ebbd39118ede665b3,Namespace:kube-system,Attempt:0,}" Sep 6 01:21:58.422479 env[1474]: time="2025-09-06T01:21:58.422442327Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.8-n-b5f8f4c6c5,Uid:d4de1728cbdd0271643052936ef9db65,Namespace:kube-system,Attempt:0,}" Sep 6 01:21:58.474334 kubelet[2156]: E0906 01:21:58.474296 2156 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.26:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-b5f8f4c6c5?timeout=10s\": dial tcp 10.200.20.26:6443: connect: connection refused" interval="800ms" Sep 6 01:21:58.782379 kubelet[2156]: I0906 01:21:58.782279 2156 kubelet_node_status.go:72] "Attempting to register node" node="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:21:58.783092 kubelet[2156]: E0906 01:21:58.783055 2156 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.200.20.26:6443/api/v1/nodes\": dial tcp 10.200.20.26:6443: connect: connection refused" node="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:21:59.039527 kubelet[2156]: W0906 01:21:59.039423 2156 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.200.20.26:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.26:6443: connect: connection refused Sep 6 01:21:59.039527 kubelet[2156]: E0906 01:21:59.039472 2156 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.200.20.26:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.200.20.26:6443: connect: connection refused" logger="UnhandledError" Sep 6 01:21:59.275526 kubelet[2156]: E0906 01:21:59.275468 2156 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.26:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-b5f8f4c6c5?timeout=10s\": dial tcp 10.200.20.26:6443: connect: connection refused" interval="1.6s" Sep 6 01:21:59.348475 kubelet[2156]: W0906 01:21:59.348416 2156 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.200.20.26:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-b5f8f4c6c5&limit=500&resourceVersion=0": dial tcp 10.200.20.26:6443: connect: connection refused Sep 6 01:21:59.348610 kubelet[2156]: E0906 01:21:59.348484 2156 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.200.20.26:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-b5f8f4c6c5&limit=500&resourceVersion=0\": dial tcp 10.200.20.26:6443: connect: connection refused" logger="UnhandledError" Sep 6 01:21:59.349794 kubelet[2156]: W0906 01:21:59.349726 2156 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.200.20.26:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.200.20.26:6443: connect: connection refused Sep 6 01:21:59.349794 kubelet[2156]: E0906 01:21:59.349767 2156 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.200.20.26:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.200.20.26:6443: connect: connection refused" logger="UnhandledError" Sep 6 01:21:59.376646 kubelet[2156]: W0906 01:21:59.376580 2156 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.200.20.26:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.26:6443: connect: connection refused Sep 6 01:21:59.376646 kubelet[2156]: E0906 01:21:59.376620 2156 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.200.20.26:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.200.20.26:6443: connect: connection refused" logger="UnhandledError" Sep 6 01:21:59.405078 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1848470062.mount: Deactivated successfully. Sep 6 01:21:59.439379 env[1474]: time="2025-09-06T01:21:59.439324411Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:59.463914 env[1474]: time="2025-09-06T01:21:59.463866812Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:59.478990 env[1474]: time="2025-09-06T01:21:59.478944342Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:59.486738 env[1474]: time="2025-09-06T01:21:59.486675407Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:59.515983 env[1474]: time="2025-09-06T01:21:59.515934744Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:59.528996 env[1474]: time="2025-09-06T01:21:59.528936067Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:59.537218 env[1474]: time="2025-09-06T01:21:59.537176494Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:59.545761 env[1474]: time="2025-09-06T01:21:59.545718122Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:59.553756 env[1474]: time="2025-09-06T01:21:59.553711468Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:59.560429 env[1474]: time="2025-09-06T01:21:59.560376371Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:59.573633 env[1474]: time="2025-09-06T01:21:59.573570054Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:59.590706 kubelet[2156]: I0906 01:21:59.590364 2156 kubelet_node_status.go:72] "Attempting to register node" node="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:21:59.590706 kubelet[2156]: E0906 01:21:59.590669 2156 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.200.20.26:6443/api/v1/nodes\": dial tcp 10.200.20.26:6443: connect: connection refused" node="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:21:59.590866 env[1474]: time="2025-09-06T01:21:59.590625550Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:59.683995 env[1474]: time="2025-09-06T01:21:59.683392017Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:21:59.683995 env[1474]: time="2025-09-06T01:21:59.683447897Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:21:59.683995 env[1474]: time="2025-09-06T01:21:59.683459257Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:21:59.684539 env[1474]: time="2025-09-06T01:21:59.684481420Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/703aa22c8eddf0af3add99459ede23c316aa0598c199bb8f5b6742e8e477bc84 pid=2195 runtime=io.containerd.runc.v2 Sep 6 01:21:59.704076 systemd[1]: Started cri-containerd-703aa22c8eddf0af3add99459ede23c316aa0598c199bb8f5b6742e8e477bc84.scope. Sep 6 01:21:59.722462 env[1474]: time="2025-09-06T01:21:59.722331745Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:21:59.722462 env[1474]: time="2025-09-06T01:21:59.722365985Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:21:59.722462 env[1474]: time="2025-09-06T01:21:59.722376025Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:21:59.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.728000 audit: BPF prog-id=59 op=LOAD Sep 6 01:21:59.730056 env[1474]: time="2025-09-06T01:21:59.726191398Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/73db370b10cb3b0d46a43d2bbf9f30c7d5c548114b19a67026c96ba9fde1b5ce pid=2229 runtime=io.containerd.runc.v2 Sep 6 01:21:59.729000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.729000 audit[2206]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2195 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.729000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730336161323263386564646630616633616464393934353965646532 Sep 6 01:21:59.729000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.729000 audit[2206]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2195 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.729000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730336161323263386564646630616633616464393934353965646532 Sep 6 01:21:59.729000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.729000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.729000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.729000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.729000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.729000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.729000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.729000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.729000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.729000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.729000 audit: BPF prog-id=60 op=LOAD Sep 6 01:21:59.729000 audit[2206]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2195 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.729000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730336161323263386564646630616633616464393934353965646532 Sep 6 01:21:59.730000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.730000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.730000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.730000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.730000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.730000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.730000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.730000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.730000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.730000 audit: BPF prog-id=61 op=LOAD Sep 6 01:21:59.730000 audit[2206]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2195 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.730000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730336161323263386564646630616633616464393934353965646532 Sep 6 01:21:59.731000 audit: BPF prog-id=61 op=UNLOAD Sep 6 01:21:59.731000 audit: BPF prog-id=60 op=UNLOAD Sep 6 01:21:59.731000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.731000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.731000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.733143 env[1474]: time="2025-09-06T01:21:59.733059221Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:21:59.733205 env[1474]: time="2025-09-06T01:21:59.733157421Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:21:59.733205 env[1474]: time="2025-09-06T01:21:59.733184501Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:21:59.731000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.731000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.733354 env[1474]: time="2025-09-06T01:21:59.733307502Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/000b80fa0f9a66c1c0d3c9d3e84af8f28d732be0550beec05cfc22a13c2a90d4 pid=2245 runtime=io.containerd.runc.v2 Sep 6 01:21:59.731000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.731000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.731000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.731000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.731000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.731000 audit: BPF prog-id=62 op=LOAD Sep 6 01:21:59.731000 audit[2206]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2195 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.731000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730336161323263386564646630616633616464393934353965646532 Sep 6 01:21:59.752930 systemd[1]: Started cri-containerd-73db370b10cb3b0d46a43d2bbf9f30c7d5c548114b19a67026c96ba9fde1b5ce.scope. Sep 6 01:21:59.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.767000 audit: BPF prog-id=63 op=LOAD Sep 6 01:21:59.768000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.769992 env[1474]: time="2025-09-06T01:21:59.769950303Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.8-n-b5f8f4c6c5,Uid:04fb5141b2feab7ebbd39118ede665b3,Namespace:kube-system,Attempt:0,} returns sandbox id \"703aa22c8eddf0af3add99459ede23c316aa0598c199bb8f5b6742e8e477bc84\"" Sep 6 01:21:59.768000 audit[2257]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2229 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.768000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733646233373062313063623362306434366134336432626266396633 Sep 6 01:21:59.770000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.770000 audit[2257]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2229 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.770000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733646233373062313063623362306434366134336432626266396633 Sep 6 01:21:59.771000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.771000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.771000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.771000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.771000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.771000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.771000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.771000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.771000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.771000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.771000 audit: BPF prog-id=64 op=LOAD Sep 6 01:21:59.771000 audit[2257]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2229 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.771000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733646233373062313063623362306434366134336432626266396633 Sep 6 01:21:59.772000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.772000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.772000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.772000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.772000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.772000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.772000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.772000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.772000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.772000 audit: BPF prog-id=65 op=LOAD Sep 6 01:21:59.772000 audit[2257]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2229 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.772000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733646233373062313063623362306434366134336432626266396633 Sep 6 01:21:59.773000 audit: BPF prog-id=65 op=UNLOAD Sep 6 01:21:59.773000 audit: BPF prog-id=64 op=UNLOAD Sep 6 01:21:59.774402 systemd[1]: Started cri-containerd-000b80fa0f9a66c1c0d3c9d3e84af8f28d732be0550beec05cfc22a13c2a90d4.scope. Sep 6 01:21:59.773000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.773000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.773000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.773000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.773000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.773000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.773000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.773000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.773000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.773000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.773000 audit: BPF prog-id=66 op=LOAD Sep 6 01:21:59.773000 audit[2257]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2229 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.773000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733646233373062313063623362306434366134336432626266396633 Sep 6 01:21:59.783330 env[1474]: time="2025-09-06T01:21:59.783271947Z" level=info msg="CreateContainer within sandbox \"703aa22c8eddf0af3add99459ede23c316aa0598c199bb8f5b6742e8e477bc84\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Sep 6 01:21:59.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.794000 audit: BPF prog-id=67 op=LOAD Sep 6 01:21:59.794000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.794000 audit[2264]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2245 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.794000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030306238306661306639613636633163306433633964336538346166 Sep 6 01:21:59.795000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.795000 audit[2264]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2245 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.795000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030306238306661306639613636633163306433633964336538346166 Sep 6 01:21:59.795000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.795000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.795000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.795000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.795000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.795000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.795000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.795000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.795000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.795000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.795000 audit: BPF prog-id=68 op=LOAD Sep 6 01:21:59.795000 audit[2264]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2245 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.795000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030306238306661306639613636633163306433633964336538346166 Sep 6 01:21:59.796000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.796000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.796000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.796000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.796000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.796000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.796000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.796000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.796000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.796000 audit: BPF prog-id=69 op=LOAD Sep 6 01:21:59.796000 audit[2264]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2245 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030306238306661306639613636633163306433633964336538346166 Sep 6 01:21:59.797000 audit: BPF prog-id=69 op=UNLOAD Sep 6 01:21:59.797000 audit: BPF prog-id=68 op=UNLOAD Sep 6 01:21:59.797000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.797000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.797000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.797000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.797000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.797000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.797000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.797000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.797000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.797000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.797000 audit: BPF prog-id=70 op=LOAD Sep 6 01:21:59.797000 audit[2264]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2245 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.797000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030306238306661306639613636633163306433633964336538346166 Sep 6 01:21:59.808400 env[1474]: time="2025-09-06T01:21:59.808339309Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.8-n-b5f8f4c6c5,Uid:7d6e5771c07fa8cce8bdd6524652f8fe,Namespace:kube-system,Attempt:0,} returns sandbox id \"73db370b10cb3b0d46a43d2bbf9f30c7d5c548114b19a67026c96ba9fde1b5ce\"" Sep 6 01:21:59.812410 env[1474]: time="2025-09-06T01:21:59.812157722Z" level=info msg="CreateContainer within sandbox \"73db370b10cb3b0d46a43d2bbf9f30c7d5c548114b19a67026c96ba9fde1b5ce\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Sep 6 01:21:59.821282 env[1474]: time="2025-09-06T01:21:59.821231232Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.8-n-b5f8f4c6c5,Uid:d4de1728cbdd0271643052936ef9db65,Namespace:kube-system,Attempt:0,} returns sandbox id \"000b80fa0f9a66c1c0d3c9d3e84af8f28d732be0550beec05cfc22a13c2a90d4\"" Sep 6 01:21:59.824095 env[1474]: time="2025-09-06T01:21:59.824060721Z" level=info msg="CreateContainer within sandbox \"000b80fa0f9a66c1c0d3c9d3e84af8f28d732be0550beec05cfc22a13c2a90d4\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Sep 6 01:21:59.859124 env[1474]: time="2025-09-06T01:21:59.859067717Z" level=info msg="CreateContainer within sandbox \"703aa22c8eddf0af3add99459ede23c316aa0598c199bb8f5b6742e8e477bc84\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"3149d5c1ecab76b238545b8479deff4e76bd66f10f6a83485ca35b820384087e\"" Sep 6 01:21:59.859782 env[1474]: time="2025-09-06T01:21:59.859756599Z" level=info msg="StartContainer for \"3149d5c1ecab76b238545b8479deff4e76bd66f10f6a83485ca35b820384087e\"" Sep 6 01:21:59.877946 systemd[1]: Started cri-containerd-3149d5c1ecab76b238545b8479deff4e76bd66f10f6a83485ca35b820384087e.scope. Sep 6 01:21:59.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.889000 audit: BPF prog-id=71 op=LOAD Sep 6 01:21:59.889000 audit[2320]: AVC avc: denied { bpf } for pid=2320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.889000 audit[2320]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2195 pid=2320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.889000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331343964356331656361623736623233383534356238343739646566 Sep 6 01:21:59.890000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.890000 audit[2320]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2195 pid=2320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.890000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331343964356331656361623736623233383534356238343739646566 Sep 6 01:21:59.890000 audit[2320]: AVC avc: denied { bpf } for pid=2320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.890000 audit[2320]: AVC avc: denied { bpf } for pid=2320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.890000 audit[2320]: AVC avc: denied { bpf } for pid=2320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.890000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.890000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.890000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.890000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.890000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.890000 audit[2320]: AVC avc: denied { bpf } for pid=2320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.890000 audit[2320]: AVC avc: denied { bpf } for pid=2320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.890000 audit: BPF prog-id=72 op=LOAD Sep 6 01:21:59.890000 audit[2320]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2195 pid=2320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.890000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331343964356331656361623736623233383534356238343739646566 Sep 6 01:21:59.891000 audit[2320]: AVC avc: denied { bpf } for pid=2320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.891000 audit[2320]: AVC avc: denied { bpf } for pid=2320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.891000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.891000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.891000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.891000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.891000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.891000 audit[2320]: AVC avc: denied { bpf } for pid=2320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.891000 audit[2320]: AVC avc: denied { bpf } for pid=2320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.891000 audit: BPF prog-id=73 op=LOAD Sep 6 01:21:59.891000 audit[2320]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2195 pid=2320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.891000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331343964356331656361623736623233383534356238343739646566 Sep 6 01:21:59.891000 audit: BPF prog-id=73 op=UNLOAD Sep 6 01:21:59.891000 audit: BPF prog-id=72 op=UNLOAD Sep 6 01:21:59.891000 audit[2320]: AVC avc: denied { bpf } for pid=2320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.891000 audit[2320]: AVC avc: denied { bpf } for pid=2320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.891000 audit[2320]: AVC avc: denied { bpf } for pid=2320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.891000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.891000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.891000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.891000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.891000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.891000 audit[2320]: AVC avc: denied { bpf } for pid=2320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.891000 audit[2320]: AVC avc: denied { bpf } for pid=2320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.891000 audit: BPF prog-id=74 op=LOAD Sep 6 01:21:59.891000 audit[2320]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2195 pid=2320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.891000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331343964356331656361623736623233383534356238343739646566 Sep 6 01:21:59.917991 env[1474]: time="2025-09-06T01:21:59.917939551Z" level=info msg="StartContainer for \"3149d5c1ecab76b238545b8479deff4e76bd66f10f6a83485ca35b820384087e\" returns successfully" Sep 6 01:21:59.922734 env[1474]: time="2025-09-06T01:21:59.922671767Z" level=info msg="CreateContainer within sandbox \"73db370b10cb3b0d46a43d2bbf9f30c7d5c548114b19a67026c96ba9fde1b5ce\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"d4e2810f8247a067d70b5c6fbd4fce8517cdba14ada470b0daf8124aa77b53e7\"" Sep 6 01:21:59.923506 env[1474]: time="2025-09-06T01:21:59.923468250Z" level=info msg="StartContainer for \"d4e2810f8247a067d70b5c6fbd4fce8517cdba14ada470b0daf8124aa77b53e7\"" Sep 6 01:21:59.930243 env[1474]: time="2025-09-06T01:21:59.930203792Z" level=info msg="CreateContainer within sandbox \"000b80fa0f9a66c1c0d3c9d3e84af8f28d732be0550beec05cfc22a13c2a90d4\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"9b1cc0941a7fc5d8efc79a1277c72179066d64fb6d42308ad561965b3531cf97\"" Sep 6 01:21:59.930834 env[1474]: time="2025-09-06T01:21:59.930811434Z" level=info msg="StartContainer for \"9b1cc0941a7fc5d8efc79a1277c72179066d64fb6d42308ad561965b3531cf97\"" Sep 6 01:21:59.953451 systemd[1]: Started cri-containerd-d4e2810f8247a067d70b5c6fbd4fce8517cdba14ada470b0daf8124aa77b53e7.scope. Sep 6 01:21:59.967698 systemd[1]: Started cri-containerd-9b1cc0941a7fc5d8efc79a1277c72179066d64fb6d42308ad561965b3531cf97.scope. Sep 6 01:21:59.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.976000 audit: BPF prog-id=75 op=LOAD Sep 6 01:21:59.977000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.977000 audit[2353]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434653238313066383234376130363764373062356336666264346663 Sep 6 01:21:59.977000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.977000 audit[2353]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434653238313066383234376130363764373062356336666264346663 Sep 6 01:21:59.977000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.977000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.977000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.977000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.977000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.977000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.977000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.977000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.977000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.977000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.977000 audit: BPF prog-id=76 op=LOAD Sep 6 01:21:59.977000 audit[2353]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434653238313066383234376130363764373062356336666264346663 Sep 6 01:21:59.977000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.977000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.977000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.977000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.977000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.977000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.977000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.977000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.977000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.977000 audit: BPF prog-id=77 op=LOAD Sep 6 01:21:59.977000 audit[2353]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434653238313066383234376130363764373062356336666264346663 Sep 6 01:21:59.977000 audit: BPF prog-id=77 op=UNLOAD Sep 6 01:21:59.977000 audit: BPF prog-id=76 op=UNLOAD Sep 6 01:21:59.977000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.977000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.977000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.977000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.977000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.977000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.977000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.977000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.977000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.977000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.977000 audit: BPF prog-id=78 op=LOAD Sep 6 01:21:59.977000 audit[2353]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434653238313066383234376130363764373062356336666264346663 Sep 6 01:22:00.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.000000 audit: BPF prog-id=79 op=LOAD Sep 6 01:22:00.001000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.001000 audit[2364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2245 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:00.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962316363303934316137666335643865666337396131323737633732 Sep 6 01:22:00.001000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.001000 audit[2364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2245 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:00.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962316363303934316137666335643865666337396131323737633732 Sep 6 01:22:00.001000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.001000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.001000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.001000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.001000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.001000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.001000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.001000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.001000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.001000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.001000 audit: BPF prog-id=80 op=LOAD Sep 6 01:22:00.001000 audit[2364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2245 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:00.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962316363303934316137666335643865666337396131323737633732 Sep 6 01:22:00.001000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.001000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.001000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.001000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.001000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.001000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.001000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.001000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.001000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.001000 audit: BPF prog-id=81 op=LOAD Sep 6 01:22:00.001000 audit[2364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2245 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:00.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962316363303934316137666335643865666337396131323737633732 Sep 6 01:22:00.001000 audit: BPF prog-id=81 op=UNLOAD Sep 6 01:22:00.001000 audit: BPF prog-id=80 op=UNLOAD Sep 6 01:22:00.001000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.001000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.001000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.001000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.001000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.001000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.001000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.001000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.001000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.001000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:00.001000 audit: BPF prog-id=82 op=LOAD Sep 6 01:22:00.001000 audit[2364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2245 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:00.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962316363303934316137666335643865666337396131323737633732 Sep 6 01:22:00.067379 env[1474]: time="2025-09-06T01:22:00.067328079Z" level=info msg="StartContainer for \"d4e2810f8247a067d70b5c6fbd4fce8517cdba14ada470b0daf8124aa77b53e7\" returns successfully" Sep 6 01:22:00.070973 env[1474]: time="2025-09-06T01:22:00.070932291Z" level=info msg="StartContainer for \"9b1cc0941a7fc5d8efc79a1277c72179066d64fb6d42308ad561965b3531cf97\" returns successfully" Sep 6 01:22:00.400935 systemd[1]: run-containerd-runc-k8s.io-703aa22c8eddf0af3add99459ede23c316aa0598c199bb8f5b6742e8e477bc84-runc.PvEG1n.mount: Deactivated successfully. Sep 6 01:22:01.193012 kubelet[2156]: I0906 01:22:01.192595 2156 kubelet_node_status.go:72] "Attempting to register node" node="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:02.243178 kernel: kauditd_printk_skb: 559 callbacks suppressed Sep 6 01:22:02.243366 kernel: audit: type=1400 audit(1757121722.214:574): avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522499 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:02.214000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522499 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:02.214000 audit[2330]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4008d51110 a2=fc6 a3=0 items=0 ppid=2195 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 key=(null) Sep 6 01:22:02.303341 kernel: audit: type=1300 audit(1757121722.214:574): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4008d51110 a2=fc6 a3=0 items=0 ppid=2195 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 key=(null) Sep 6 01:22:02.214000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3236002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:22:02.332644 kernel: audit: type=1327 audit(1757121722.214:574): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3236002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:22:02.332776 kernel: audit: type=1400 audit(1757121722.214:575): avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:02.214000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:02.214000 audit[2330]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40071a8540 a2=fc6 a3=0 items=0 ppid=2195 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 key=(null) Sep 6 01:22:02.382786 kernel: audit: type=1300 audit(1757121722.214:575): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40071a8540 a2=fc6 a3=0 items=0 ppid=2195 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 key=(null) Sep 6 01:22:02.214000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3236002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:22:02.407404 kernel: audit: type=1327 audit(1757121722.214:575): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3236002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:22:02.214000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=522495 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:02.434445 kernel: audit: type=1400 audit(1757121722.214:576): avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=522495 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:02.434554 kernel: audit: type=1300 audit(1757121722.214:576): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4008d51230 a2=fc6 a3=0 items=0 ppid=2195 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 key=(null) Sep 6 01:22:02.214000 audit[2330]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4008d51230 a2=fc6 a3=0 items=0 ppid=2195 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 key=(null) Sep 6 01:22:02.214000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3236002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:22:02.487539 kernel: audit: type=1327 audit(1757121722.214:576): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3236002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:22:02.487650 kernel: audit: type=1400 audit(1757121722.226:577): avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=522501 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:02.226000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=522501 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:02.226000 audit[2330]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4c a1=4003914c60 a2=fc6 a3=0 items=0 ppid=2195 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 key=(null) Sep 6 01:22:02.226000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3236002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:22:02.227000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:02.227000 audit[2330]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4006ff7740 a2=fc6 a3=0 items=0 ppid=2195 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 key=(null) Sep 6 01:22:02.227000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3236002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:22:02.227000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522499 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:02.227000 audit[2330]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4003915890 a2=fc6 a3=0 items=0 ppid=2195 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 key=(null) Sep 6 01:22:02.227000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3236002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:22:02.552048 kubelet[2156]: E0906 01:22:02.551984 2156 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.8-n-b5f8f4c6c5\" not found" node="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:02.606409 kubelet[2156]: I0906 01:22:02.606365 2156 kubelet_node_status.go:75] "Successfully registered node" node="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:02.622000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522499 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:02.622000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40002d7920 a2=fc6 a3=0 items=0 ppid=2245 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 key=(null) Sep 6 01:22:02.622000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:22:02.622000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:02.622000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40003de440 a2=fc6 a3=0 items=0 ppid=2245 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 key=(null) Sep 6 01:22:02.622000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:22:02.851284 kubelet[2156]: I0906 01:22:02.851247 2156 apiserver.go:52] "Watching apiserver" Sep 6 01:22:02.872065 kubelet[2156]: I0906 01:22:02.872029 2156 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Sep 6 01:22:03.232817 kubelet[2156]: E0906 01:22:03.232707 2156 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510.3.8-n-b5f8f4c6c5\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:04.765580 kubelet[2156]: W0906 01:22:04.765543 2156 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Sep 6 01:22:04.916259 systemd[1]: Reloading. Sep 6 01:22:05.020720 /usr/lib/systemd/system-generators/torcx-generator[2443]: time="2025-09-06T01:22:05Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 6 01:22:05.020754 /usr/lib/systemd/system-generators/torcx-generator[2443]: time="2025-09-06T01:22:05Z" level=info msg="torcx already run" Sep 6 01:22:05.088000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:05.088000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000abdd80 a2=fc6 a3=0 items=0 ppid=2245 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 key=(null) Sep 6 01:22:05.088000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:22:05.088000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:05.088000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000abddc0 a2=fc6 a3=0 items=0 ppid=2245 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 key=(null) Sep 6 01:22:05.088000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:22:05.088000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:05.088000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000abde00 a2=fc6 a3=0 items=0 ppid=2245 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 key=(null) Sep 6 01:22:05.088000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:22:05.088000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:05.088000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000abde40 a2=fc6 a3=0 items=0 ppid=2245 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 key=(null) Sep 6 01:22:05.088000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:22:05.135148 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 6 01:22:05.135324 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 6 01:22:05.152847 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 6 01:22:05.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.240000 audit: BPF prog-id=83 op=LOAD Sep 6 01:22:05.240000 audit: BPF prog-id=44 op=UNLOAD Sep 6 01:22:05.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.240000 audit: BPF prog-id=84 op=LOAD Sep 6 01:22:05.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.241000 audit: BPF prog-id=85 op=LOAD Sep 6 01:22:05.241000 audit: BPF prog-id=45 op=UNLOAD Sep 6 01:22:05.241000 audit: BPF prog-id=46 op=UNLOAD Sep 6 01:22:05.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.243000 audit: BPF prog-id=86 op=LOAD Sep 6 01:22:05.243000 audit: BPF prog-id=47 op=UNLOAD Sep 6 01:22:05.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.244000 audit: BPF prog-id=87 op=LOAD Sep 6 01:22:05.244000 audit: BPF prog-id=63 op=UNLOAD Sep 6 01:22:05.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.245000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.245000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.245000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.245000 audit: BPF prog-id=88 op=LOAD Sep 6 01:22:05.245000 audit: BPF prog-id=79 op=UNLOAD Sep 6 01:22:05.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.248000 audit: BPF prog-id=89 op=LOAD Sep 6 01:22:05.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.248000 audit: BPF prog-id=90 op=LOAD Sep 6 01:22:05.248000 audit: BPF prog-id=48 op=UNLOAD Sep 6 01:22:05.248000 audit: BPF prog-id=49 op=UNLOAD Sep 6 01:22:05.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.249000 audit: BPF prog-id=91 op=LOAD Sep 6 01:22:05.249000 audit: BPF prog-id=71 op=UNLOAD Sep 6 01:22:05.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.249000 audit: BPF prog-id=92 op=LOAD Sep 6 01:22:05.249000 audit: BPF prog-id=75 op=UNLOAD Sep 6 01:22:05.250000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.250000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.250000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.250000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.250000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.250000 audit: BPF prog-id=93 op=LOAD Sep 6 01:22:05.250000 audit: BPF prog-id=50 op=UNLOAD Sep 6 01:22:05.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.251000 audit: BPF prog-id=94 op=LOAD Sep 6 01:22:05.251000 audit: BPF prog-id=67 op=UNLOAD Sep 6 01:22:05.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.252000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.252000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.252000 audit: BPF prog-id=95 op=LOAD Sep 6 01:22:05.252000 audit: BPF prog-id=59 op=UNLOAD Sep 6 01:22:05.252000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.252000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.252000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.252000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.253000 audit: BPF prog-id=96 op=LOAD Sep 6 01:22:05.253000 audit: BPF prog-id=51 op=UNLOAD Sep 6 01:22:05.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit: BPF prog-id=97 op=LOAD Sep 6 01:22:05.260000 audit: BPF prog-id=52 op=UNLOAD Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit: BPF prog-id=98 op=LOAD Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit: BPF prog-id=99 op=LOAD Sep 6 01:22:05.260000 audit: BPF prog-id=53 op=UNLOAD Sep 6 01:22:05.260000 audit: BPF prog-id=54 op=UNLOAD Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.262000 audit: BPF prog-id=100 op=LOAD Sep 6 01:22:05.262000 audit: BPF prog-id=55 op=UNLOAD Sep 6 01:22:05.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.262000 audit: BPF prog-id=101 op=LOAD Sep 6 01:22:05.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.262000 audit: BPF prog-id=102 op=LOAD Sep 6 01:22:05.262000 audit: BPF prog-id=56 op=UNLOAD Sep 6 01:22:05.262000 audit: BPF prog-id=57 op=UNLOAD Sep 6 01:22:05.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.263000 audit: BPF prog-id=103 op=LOAD Sep 6 01:22:05.263000 audit: BPF prog-id=58 op=UNLOAD Sep 6 01:22:05.287629 systemd[1]: Stopping kubelet.service... Sep 6 01:22:05.314528 systemd[1]: kubelet.service: Deactivated successfully. Sep 6 01:22:05.314873 systemd[1]: Stopped kubelet.service. Sep 6 01:22:05.313000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:05.315163 systemd[1]: kubelet.service: Consumed 1.236s CPU time. Sep 6 01:22:05.317740 systemd[1]: Starting kubelet.service... Sep 6 01:22:05.414241 systemd[1]: Started kubelet.service. Sep 6 01:22:05.413000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:05.468540 kubelet[2507]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 6 01:22:05.468540 kubelet[2507]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Sep 6 01:22:05.468540 kubelet[2507]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 6 01:22:05.468901 kubelet[2507]: I0906 01:22:05.468649 2507 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 6 01:22:05.475553 kubelet[2507]: I0906 01:22:05.475511 2507 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Sep 6 01:22:05.475718 kubelet[2507]: I0906 01:22:05.475707 2507 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 6 01:22:05.476018 kubelet[2507]: I0906 01:22:05.476003 2507 server.go:934] "Client rotation is on, will bootstrap in background" Sep 6 01:22:05.477599 kubelet[2507]: I0906 01:22:05.477577 2507 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Sep 6 01:22:05.481938 kubelet[2507]: I0906 01:22:05.481897 2507 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 6 01:22:05.485223 kubelet[2507]: E0906 01:22:05.485173 2507 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 6 01:22:05.485426 kubelet[2507]: I0906 01:22:05.485412 2507 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 6 01:22:05.491403 kubelet[2507]: I0906 01:22:05.491355 2507 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 6 01:22:05.491539 kubelet[2507]: I0906 01:22:05.491480 2507 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Sep 6 01:22:05.491603 kubelet[2507]: I0906 01:22:05.491570 2507 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 6 01:22:05.491856 kubelet[2507]: I0906 01:22:05.491599 2507 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-3510.3.8-n-b5f8f4c6c5","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 6 01:22:05.491856 kubelet[2507]: I0906 01:22:05.491853 2507 topology_manager.go:138] "Creating topology manager with none policy" Sep 6 01:22:05.491978 kubelet[2507]: I0906 01:22:05.491863 2507 container_manager_linux.go:300] "Creating device plugin manager" Sep 6 01:22:05.491978 kubelet[2507]: I0906 01:22:05.491902 2507 state_mem.go:36] "Initialized new in-memory state store" Sep 6 01:22:05.492024 kubelet[2507]: I0906 01:22:05.491999 2507 kubelet.go:408] "Attempting to sync node with API server" Sep 6 01:22:05.492024 kubelet[2507]: I0906 01:22:05.492009 2507 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 6 01:22:05.492065 kubelet[2507]: I0906 01:22:05.492035 2507 kubelet.go:314] "Adding apiserver pod source" Sep 6 01:22:05.492065 kubelet[2507]: I0906 01:22:05.492049 2507 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 6 01:22:05.497411 kubelet[2507]: I0906 01:22:05.497385 2507 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 6 01:22:05.498715 kubelet[2507]: I0906 01:22:05.498695 2507 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Sep 6 01:22:05.499462 kubelet[2507]: I0906 01:22:05.499448 2507 server.go:1274] "Started kubelet" Sep 6 01:22:05.500000 audit[2507]: AVC avc: denied { mac_admin } for pid=2507 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.500000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 01:22:05.500000 audit[2507]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b23860 a1=400088de48 a2=4000b23830 a3=25 items=0 ppid=1 pid=2507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:05.500000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 01:22:05.502191 kubelet[2507]: I0906 01:22:05.501874 2507 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Sep 6 01:22:05.501000 audit[2507]: AVC avc: denied { mac_admin } for pid=2507 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.501000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 01:22:05.501000 audit[2507]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400037c020 a1=400088de60 a2=4000b238f0 a3=25 items=0 ppid=1 pid=2507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:05.501000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 01:22:05.502504 kubelet[2507]: I0906 01:22:05.502487 2507 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Sep 6 01:22:05.502580 kubelet[2507]: I0906 01:22:05.502570 2507 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 6 01:22:05.507098 kubelet[2507]: I0906 01:22:05.507057 2507 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Sep 6 01:22:05.508960 kubelet[2507]: I0906 01:22:05.508940 2507 server.go:449] "Adding debug handlers to kubelet server" Sep 6 01:22:05.510053 kubelet[2507]: I0906 01:22:05.510006 2507 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 6 01:22:05.510400 kubelet[2507]: I0906 01:22:05.510385 2507 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 6 01:22:05.510736 kubelet[2507]: I0906 01:22:05.510720 2507 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 6 01:22:05.512801 kubelet[2507]: I0906 01:22:05.512782 2507 volume_manager.go:289] "Starting Kubelet Volume Manager" Sep 6 01:22:05.513239 kubelet[2507]: E0906 01:22:05.513220 2507 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-b5f8f4c6c5\" not found" Sep 6 01:22:05.515824 kubelet[2507]: I0906 01:22:05.515803 2507 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Sep 6 01:22:05.516580 kubelet[2507]: I0906 01:22:05.516568 2507 reconciler.go:26] "Reconciler: start to sync state" Sep 6 01:22:05.518490 kubelet[2507]: I0906 01:22:05.518458 2507 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Sep 6 01:22:05.534029 kubelet[2507]: I0906 01:22:05.533985 2507 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Sep 6 01:22:05.534029 kubelet[2507]: I0906 01:22:05.534019 2507 status_manager.go:217] "Starting to sync pod status with apiserver" Sep 6 01:22:05.534029 kubelet[2507]: I0906 01:22:05.534037 2507 kubelet.go:2321] "Starting kubelet main sync loop" Sep 6 01:22:05.534264 kubelet[2507]: E0906 01:22:05.534087 2507 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Sep 6 01:22:05.538145 kubelet[2507]: I0906 01:22:05.536657 2507 factory.go:221] Registration of the systemd container factory successfully Sep 6 01:22:05.538145 kubelet[2507]: I0906 01:22:05.536788 2507 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 6 01:22:05.554308 kubelet[2507]: I0906 01:22:05.554281 2507 factory.go:221] Registration of the containerd container factory successfully Sep 6 01:22:05.615771 kubelet[2507]: I0906 01:22:05.615733 2507 cpu_manager.go:214] "Starting CPU manager" policy="none" Sep 6 01:22:05.615925 kubelet[2507]: I0906 01:22:05.615912 2507 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Sep 6 01:22:05.615986 kubelet[2507]: I0906 01:22:05.615978 2507 state_mem.go:36] "Initialized new in-memory state store" Sep 6 01:22:05.616227 kubelet[2507]: I0906 01:22:05.616213 2507 state_mem.go:88] "Updated default CPUSet" cpuSet="" Sep 6 01:22:05.616321 kubelet[2507]: I0906 01:22:05.616296 2507 state_mem.go:96] "Updated CPUSet assignments" assignments={} Sep 6 01:22:05.616385 kubelet[2507]: I0906 01:22:05.616376 2507 policy_none.go:49] "None policy: Start" Sep 6 01:22:05.617221 kubelet[2507]: I0906 01:22:05.617206 2507 memory_manager.go:170] "Starting memorymanager" policy="None" Sep 6 01:22:05.617347 kubelet[2507]: I0906 01:22:05.617336 2507 state_mem.go:35] "Initializing new in-memory state store" Sep 6 01:22:05.617554 kubelet[2507]: I0906 01:22:05.617543 2507 state_mem.go:75] "Updated machine memory state" Sep 6 01:22:05.621831 kubelet[2507]: I0906 01:22:05.621810 2507 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Sep 6 01:22:05.620000 audit[2507]: AVC avc: denied { mac_admin } for pid=2507 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:05.620000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 01:22:05.620000 audit[2507]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b23a10 a1=4000635488 a2=4000b239e0 a3=25 items=0 ppid=1 pid=2507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:05.620000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 01:22:05.623771 kubelet[2507]: I0906 01:22:05.623748 2507 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Sep 6 01:22:05.624033 kubelet[2507]: I0906 01:22:05.624020 2507 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 6 01:22:05.624169 kubelet[2507]: I0906 01:22:05.624133 2507 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 6 01:22:05.624602 kubelet[2507]: I0906 01:22:05.624589 2507 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 6 01:22:05.646355 kubelet[2507]: W0906 01:22:05.646197 2507 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Sep 6 01:22:05.656155 kubelet[2507]: W0906 01:22:05.656105 2507 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Sep 6 01:22:05.656402 kubelet[2507]: E0906 01:22:05.656361 2507 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ci-3510.3.8-n-b5f8f4c6c5\" already exists" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:05.656564 kubelet[2507]: W0906 01:22:05.656475 2507 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Sep 6 01:22:05.732560 kubelet[2507]: I0906 01:22:05.732528 2507 kubelet_node_status.go:72] "Attempting to register node" node="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:05.744945 kubelet[2507]: I0906 01:22:05.744908 2507 kubelet_node_status.go:111] "Node was previously registered" node="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:05.745102 kubelet[2507]: I0906 01:22:05.744994 2507 kubelet_node_status.go:75] "Successfully registered node" node="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:05.817057 kubelet[2507]: I0906 01:22:05.816948 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/04fb5141b2feab7ebbd39118ede665b3-ca-certs\") pod \"kube-apiserver-ci-3510.3.8-n-b5f8f4c6c5\" (UID: \"04fb5141b2feab7ebbd39118ede665b3\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:05.817289 kubelet[2507]: I0906 01:22:05.817272 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/04fb5141b2feab7ebbd39118ede665b3-k8s-certs\") pod \"kube-apiserver-ci-3510.3.8-n-b5f8f4c6c5\" (UID: \"04fb5141b2feab7ebbd39118ede665b3\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:05.817414 kubelet[2507]: I0906 01:22:05.817396 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/04fb5141b2feab7ebbd39118ede665b3-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.8-n-b5f8f4c6c5\" (UID: \"04fb5141b2feab7ebbd39118ede665b3\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:05.817511 kubelet[2507]: I0906 01:22:05.817498 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d4de1728cbdd0271643052936ef9db65-ca-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-b5f8f4c6c5\" (UID: \"d4de1728cbdd0271643052936ef9db65\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:05.817621 kubelet[2507]: I0906 01:22:05.817609 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d4de1728cbdd0271643052936ef9db65-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.8-n-b5f8f4c6c5\" (UID: \"d4de1728cbdd0271643052936ef9db65\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:05.817735 kubelet[2507]: I0906 01:22:05.817722 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d4de1728cbdd0271643052936ef9db65-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.8-n-b5f8f4c6c5\" (UID: \"d4de1728cbdd0271643052936ef9db65\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:05.817841 kubelet[2507]: I0906 01:22:05.817826 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d4de1728cbdd0271643052936ef9db65-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.8-n-b5f8f4c6c5\" (UID: \"d4de1728cbdd0271643052936ef9db65\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:05.817944 kubelet[2507]: I0906 01:22:05.817930 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d4de1728cbdd0271643052936ef9db65-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-b5f8f4c6c5\" (UID: \"d4de1728cbdd0271643052936ef9db65\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:05.818050 kubelet[2507]: I0906 01:22:05.818036 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/7d6e5771c07fa8cce8bdd6524652f8fe-kubeconfig\") pod \"kube-scheduler-ci-3510.3.8-n-b5f8f4c6c5\" (UID: \"7d6e5771c07fa8cce8bdd6524652f8fe\") " pod="kube-system/kube-scheduler-ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:06.495655 kubelet[2507]: I0906 01:22:06.495622 2507 apiserver.go:52] "Watching apiserver" Sep 6 01:22:06.517004 kubelet[2507]: I0906 01:22:06.516969 2507 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Sep 6 01:22:06.616709 kubelet[2507]: W0906 01:22:06.616673 2507 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Sep 6 01:22:06.616941 kubelet[2507]: E0906 01:22:06.616922 2507 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510.3.8-n-b5f8f4c6c5\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:06.629371 kubelet[2507]: I0906 01:22:06.628445 2507 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.8-n-b5f8f4c6c5" podStartSLOduration=1.6284293939999999 podStartE2EDuration="1.628429394s" podCreationTimestamp="2025-09-06 01:22:05 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 01:22:06.628346714 +0000 UTC m=+1.207870916" watchObservedRunningTime="2025-09-06 01:22:06.628429394 +0000 UTC m=+1.207953596" Sep 6 01:22:06.654935 kubelet[2507]: I0906 01:22:06.654853 2507 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-b5f8f4c6c5" podStartSLOduration=2.654837389 podStartE2EDuration="2.654837389s" podCreationTimestamp="2025-09-06 01:22:04 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 01:22:06.654537548 +0000 UTC m=+1.234061750" watchObservedRunningTime="2025-09-06 01:22:06.654837389 +0000 UTC m=+1.234361591" Sep 6 01:22:06.655153 kubelet[2507]: I0906 01:22:06.654998 2507 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.8-n-b5f8f4c6c5" podStartSLOduration=1.6549939089999999 podStartE2EDuration="1.654993909s" podCreationTimestamp="2025-09-06 01:22:05 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 01:22:06.640896349 +0000 UTC m=+1.220420551" watchObservedRunningTime="2025-09-06 01:22:06.654993909 +0000 UTC m=+1.234518111" Sep 6 01:22:08.801000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=522526 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Sep 6 01:22:08.807579 kernel: kauditd_printk_skb: 284 callbacks suppressed Sep 6 01:22:08.807712 kernel: audit: type=1400 audit(1757121728.801:835): avc: denied { watch } for pid=2388 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=522526 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Sep 6 01:22:08.801000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400072c980 a2=fc6 a3=0 items=0 ppid=2245 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 key=(null) Sep 6 01:22:08.862419 kernel: audit: type=1300 audit(1757121728.801:835): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400072c980 a2=fc6 a3=0 items=0 ppid=2245 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 key=(null) Sep 6 01:22:08.801000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:22:08.886981 kernel: audit: type=1327 audit(1757121728.801:835): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:22:09.656820 kubelet[2507]: I0906 01:22:09.656784 2507 kuberuntime_manager.go:1635] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Sep 6 01:22:09.657249 env[1474]: time="2025-09-06T01:22:09.657150335Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Sep 6 01:22:09.657647 kubelet[2507]: I0906 01:22:09.657628 2507 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Sep 6 01:22:10.184327 kubelet[2507]: W0906 01:22:10.183946 2507 reflector.go:561] object-"kube-system"/"kube-proxy": failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:ci-3510.3.8-n-b5f8f4c6c5" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.8-n-b5f8f4c6c5' and this object Sep 6 01:22:10.184327 kubelet[2507]: E0906 01:22:10.183989 2507 reflector.go:158] "Unhandled Error" err="object-\"kube-system\"/\"kube-proxy\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"kube-proxy\" is forbidden: User \"system:node:ci-3510.3.8-n-b5f8f4c6c5\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"kube-system\": no relationship found between node 'ci-3510.3.8-n-b5f8f4c6c5' and this object" logger="UnhandledError" Sep 6 01:22:10.184327 kubelet[2507]: W0906 01:22:10.184157 2507 reflector.go:561] object-"kube-system"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ci-3510.3.8-n-b5f8f4c6c5" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.8-n-b5f8f4c6c5' and this object Sep 6 01:22:10.184327 kubelet[2507]: E0906 01:22:10.184173 2507 reflector.go:158] "Unhandled Error" err="object-\"kube-system\"/\"kube-root-ca.crt\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"kube-root-ca.crt\" is forbidden: User \"system:node:ci-3510.3.8-n-b5f8f4c6c5\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"kube-system\": no relationship found between node 'ci-3510.3.8-n-b5f8f4c6c5' and this object" logger="UnhandledError" Sep 6 01:22:10.186941 systemd[1]: Created slice kubepods-besteffort-pod6f848492_c5a3_4cf5_bf7d_9ec30fe5659d.slice. Sep 6 01:22:10.243719 kubelet[2507]: I0906 01:22:10.243670 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/6f848492-c5a3-4cf5-bf7d-9ec30fe5659d-kube-proxy\") pod \"kube-proxy-2ljgk\" (UID: \"6f848492-c5a3-4cf5-bf7d-9ec30fe5659d\") " pod="kube-system/kube-proxy-2ljgk" Sep 6 01:22:10.243719 kubelet[2507]: I0906 01:22:10.243720 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/6f848492-c5a3-4cf5-bf7d-9ec30fe5659d-xtables-lock\") pod \"kube-proxy-2ljgk\" (UID: \"6f848492-c5a3-4cf5-bf7d-9ec30fe5659d\") " pod="kube-system/kube-proxy-2ljgk" Sep 6 01:22:10.243909 kubelet[2507]: I0906 01:22:10.243740 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jwvtj\" (UniqueName: \"kubernetes.io/projected/6f848492-c5a3-4cf5-bf7d-9ec30fe5659d-kube-api-access-jwvtj\") pod \"kube-proxy-2ljgk\" (UID: \"6f848492-c5a3-4cf5-bf7d-9ec30fe5659d\") " pod="kube-system/kube-proxy-2ljgk" Sep 6 01:22:10.243909 kubelet[2507]: I0906 01:22:10.243764 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/6f848492-c5a3-4cf5-bf7d-9ec30fe5659d-lib-modules\") pod \"kube-proxy-2ljgk\" (UID: \"6f848492-c5a3-4cf5-bf7d-9ec30fe5659d\") " pod="kube-system/kube-proxy-2ljgk" Sep 6 01:22:10.721356 systemd[1]: Created slice kubepods-besteffort-podfe1b7acd_5978_4f88_b8b8_0cd3e4bba77d.slice. Sep 6 01:22:10.746964 kubelet[2507]: I0906 01:22:10.746923 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-cvbw6\" (UniqueName: \"kubernetes.io/projected/fe1b7acd-5978-4f88-b8b8-0cd3e4bba77d-kube-api-access-cvbw6\") pod \"tigera-operator-58fc44c59b-sg2xk\" (UID: \"fe1b7acd-5978-4f88-b8b8-0cd3e4bba77d\") " pod="tigera-operator/tigera-operator-58fc44c59b-sg2xk" Sep 6 01:22:10.747385 kubelet[2507]: I0906 01:22:10.747368 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/fe1b7acd-5978-4f88-b8b8-0cd3e4bba77d-var-lib-calico\") pod \"tigera-operator-58fc44c59b-sg2xk\" (UID: \"fe1b7acd-5978-4f88-b8b8-0cd3e4bba77d\") " pod="tigera-operator/tigera-operator-58fc44c59b-sg2xk" Sep 6 01:22:10.855336 kubelet[2507]: I0906 01:22:10.855295 2507 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Sep 6 01:22:11.027998 env[1474]: time="2025-09-06T01:22:11.027877287Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-58fc44c59b-sg2xk,Uid:fe1b7acd-5978-4f88-b8b8-0cd3e4bba77d,Namespace:tigera-operator,Attempt:0,}" Sep 6 01:22:11.082610 env[1474]: time="2025-09-06T01:22:11.082534025Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:22:11.082813 env[1474]: time="2025-09-06T01:22:11.082789986Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:22:11.082912 env[1474]: time="2025-09-06T01:22:11.082891066Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:22:11.083201 env[1474]: time="2025-09-06T01:22:11.083159267Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6e5e25d83607f4621b44e0c632c1bd5621c81d14712bab583701f50be2ae9724 pid=2555 runtime=io.containerd.runc.v2 Sep 6 01:22:11.109722 systemd[1]: Started cri-containerd-6e5e25d83607f4621b44e0c632c1bd5621c81d14712bab583701f50be2ae9724.scope. Sep 6 01:22:11.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.156150 kernel: audit: type=1400 audit(1757121731.119:836): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.156295 kernel: audit: type=1400 audit(1757121731.119:837): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.176542 kernel: audit: type=1400 audit(1757121731.119:838): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.196996 kernel: audit: type=1400 audit(1757121731.119:839): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.216601 kernel: audit: type=1400 audit(1757121731.119:840): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.236471 kernel: audit: type=1400 audit(1757121731.119:841): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.254510 kernel: audit: type=1400 audit(1757121731.119:842): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.137000 audit: BPF prog-id=104 op=LOAD Sep 6 01:22:11.155000 audit[2564]: AVC avc: denied { bpf } for pid=2564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.155000 audit[2564]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2555 pid=2564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:11.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665356532356438333630376634363231623434653063363332633162 Sep 6 01:22:11.155000 audit[2564]: AVC avc: denied { perfmon } for pid=2564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.155000 audit[2564]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2555 pid=2564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:11.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665356532356438333630376634363231623434653063363332633162 Sep 6 01:22:11.155000 audit[2564]: AVC avc: denied { bpf } for pid=2564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.155000 audit[2564]: AVC avc: denied { bpf } for pid=2564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.155000 audit[2564]: AVC avc: denied { bpf } for pid=2564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.155000 audit[2564]: AVC avc: denied { perfmon } for pid=2564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.155000 audit[2564]: AVC avc: denied { perfmon } for pid=2564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.155000 audit[2564]: AVC avc: denied { perfmon } for pid=2564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.155000 audit[2564]: AVC avc: denied { perfmon } for pid=2564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.155000 audit[2564]: AVC avc: denied { perfmon } for pid=2564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.155000 audit[2564]: AVC avc: denied { bpf } for pid=2564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.155000 audit[2564]: AVC avc: denied { bpf } for pid=2564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.155000 audit: BPF prog-id=105 op=LOAD Sep 6 01:22:11.155000 audit[2564]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2555 pid=2564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:11.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665356532356438333630376634363231623434653063363332633162 Sep 6 01:22:11.155000 audit[2564]: AVC avc: denied { bpf } for pid=2564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.155000 audit[2564]: AVC avc: denied { bpf } for pid=2564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.155000 audit[2564]: AVC avc: denied { perfmon } for pid=2564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.155000 audit[2564]: AVC avc: denied { perfmon } for pid=2564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.155000 audit[2564]: AVC avc: denied { perfmon } for pid=2564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.155000 audit[2564]: AVC avc: denied { perfmon } for pid=2564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.155000 audit[2564]: AVC avc: denied { perfmon } for pid=2564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.155000 audit[2564]: AVC avc: denied { bpf } for pid=2564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.155000 audit[2564]: AVC avc: denied { bpf } for pid=2564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.155000 audit: BPF prog-id=106 op=LOAD Sep 6 01:22:11.155000 audit[2564]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2555 pid=2564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:11.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665356532356438333630376634363231623434653063363332633162 Sep 6 01:22:11.155000 audit: BPF prog-id=106 op=UNLOAD Sep 6 01:22:11.155000 audit: BPF prog-id=105 op=UNLOAD Sep 6 01:22:11.155000 audit[2564]: AVC avc: denied { bpf } for pid=2564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.155000 audit[2564]: AVC avc: denied { bpf } for pid=2564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.155000 audit[2564]: AVC avc: denied { bpf } for pid=2564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.155000 audit[2564]: AVC avc: denied { perfmon } for pid=2564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.155000 audit[2564]: AVC avc: denied { perfmon } for pid=2564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.155000 audit[2564]: AVC avc: denied { perfmon } for pid=2564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.155000 audit[2564]: AVC avc: denied { perfmon } for pid=2564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.155000 audit[2564]: AVC avc: denied { perfmon } for pid=2564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.155000 audit[2564]: AVC avc: denied { bpf } for pid=2564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.155000 audit[2564]: AVC avc: denied { bpf } for pid=2564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:11.155000 audit: BPF prog-id=107 op=LOAD Sep 6 01:22:11.155000 audit[2564]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2555 pid=2564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:11.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665356532356438333630376634363231623434653063363332633162 Sep 6 01:22:11.265643 env[1474]: time="2025-09-06T01:22:11.265603047Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-58fc44c59b-sg2xk,Uid:fe1b7acd-5978-4f88-b8b8-0cd3e4bba77d,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"6e5e25d83607f4621b44e0c632c1bd5621c81d14712bab583701f50be2ae9724\"" Sep 6 01:22:11.268615 env[1474]: time="2025-09-06T01:22:11.268571255Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\"" Sep 6 01:22:11.353829 kubelet[2507]: E0906 01:22:11.353790 2507 projected.go:288] Couldn't get configMap kube-system/kube-root-ca.crt: failed to sync configmap cache: timed out waiting for the condition Sep 6 01:22:11.353829 kubelet[2507]: E0906 01:22:11.353833 2507 projected.go:194] Error preparing data for projected volume kube-api-access-jwvtj for pod kube-system/kube-proxy-2ljgk: failed to sync configmap cache: timed out waiting for the condition Sep 6 01:22:11.354009 kubelet[2507]: E0906 01:22:11.353906 2507 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/6f848492-c5a3-4cf5-bf7d-9ec30fe5659d-kube-api-access-jwvtj podName:6f848492-c5a3-4cf5-bf7d-9ec30fe5659d nodeName:}" failed. No retries permitted until 2025-09-06 01:22:11.85388427 +0000 UTC m=+6.433408472 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-jwvtj" (UniqueName: "kubernetes.io/projected/6f848492-c5a3-4cf5-bf7d-9ec30fe5659d-kube-api-access-jwvtj") pod "kube-proxy-2ljgk" (UID: "6f848492-c5a3-4cf5-bf7d-9ec30fe5659d") : failed to sync configmap cache: timed out waiting for the condition Sep 6 01:22:11.858925 systemd[1]: run-containerd-runc-k8s.io-6e5e25d83607f4621b44e0c632c1bd5621c81d14712bab583701f50be2ae9724-runc.6YMZnv.mount: Deactivated successfully. Sep 6 01:22:11.993080 env[1474]: time="2025-09-06T01:22:11.993037564Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-2ljgk,Uid:6f848492-c5a3-4cf5-bf7d-9ec30fe5659d,Namespace:kube-system,Attempt:0,}" Sep 6 01:22:12.124356 env[1474]: time="2025-09-06T01:22:12.124219049Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:22:12.124356 env[1474]: time="2025-09-06T01:22:12.124307249Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:22:12.124800 env[1474]: time="2025-09-06T01:22:12.124489689Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:22:12.124932 env[1474]: time="2025-09-06T01:22:12.124897250Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1cb64c98b5daaa4a9fe7864a73b41607b0ba4578109643f1d986b1d658c829ed pid=2597 runtime=io.containerd.runc.v2 Sep 6 01:22:12.139551 systemd[1]: Started cri-containerd-1cb64c98b5daaa4a9fe7864a73b41607b0ba4578109643f1d986b1d658c829ed.scope. Sep 6 01:22:12.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.157000 audit: BPF prog-id=108 op=LOAD Sep 6 01:22:12.158000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.158000 audit[2606]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=2597 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163623634633938623564616161346139666537383634613733623431 Sep 6 01:22:12.158000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.158000 audit[2606]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2597 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163623634633938623564616161346139666537383634613733623431 Sep 6 01:22:12.158000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.158000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.158000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.158000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.158000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.158000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.158000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.158000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.158000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.158000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.158000 audit: BPF prog-id=109 op=LOAD Sep 6 01:22:12.158000 audit[2606]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2597 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163623634633938623564616161346139666537383634613733623431 Sep 6 01:22:12.158000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.158000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.158000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.158000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.158000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.158000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.158000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.158000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.158000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.158000 audit: BPF prog-id=110 op=LOAD Sep 6 01:22:12.158000 audit[2606]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2597 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163623634633938623564616161346139666537383634613733623431 Sep 6 01:22:12.158000 audit: BPF prog-id=110 op=UNLOAD Sep 6 01:22:12.158000 audit: BPF prog-id=109 op=UNLOAD Sep 6 01:22:12.158000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.158000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.158000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.158000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.158000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.158000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.158000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.158000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.158000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.158000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.158000 audit: BPF prog-id=111 op=LOAD Sep 6 01:22:12.158000 audit[2606]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2597 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163623634633938623564616161346139666537383634613733623431 Sep 6 01:22:12.174604 env[1474]: time="2025-09-06T01:22:12.174560373Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-2ljgk,Uid:6f848492-c5a3-4cf5-bf7d-9ec30fe5659d,Namespace:kube-system,Attempt:0,} returns sandbox id \"1cb64c98b5daaa4a9fe7864a73b41607b0ba4578109643f1d986b1d658c829ed\"" Sep 6 01:22:12.180841 env[1474]: time="2025-09-06T01:22:12.180802308Z" level=info msg="CreateContainer within sandbox \"1cb64c98b5daaa4a9fe7864a73b41607b0ba4578109643f1d986b1d658c829ed\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Sep 6 01:22:12.263852 env[1474]: time="2025-09-06T01:22:12.263800594Z" level=info msg="CreateContainer within sandbox \"1cb64c98b5daaa4a9fe7864a73b41607b0ba4578109643f1d986b1d658c829ed\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"0114cb206512d90662e4e6d89365e1941d052957a658f6d382365c32a908f254\"" Sep 6 01:22:12.266278 env[1474]: time="2025-09-06T01:22:12.266202040Z" level=info msg="StartContainer for \"0114cb206512d90662e4e6d89365e1941d052957a658f6d382365c32a908f254\"" Sep 6 01:22:12.281354 systemd[1]: Started cri-containerd-0114cb206512d90662e4e6d89365e1941d052957a658f6d382365c32a908f254.scope. Sep 6 01:22:12.297000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.297000 audit[2638]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2597 pid=2638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.297000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031313463623230363531326439303636326534653664383933363565 Sep 6 01:22:12.297000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.297000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.297000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.297000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.297000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.297000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.297000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.297000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.297000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.297000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.297000 audit: BPF prog-id=112 op=LOAD Sep 6 01:22:12.297000 audit[2638]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2597 pid=2638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.297000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031313463623230363531326439303636326534653664383933363565 Sep 6 01:22:12.297000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.297000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.297000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.297000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.297000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.297000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.297000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.297000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.297000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.297000 audit: BPF prog-id=113 op=LOAD Sep 6 01:22:12.297000 audit[2638]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2597 pid=2638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.297000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031313463623230363531326439303636326534653664383933363565 Sep 6 01:22:12.298000 audit: BPF prog-id=113 op=UNLOAD Sep 6 01:22:12.298000 audit: BPF prog-id=112 op=UNLOAD Sep 6 01:22:12.298000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.298000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.298000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.298000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.298000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.298000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.298000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.298000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.298000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.298000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:12.298000 audit: BPF prog-id=114 op=LOAD Sep 6 01:22:12.298000 audit[2638]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2597 pid=2638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.298000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031313463623230363531326439303636326534653664383933363565 Sep 6 01:22:12.320806 env[1474]: time="2025-09-06T01:22:12.320747294Z" level=info msg="StartContainer for \"0114cb206512d90662e4e6d89365e1941d052957a658f6d382365c32a908f254\" returns successfully" Sep 6 01:22:12.442000 audit[2699]: NETFILTER_CFG table=mangle:45 family=2 entries=1 op=nft_register_chain pid=2699 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:22:12.442000 audit[2699]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe522f550 a2=0 a3=1 items=0 ppid=2649 pid=2699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.442000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 6 01:22:12.446000 audit[2700]: NETFILTER_CFG table=mangle:46 family=10 entries=1 op=nft_register_chain pid=2700 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:22:12.446000 audit[2700]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff0e063b0 a2=0 a3=1 items=0 ppid=2649 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.446000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 6 01:22:12.447000 audit[2701]: NETFILTER_CFG table=nat:47 family=10 entries=1 op=nft_register_chain pid=2701 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:22:12.447000 audit[2701]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff8699ff0 a2=0 a3=1 items=0 ppid=2649 pid=2701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.447000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 6 01:22:12.448000 audit[2702]: NETFILTER_CFG table=filter:48 family=10 entries=1 op=nft_register_chain pid=2702 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:22:12.448000 audit[2702]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdda07560 a2=0 a3=1 items=0 ppid=2649 pid=2702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.448000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 6 01:22:12.452000 audit[2704]: NETFILTER_CFG table=nat:49 family=2 entries=1 op=nft_register_chain pid=2704 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:22:12.452000 audit[2704]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdce25150 a2=0 a3=1 items=0 ppid=2649 pid=2704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.452000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 6 01:22:12.456000 audit[2705]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_chain pid=2705 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:22:12.456000 audit[2705]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc43dc9b0 a2=0 a3=1 items=0 ppid=2649 pid=2705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.456000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 6 01:22:12.546000 audit[2706]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_chain pid=2706 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:22:12.546000 audit[2706]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffc154e670 a2=0 a3=1 items=0 ppid=2649 pid=2706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.546000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 6 01:22:12.549000 audit[2708]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_rule pid=2708 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:22:12.549000 audit[2708]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc9848fc0 a2=0 a3=1 items=0 ppid=2649 pid=2708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.549000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Sep 6 01:22:12.552000 audit[2711]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2711 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:22:12.552000 audit[2711]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffd03a7200 a2=0 a3=1 items=0 ppid=2649 pid=2711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.552000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Sep 6 01:22:12.553000 audit[2712]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2712 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:22:12.553000 audit[2712]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd79431a0 a2=0 a3=1 items=0 ppid=2649 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.553000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 6 01:22:12.555000 audit[2714]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2714 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:22:12.555000 audit[2714]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd7cb7c70 a2=0 a3=1 items=0 ppid=2649 pid=2714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.555000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 6 01:22:12.559000 audit[2715]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_chain pid=2715 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:22:12.559000 audit[2715]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffeba21380 a2=0 a3=1 items=0 ppid=2649 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.559000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 6 01:22:12.561000 audit[2717]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2717 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:22:12.561000 audit[2717]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffca2b71e0 a2=0 a3=1 items=0 ppid=2649 pid=2717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.561000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 6 01:22:12.565000 audit[2720]: NETFILTER_CFG table=filter:58 family=2 entries=1 op=nft_register_rule pid=2720 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:22:12.565000 audit[2720]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd1e9fd60 a2=0 a3=1 items=0 ppid=2649 pid=2720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.565000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Sep 6 01:22:12.566000 audit[2721]: NETFILTER_CFG table=filter:59 family=2 entries=1 op=nft_register_chain pid=2721 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:22:12.566000 audit[2721]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffccded140 a2=0 a3=1 items=0 ppid=2649 pid=2721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.566000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 6 01:22:12.569000 audit[2723]: NETFILTER_CFG table=filter:60 family=2 entries=1 op=nft_register_rule pid=2723 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:22:12.569000 audit[2723]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffdc6be80 a2=0 a3=1 items=0 ppid=2649 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.569000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 6 01:22:12.570000 audit[2724]: NETFILTER_CFG table=filter:61 family=2 entries=1 op=nft_register_chain pid=2724 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:22:12.570000 audit[2724]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcf755750 a2=0 a3=1 items=0 ppid=2649 pid=2724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.570000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 6 01:22:12.572000 audit[2726]: NETFILTER_CFG table=filter:62 family=2 entries=1 op=nft_register_rule pid=2726 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:22:12.572000 audit[2726]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd3d9c900 a2=0 a3=1 items=0 ppid=2649 pid=2726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.572000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 6 01:22:12.576000 audit[2729]: NETFILTER_CFG table=filter:63 family=2 entries=1 op=nft_register_rule pid=2729 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:22:12.576000 audit[2729]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffcab18e70 a2=0 a3=1 items=0 ppid=2649 pid=2729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.576000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 6 01:22:12.580000 audit[2732]: NETFILTER_CFG table=filter:64 family=2 entries=1 op=nft_register_rule pid=2732 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:22:12.580000 audit[2732]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd1bb60d0 a2=0 a3=1 items=0 ppid=2649 pid=2732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.580000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 6 01:22:12.582000 audit[2733]: NETFILTER_CFG table=nat:65 family=2 entries=1 op=nft_register_chain pid=2733 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:22:12.582000 audit[2733]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffffc41c1d0 a2=0 a3=1 items=0 ppid=2649 pid=2733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.582000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 6 01:22:12.587000 audit[2735]: NETFILTER_CFG table=nat:66 family=2 entries=1 op=nft_register_rule pid=2735 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:22:12.587000 audit[2735]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffc35bb570 a2=0 a3=1 items=0 ppid=2649 pid=2735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.587000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 6 01:22:12.597000 audit[2738]: NETFILTER_CFG table=nat:67 family=2 entries=1 op=nft_register_rule pid=2738 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:22:12.597000 audit[2738]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe0575930 a2=0 a3=1 items=0 ppid=2649 pid=2738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.597000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 6 01:22:12.598000 audit[2739]: NETFILTER_CFG table=nat:68 family=2 entries=1 op=nft_register_chain pid=2739 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:22:12.598000 audit[2739]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe765b620 a2=0 a3=1 items=0 ppid=2649 pid=2739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.598000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 6 01:22:12.601000 audit[2741]: NETFILTER_CFG table=nat:69 family=2 entries=1 op=nft_register_rule pid=2741 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:22:12.601000 audit[2741]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=fffff1c089c0 a2=0 a3=1 items=0 ppid=2649 pid=2741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.601000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 6 01:22:12.658000 audit[2747]: NETFILTER_CFG table=filter:70 family=2 entries=8 op=nft_register_rule pid=2747 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:12.658000 audit[2747]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffc9055550 a2=0 a3=1 items=0 ppid=2649 pid=2747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.658000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:12.687000 audit[2747]: NETFILTER_CFG table=nat:71 family=2 entries=14 op=nft_register_chain pid=2747 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:12.687000 audit[2747]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffc9055550 a2=0 a3=1 items=0 ppid=2649 pid=2747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.687000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:12.688000 audit[2752]: NETFILTER_CFG table=filter:72 family=10 entries=1 op=nft_register_chain pid=2752 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:22:12.688000 audit[2752]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffd4393e60 a2=0 a3=1 items=0 ppid=2649 pid=2752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.688000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 6 01:22:12.697000 audit[2754]: NETFILTER_CFG table=filter:73 family=10 entries=2 op=nft_register_chain pid=2754 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:22:12.697000 audit[2754]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffd2aa2e50 a2=0 a3=1 items=0 ppid=2649 pid=2754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.697000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Sep 6 01:22:12.703000 audit[2757]: NETFILTER_CFG table=filter:74 family=10 entries=2 op=nft_register_chain pid=2757 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:22:12.703000 audit[2757]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffff3001710 a2=0 a3=1 items=0 ppid=2649 pid=2757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.703000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Sep 6 01:22:12.704000 audit[2758]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2758 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:22:12.704000 audit[2758]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc02465b0 a2=0 a3=1 items=0 ppid=2649 pid=2758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.704000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 6 01:22:12.706000 audit[2760]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2760 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:22:12.706000 audit[2760]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd7f45770 a2=0 a3=1 items=0 ppid=2649 pid=2760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.706000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 6 01:22:12.712000 audit[2761]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_chain pid=2761 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:22:12.712000 audit[2761]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffee8d1e40 a2=0 a3=1 items=0 ppid=2649 pid=2761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.712000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 6 01:22:12.716000 audit[2763]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2763 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:22:12.716000 audit[2763]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffef248bb0 a2=0 a3=1 items=0 ppid=2649 pid=2763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.716000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Sep 6 01:22:12.719000 audit[2766]: NETFILTER_CFG table=filter:79 family=10 entries=2 op=nft_register_chain pid=2766 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:22:12.719000 audit[2766]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffe68cc620 a2=0 a3=1 items=0 ppid=2649 pid=2766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.719000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 6 01:22:12.721000 audit[2767]: NETFILTER_CFG table=filter:80 family=10 entries=1 op=nft_register_chain pid=2767 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:22:12.721000 audit[2767]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffa8af7d0 a2=0 a3=1 items=0 ppid=2649 pid=2767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.721000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 6 01:22:12.726000 audit[2769]: NETFILTER_CFG table=filter:81 family=10 entries=1 op=nft_register_rule pid=2769 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:22:12.726000 audit[2769]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffb06f650 a2=0 a3=1 items=0 ppid=2649 pid=2769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.726000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 6 01:22:12.728000 audit[2770]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_chain pid=2770 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:22:12.728000 audit[2770]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffccf46330 a2=0 a3=1 items=0 ppid=2649 pid=2770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.728000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 6 01:22:12.734000 audit[2772]: NETFILTER_CFG table=filter:83 family=10 entries=1 op=nft_register_rule pid=2772 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:22:12.734000 audit[2772]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdf168920 a2=0 a3=1 items=0 ppid=2649 pid=2772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.734000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 6 01:22:12.738000 audit[2775]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_rule pid=2775 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:22:12.738000 audit[2775]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffeb86ca60 a2=0 a3=1 items=0 ppid=2649 pid=2775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.738000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 6 01:22:12.748000 audit[2778]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2778 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:22:12.748000 audit[2778]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc1101c40 a2=0 a3=1 items=0 ppid=2649 pid=2778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.748000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Sep 6 01:22:12.749000 audit[2779]: NETFILTER_CFG table=nat:86 family=10 entries=1 op=nft_register_chain pid=2779 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:22:12.749000 audit[2779]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd980b240 a2=0 a3=1 items=0 ppid=2649 pid=2779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.749000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 6 01:22:12.751000 audit[2781]: NETFILTER_CFG table=nat:87 family=10 entries=2 op=nft_register_chain pid=2781 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:22:12.751000 audit[2781]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=fffff8fe3fa0 a2=0 a3=1 items=0 ppid=2649 pid=2781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.751000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 6 01:22:12.754000 audit[2784]: NETFILTER_CFG table=nat:88 family=10 entries=2 op=nft_register_chain pid=2784 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:22:12.754000 audit[2784]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffdba35d90 a2=0 a3=1 items=0 ppid=2649 pid=2784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.754000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 6 01:22:12.755000 audit[2785]: NETFILTER_CFG table=nat:89 family=10 entries=1 op=nft_register_chain pid=2785 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:22:12.755000 audit[2785]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe441d5b0 a2=0 a3=1 items=0 ppid=2649 pid=2785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.755000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 6 01:22:12.757000 audit[2787]: NETFILTER_CFG table=nat:90 family=10 entries=2 op=nft_register_chain pid=2787 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:22:12.757000 audit[2787]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffcabc2b30 a2=0 a3=1 items=0 ppid=2649 pid=2787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.757000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 6 01:22:12.758000 audit[2788]: NETFILTER_CFG table=filter:91 family=10 entries=1 op=nft_register_chain pid=2788 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:22:12.758000 audit[2788]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffb68cbb0 a2=0 a3=1 items=0 ppid=2649 pid=2788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.758000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 6 01:22:12.760000 audit[2790]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_rule pid=2790 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:22:12.760000 audit[2790]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff851ada0 a2=0 a3=1 items=0 ppid=2649 pid=2790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.760000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 6 01:22:12.766000 audit[2793]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_rule pid=2793 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:22:12.766000 audit[2793]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc66c6970 a2=0 a3=1 items=0 ppid=2649 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.766000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 6 01:22:12.771000 audit[2795]: NETFILTER_CFG table=filter:94 family=10 entries=3 op=nft_register_rule pid=2795 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 6 01:22:12.771000 audit[2795]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=fffff6faa090 a2=0 a3=1 items=0 ppid=2649 pid=2795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.771000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:12.771000 audit[2795]: NETFILTER_CFG table=nat:95 family=10 entries=7 op=nft_register_chain pid=2795 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 6 01:22:12.771000 audit[2795]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=fffff6faa090 a2=0 a3=1 items=0 ppid=2649 pid=2795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:12.771000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:12.859752 systemd[1]: run-containerd-runc-k8s.io-1cb64c98b5daaa4a9fe7864a73b41607b0ba4578109643f1d986b1d658c829ed-runc.mcxieW.mount: Deactivated successfully. Sep 6 01:22:13.512262 env[1474]: time="2025-09-06T01:22:13.512204734Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:13.527422 env[1474]: time="2025-09-06T01:22:13.527383171Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dd2e197838b00861b08ae5f480dfbfb9a519722e35ced99346315722309cbe9f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:13.536676 env[1474]: time="2025-09-06T01:22:13.536468753Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:13.545716 env[1474]: time="2025-09-06T01:22:13.545680575Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:00a7a9b62f9b9a4e0856128b078539783b8352b07f707bff595cb604cc580f6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:13.546169 env[1474]: time="2025-09-06T01:22:13.546143136Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\" returns image reference \"sha256:dd2e197838b00861b08ae5f480dfbfb9a519722e35ced99346315722309cbe9f\"" Sep 6 01:22:13.550170 env[1474]: time="2025-09-06T01:22:13.550110466Z" level=info msg="CreateContainer within sandbox \"6e5e25d83607f4621b44e0c632c1bd5621c81d14712bab583701f50be2ae9724\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Sep 6 01:22:13.587178 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3750854834.mount: Deactivated successfully. Sep 6 01:22:13.596875 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3719233856.mount: Deactivated successfully. Sep 6 01:22:13.620807 env[1474]: time="2025-09-06T01:22:13.620741557Z" level=info msg="CreateContainer within sandbox \"6e5e25d83607f4621b44e0c632c1bd5621c81d14712bab583701f50be2ae9724\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"506f2f82b9960018a3f3e8ae5f8dad628617982691909bbd98660b4c754b92f5\"" Sep 6 01:22:13.621631 env[1474]: time="2025-09-06T01:22:13.621591079Z" level=info msg="StartContainer for \"506f2f82b9960018a3f3e8ae5f8dad628617982691909bbd98660b4c754b92f5\"" Sep 6 01:22:13.638387 systemd[1]: Started cri-containerd-506f2f82b9960018a3f3e8ae5f8dad628617982691909bbd98660b4c754b92f5.scope. Sep 6 01:22:13.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.650000 audit: BPF prog-id=115 op=LOAD Sep 6 01:22:13.651000 audit[2804]: AVC avc: denied { bpf } for pid=2804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.651000 audit[2804]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2555 pid=2804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:13.651000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530366632663832623939363030313861336633653861653566386461 Sep 6 01:22:13.651000 audit[2804]: AVC avc: denied { perfmon } for pid=2804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.651000 audit[2804]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2555 pid=2804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:13.651000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530366632663832623939363030313861336633653861653566386461 Sep 6 01:22:13.651000 audit[2804]: AVC avc: denied { bpf } for pid=2804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.651000 audit[2804]: AVC avc: denied { bpf } for pid=2804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.651000 audit[2804]: AVC avc: denied { bpf } for pid=2804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.651000 audit[2804]: AVC avc: denied { perfmon } for pid=2804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.651000 audit[2804]: AVC avc: denied { perfmon } for pid=2804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.651000 audit[2804]: AVC avc: denied { perfmon } for pid=2804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.651000 audit[2804]: AVC avc: denied { perfmon } for pid=2804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.651000 audit[2804]: AVC avc: denied { perfmon } for pid=2804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.651000 audit[2804]: AVC avc: denied { bpf } for pid=2804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.651000 audit[2804]: AVC avc: denied { bpf } for pid=2804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.651000 audit: BPF prog-id=116 op=LOAD Sep 6 01:22:13.651000 audit[2804]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2555 pid=2804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:13.651000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530366632663832623939363030313861336633653861653566386461 Sep 6 01:22:13.652000 audit[2804]: AVC avc: denied { bpf } for pid=2804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.652000 audit[2804]: AVC avc: denied { bpf } for pid=2804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.652000 audit[2804]: AVC avc: denied { perfmon } for pid=2804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.652000 audit[2804]: AVC avc: denied { perfmon } for pid=2804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.652000 audit[2804]: AVC avc: denied { perfmon } for pid=2804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.652000 audit[2804]: AVC avc: denied { perfmon } for pid=2804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.652000 audit[2804]: AVC avc: denied { perfmon } for pid=2804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.652000 audit[2804]: AVC avc: denied { bpf } for pid=2804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.652000 audit[2804]: AVC avc: denied { bpf } for pid=2804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.652000 audit: BPF prog-id=117 op=LOAD Sep 6 01:22:13.652000 audit[2804]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2555 pid=2804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:13.652000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530366632663832623939363030313861336633653861653566386461 Sep 6 01:22:13.652000 audit: BPF prog-id=117 op=UNLOAD Sep 6 01:22:13.652000 audit: BPF prog-id=116 op=UNLOAD Sep 6 01:22:13.653000 audit[2804]: AVC avc: denied { bpf } for pid=2804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.653000 audit[2804]: AVC avc: denied { bpf } for pid=2804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.653000 audit[2804]: AVC avc: denied { bpf } for pid=2804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.653000 audit[2804]: AVC avc: denied { perfmon } for pid=2804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.653000 audit[2804]: AVC avc: denied { perfmon } for pid=2804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.653000 audit[2804]: AVC avc: denied { perfmon } for pid=2804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.653000 audit[2804]: AVC avc: denied { perfmon } for pid=2804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.653000 audit[2804]: AVC avc: denied { perfmon } for pid=2804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.653000 audit[2804]: AVC avc: denied { bpf } for pid=2804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.653000 audit[2804]: AVC avc: denied { bpf } for pid=2804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:13.653000 audit: BPF prog-id=118 op=LOAD Sep 6 01:22:13.653000 audit[2804]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2555 pid=2804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:13.653000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530366632663832623939363030313861336633653861653566386461 Sep 6 01:22:13.690206 env[1474]: time="2025-09-06T01:22:13.690152165Z" level=info msg="StartContainer for \"506f2f82b9960018a3f3e8ae5f8dad628617982691909bbd98660b4c754b92f5\" returns successfully" Sep 6 01:22:14.627399 kubelet[2507]: I0906 01:22:14.627333 2507 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-2ljgk" podStartSLOduration=4.627314243 podStartE2EDuration="4.627314243s" podCreationTimestamp="2025-09-06 01:22:10 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 01:22:12.624693766 +0000 UTC m=+7.204217968" watchObservedRunningTime="2025-09-06 01:22:14.627314243 +0000 UTC m=+9.206838445" Sep 6 01:22:16.471852 systemd[1]: cri-containerd-506f2f82b9960018a3f3e8ae5f8dad628617982691909bbd98660b4c754b92f5.scope: Deactivated successfully. Sep 6 01:22:16.471000 audit: BPF prog-id=115 op=UNLOAD Sep 6 01:22:16.478613 kernel: kauditd_printk_skb: 360 callbacks suppressed Sep 6 01:22:16.478717 kernel: audit: type=1334 audit(1757121736.471:947): prog-id=115 op=UNLOAD Sep 6 01:22:16.483000 audit: BPF prog-id=118 op=UNLOAD Sep 6 01:22:16.493687 kernel: audit: type=1334 audit(1757121736.483:948): prog-id=118 op=UNLOAD Sep 6 01:22:16.525588 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-506f2f82b9960018a3f3e8ae5f8dad628617982691909bbd98660b4c754b92f5-rootfs.mount: Deactivated successfully. Sep 6 01:22:17.079643 env[1474]: time="2025-09-06T01:22:17.079594588Z" level=info msg="shim disconnected" id=506f2f82b9960018a3f3e8ae5f8dad628617982691909bbd98660b4c754b92f5 Sep 6 01:22:17.080104 env[1474]: time="2025-09-06T01:22:17.080083709Z" level=warning msg="cleaning up after shim disconnected" id=506f2f82b9960018a3f3e8ae5f8dad628617982691909bbd98660b4c754b92f5 namespace=k8s.io Sep 6 01:22:17.080206 env[1474]: time="2025-09-06T01:22:17.080191389Z" level=info msg="cleaning up dead shim" Sep 6 01:22:17.091034 env[1474]: time="2025-09-06T01:22:17.090977094Z" level=warning msg="cleanup warnings time=\"2025-09-06T01:22:17Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2870 runtime=io.containerd.runc.v2\n" Sep 6 01:22:17.622139 kubelet[2507]: I0906 01:22:17.622093 2507 scope.go:117] "RemoveContainer" containerID="506f2f82b9960018a3f3e8ae5f8dad628617982691909bbd98660b4c754b92f5" Sep 6 01:22:17.626005 env[1474]: time="2025-09-06T01:22:17.625961769Z" level=info msg="CreateContainer within sandbox \"6e5e25d83607f4621b44e0c632c1bd5621c81d14712bab583701f50be2ae9724\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Sep 6 01:22:17.689277 env[1474]: time="2025-09-06T01:22:17.689220030Z" level=info msg="CreateContainer within sandbox \"6e5e25d83607f4621b44e0c632c1bd5621c81d14712bab583701f50be2ae9724\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"f33982df599cf9d24d7cb964091c7a3d7ef0a01bd41d30c7b0c4a4171517f05e\"" Sep 6 01:22:17.690395 env[1474]: time="2025-09-06T01:22:17.690361272Z" level=info msg="StartContainer for \"f33982df599cf9d24d7cb964091c7a3d7ef0a01bd41d30c7b0c4a4171517f05e\"" Sep 6 01:22:17.710562 systemd[1]: Started cri-containerd-f33982df599cf9d24d7cb964091c7a3d7ef0a01bd41d30c7b0c4a4171517f05e.scope. Sep 6 01:22:17.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.758403 kernel: audit: type=1400 audit(1757121737.719:949): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.758578 kernel: audit: type=1400 audit(1757121737.719:950): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.777697 kernel: audit: type=1400 audit(1757121737.719:951): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.819394 kernel: audit: type=1400 audit(1757121737.719:952): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.819505 kernel: audit: type=1400 audit(1757121737.719:953): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.841672 kernel: audit: type=1400 audit(1757121737.719:954): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.842157 kernel: audit: type=1400 audit(1757121737.719:955): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.880937 kernel: audit: type=1400 audit(1757121737.719:956): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.738000 audit: BPF prog-id=119 op=LOAD Sep 6 01:22:17.739000 audit[2896]: AVC avc: denied { bpf } for pid=2896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.739000 audit[2896]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=2555 pid=2896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:17.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633333938326466353939636639643234643763623936343039316337 Sep 6 01:22:17.739000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.739000 audit[2896]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=2555 pid=2896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:17.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633333938326466353939636639643234643763623936343039316337 Sep 6 01:22:17.739000 audit[2896]: AVC avc: denied { bpf } for pid=2896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.739000 audit[2896]: AVC avc: denied { bpf } for pid=2896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.739000 audit[2896]: AVC avc: denied { bpf } for pid=2896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.739000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.739000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.739000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.739000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.739000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.739000 audit[2896]: AVC avc: denied { bpf } for pid=2896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.739000 audit[2896]: AVC avc: denied { bpf } for pid=2896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.739000 audit: BPF prog-id=120 op=LOAD Sep 6 01:22:17.739000 audit[2896]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=2555 pid=2896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:17.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633333938326466353939636639643234643763623936343039316337 Sep 6 01:22:17.757000 audit[2896]: AVC avc: denied { bpf } for pid=2896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.757000 audit[2896]: AVC avc: denied { bpf } for pid=2896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.757000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.757000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.757000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.757000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.757000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.757000 audit[2896]: AVC avc: denied { bpf } for pid=2896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.757000 audit[2896]: AVC avc: denied { bpf } for pid=2896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.757000 audit: BPF prog-id=121 op=LOAD Sep 6 01:22:17.757000 audit[2896]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=2555 pid=2896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:17.757000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633333938326466353939636639643234643763623936343039316337 Sep 6 01:22:17.757000 audit: BPF prog-id=121 op=UNLOAD Sep 6 01:22:17.757000 audit: BPF prog-id=120 op=UNLOAD Sep 6 01:22:17.757000 audit[2896]: AVC avc: denied { bpf } for pid=2896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.757000 audit[2896]: AVC avc: denied { bpf } for pid=2896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.757000 audit[2896]: AVC avc: denied { bpf } for pid=2896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.757000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.757000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.757000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.757000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.757000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.757000 audit[2896]: AVC avc: denied { bpf } for pid=2896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.757000 audit[2896]: AVC avc: denied { bpf } for pid=2896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:17.757000 audit: BPF prog-id=122 op=LOAD Sep 6 01:22:17.757000 audit[2896]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=2555 pid=2896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:17.757000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633333938326466353939636639643234643763623936343039316337 Sep 6 01:22:17.887771 env[1474]: time="2025-09-06T01:22:17.887717713Z" level=info msg="StartContainer for \"f33982df599cf9d24d7cb964091c7a3d7ef0a01bd41d30c7b0c4a4171517f05e\" returns successfully" Sep 6 01:22:18.638268 kubelet[2507]: I0906 01:22:18.638216 2507 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-58fc44c59b-sg2xk" podStartSLOduration=6.357866474 podStartE2EDuration="8.638186562s" podCreationTimestamp="2025-09-06 01:22:10 +0000 UTC" firstStartedPulling="2025-09-06 01:22:11.267171531 +0000 UTC m=+5.846695733" lastFinishedPulling="2025-09-06 01:22:13.547491619 +0000 UTC m=+8.127015821" observedRunningTime="2025-09-06 01:22:14.628007285 +0000 UTC m=+9.207531487" watchObservedRunningTime="2025-09-06 01:22:18.638186562 +0000 UTC m=+13.217710764" Sep 6 01:22:19.755349 sudo[1807]: pam_unix(sudo:session): session closed for user root Sep 6 01:22:19.754000 audit[1807]: USER_END pid=1807 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 01:22:19.754000 audit[1807]: CRED_DISP pid=1807 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 01:22:19.833705 sshd[1804]: pam_unix(sshd:session): session closed for user core Sep 6 01:22:19.833000 audit[1804]: USER_END pid=1804 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:19.834000 audit[1804]: CRED_DISP pid=1804 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:19.837080 systemd[1]: sshd@6-10.200.20.26:22-10.200.16.10:39164.service: Deactivated successfully. Sep 6 01:22:19.836000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.26:22-10.200.16.10:39164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:19.837793 systemd[1]: session-9.scope: Deactivated successfully. Sep 6 01:22:19.837948 systemd[1]: session-9.scope: Consumed 6.460s CPU time. Sep 6 01:22:19.838853 systemd-logind[1465]: Session 9 logged out. Waiting for processes to exit. Sep 6 01:22:19.839767 systemd-logind[1465]: Removed session 9. Sep 6 01:22:23.214310 kernel: kauditd_printk_skb: 54 callbacks suppressed Sep 6 01:22:23.214456 kernel: audit: type=1325 audit(1757121743.194:972): table=filter:96 family=2 entries=15 op=nft_register_rule pid=2943 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:23.194000 audit[2943]: NETFILTER_CFG table=filter:96 family=2 entries=15 op=nft_register_rule pid=2943 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:23.194000 audit[2943]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffd54fa960 a2=0 a3=1 items=0 ppid=2649 pid=2943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:23.194000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:23.267801 kernel: audit: type=1300 audit(1757121743.194:972): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffd54fa960 a2=0 a3=1 items=0 ppid=2649 pid=2943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:23.267881 kernel: audit: type=1327 audit(1757121743.194:972): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:23.216000 audit[2943]: NETFILTER_CFG table=nat:97 family=2 entries=12 op=nft_register_rule pid=2943 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:23.285535 kernel: audit: type=1325 audit(1757121743.216:973): table=nat:97 family=2 entries=12 op=nft_register_rule pid=2943 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:23.216000 audit[2943]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd54fa960 a2=0 a3=1 items=0 ppid=2649 pid=2943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:23.216000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:23.330791 kernel: audit: type=1300 audit(1757121743.216:973): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd54fa960 a2=0 a3=1 items=0 ppid=2649 pid=2943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:23.330895 kernel: audit: type=1327 audit(1757121743.216:973): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:23.315000 audit[2945]: NETFILTER_CFG table=filter:98 family=2 entries=16 op=nft_register_rule pid=2945 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:23.347202 kernel: audit: type=1325 audit(1757121743.315:974): table=filter:98 family=2 entries=16 op=nft_register_rule pid=2945 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:23.315000 audit[2945]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffd0da6690 a2=0 a3=1 items=0 ppid=2649 pid=2945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:23.377174 kernel: audit: type=1300 audit(1757121743.315:974): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffd0da6690 a2=0 a3=1 items=0 ppid=2649 pid=2945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:23.315000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:23.397653 kernel: audit: type=1327 audit(1757121743.315:974): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:23.348000 audit[2945]: NETFILTER_CFG table=nat:99 family=2 entries=12 op=nft_register_rule pid=2945 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:23.413730 kernel: audit: type=1325 audit(1757121743.348:975): table=nat:99 family=2 entries=12 op=nft_register_rule pid=2945 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:23.348000 audit[2945]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd0da6690 a2=0 a3=1 items=0 ppid=2649 pid=2945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:23.348000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:28.834000 audit[2947]: NETFILTER_CFG table=filter:100 family=2 entries=17 op=nft_register_rule pid=2947 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:28.841263 kernel: kauditd_printk_skb: 2 callbacks suppressed Sep 6 01:22:28.841318 kernel: audit: type=1325 audit(1757121748.834:976): table=filter:100 family=2 entries=17 op=nft_register_rule pid=2947 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:28.834000 audit[2947]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffffcbc52f0 a2=0 a3=1 items=0 ppid=2649 pid=2947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:28.834000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:28.919898 kernel: audit: type=1300 audit(1757121748.834:976): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffffcbc52f0 a2=0 a3=1 items=0 ppid=2649 pid=2947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:28.920051 kernel: audit: type=1327 audit(1757121748.834:976): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:28.900000 audit[2947]: NETFILTER_CFG table=nat:101 family=2 entries=12 op=nft_register_rule pid=2947 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:28.941575 kernel: audit: type=1325 audit(1757121748.900:977): table=nat:101 family=2 entries=12 op=nft_register_rule pid=2947 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:28.900000 audit[2947]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffffcbc52f0 a2=0 a3=1 items=0 ppid=2649 pid=2947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:28.976982 kernel: audit: type=1300 audit(1757121748.900:977): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffffcbc52f0 a2=0 a3=1 items=0 ppid=2649 pid=2947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:28.900000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:29.000360 kernel: audit: type=1327 audit(1757121748.900:977): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:29.028000 audit[2949]: NETFILTER_CFG table=filter:102 family=2 entries=19 op=nft_register_rule pid=2949 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:29.046490 kernel: audit: type=1325 audit(1757121749.028:978): table=filter:102 family=2 entries=19 op=nft_register_rule pid=2949 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:29.028000 audit[2949]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffdddb4ae0 a2=0 a3=1 items=0 ppid=2649 pid=2949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:29.048916 systemd[1]: Created slice kubepods-besteffort-podee06ba70_cd77_4c0c_9012_be5e420c4dd1.slice. Sep 6 01:22:29.028000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:29.106882 kernel: audit: type=1300 audit(1757121749.028:978): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffdddb4ae0 a2=0 a3=1 items=0 ppid=2649 pid=2949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:29.107064 kernel: audit: type=1327 audit(1757121749.028:978): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:29.107098 kernel: audit: type=1325 audit(1757121749.086:979): table=nat:103 family=2 entries=12 op=nft_register_rule pid=2949 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:29.086000 audit[2949]: NETFILTER_CFG table=nat:103 family=2 entries=12 op=nft_register_rule pid=2949 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:29.122185 kubelet[2507]: I0906 01:22:29.122106 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-h7hls\" (UniqueName: \"kubernetes.io/projected/ee06ba70-cd77-4c0c-9012-be5e420c4dd1-kube-api-access-h7hls\") pod \"calico-typha-7bb4884d66-kp6zs\" (UID: \"ee06ba70-cd77-4c0c-9012-be5e420c4dd1\") " pod="calico-system/calico-typha-7bb4884d66-kp6zs" Sep 6 01:22:29.086000 audit[2949]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdddb4ae0 a2=0 a3=1 items=0 ppid=2649 pid=2949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:29.086000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:29.122800 kubelet[2507]: I0906 01:22:29.122780 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ee06ba70-cd77-4c0c-9012-be5e420c4dd1-tigera-ca-bundle\") pod \"calico-typha-7bb4884d66-kp6zs\" (UID: \"ee06ba70-cd77-4c0c-9012-be5e420c4dd1\") " pod="calico-system/calico-typha-7bb4884d66-kp6zs" Sep 6 01:22:29.122924 kubelet[2507]: I0906 01:22:29.122911 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/ee06ba70-cd77-4c0c-9012-be5e420c4dd1-typha-certs\") pod \"calico-typha-7bb4884d66-kp6zs\" (UID: \"ee06ba70-cd77-4c0c-9012-be5e420c4dd1\") " pod="calico-system/calico-typha-7bb4884d66-kp6zs" Sep 6 01:22:29.354026 env[1474]: time="2025-09-06T01:22:29.353536428Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-7bb4884d66-kp6zs,Uid:ee06ba70-cd77-4c0c-9012-be5e420c4dd1,Namespace:calico-system,Attempt:0,}" Sep 6 01:22:29.362638 systemd[1]: Created slice kubepods-besteffort-pode66b5619_f07d_4ba5_9297_48d0ce4b9093.slice. Sep 6 01:22:29.405734 env[1474]: time="2025-09-06T01:22:29.405662122Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:22:29.405937 env[1474]: time="2025-09-06T01:22:29.405913122Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:22:29.406027 env[1474]: time="2025-09-06T01:22:29.406004522Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:22:29.406268 env[1474]: time="2025-09-06T01:22:29.406237123Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/402d8103a100b65769e4d3409e9e7fd82686ab1289a12e8c3c9b2e99c1a8840f pid=2960 runtime=io.containerd.runc.v2 Sep 6 01:22:29.425699 kubelet[2507]: I0906 01:22:29.424982 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/e66b5619-f07d-4ba5-9297-48d0ce4b9093-policysync\") pod \"calico-node-d92l5\" (UID: \"e66b5619-f07d-4ba5-9297-48d0ce4b9093\") " pod="calico-system/calico-node-d92l5" Sep 6 01:22:29.425699 kubelet[2507]: I0906 01:22:29.425024 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nv84k\" (UniqueName: \"kubernetes.io/projected/e66b5619-f07d-4ba5-9297-48d0ce4b9093-kube-api-access-nv84k\") pod \"calico-node-d92l5\" (UID: \"e66b5619-f07d-4ba5-9297-48d0ce4b9093\") " pod="calico-system/calico-node-d92l5" Sep 6 01:22:29.425699 kubelet[2507]: I0906 01:22:29.425044 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/e66b5619-f07d-4ba5-9297-48d0ce4b9093-cni-net-dir\") pod \"calico-node-d92l5\" (UID: \"e66b5619-f07d-4ba5-9297-48d0ce4b9093\") " pod="calico-system/calico-node-d92l5" Sep 6 01:22:29.425699 kubelet[2507]: I0906 01:22:29.425063 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/e66b5619-f07d-4ba5-9297-48d0ce4b9093-flexvol-driver-host\") pod \"calico-node-d92l5\" (UID: \"e66b5619-f07d-4ba5-9297-48d0ce4b9093\") " pod="calico-system/calico-node-d92l5" Sep 6 01:22:29.425699 kubelet[2507]: I0906 01:22:29.425080 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/e66b5619-f07d-4ba5-9297-48d0ce4b9093-var-run-calico\") pod \"calico-node-d92l5\" (UID: \"e66b5619-f07d-4ba5-9297-48d0ce4b9093\") " pod="calico-system/calico-node-d92l5" Sep 6 01:22:29.425973 kubelet[2507]: I0906 01:22:29.425101 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/e66b5619-f07d-4ba5-9297-48d0ce4b9093-node-certs\") pod \"calico-node-d92l5\" (UID: \"e66b5619-f07d-4ba5-9297-48d0ce4b9093\") " pod="calico-system/calico-node-d92l5" Sep 6 01:22:29.425973 kubelet[2507]: I0906 01:22:29.425137 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/e66b5619-f07d-4ba5-9297-48d0ce4b9093-cni-log-dir\") pod \"calico-node-d92l5\" (UID: \"e66b5619-f07d-4ba5-9297-48d0ce4b9093\") " pod="calico-system/calico-node-d92l5" Sep 6 01:22:29.425973 kubelet[2507]: I0906 01:22:29.425154 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e66b5619-f07d-4ba5-9297-48d0ce4b9093-xtables-lock\") pod \"calico-node-d92l5\" (UID: \"e66b5619-f07d-4ba5-9297-48d0ce4b9093\") " pod="calico-system/calico-node-d92l5" Sep 6 01:22:29.425973 kubelet[2507]: I0906 01:22:29.425169 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/e66b5619-f07d-4ba5-9297-48d0ce4b9093-cni-bin-dir\") pod \"calico-node-d92l5\" (UID: \"e66b5619-f07d-4ba5-9297-48d0ce4b9093\") " pod="calico-system/calico-node-d92l5" Sep 6 01:22:29.425973 kubelet[2507]: I0906 01:22:29.425188 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e66b5619-f07d-4ba5-9297-48d0ce4b9093-lib-modules\") pod \"calico-node-d92l5\" (UID: \"e66b5619-f07d-4ba5-9297-48d0ce4b9093\") " pod="calico-system/calico-node-d92l5" Sep 6 01:22:29.426221 kubelet[2507]: I0906 01:22:29.425205 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/e66b5619-f07d-4ba5-9297-48d0ce4b9093-tigera-ca-bundle\") pod \"calico-node-d92l5\" (UID: \"e66b5619-f07d-4ba5-9297-48d0ce4b9093\") " pod="calico-system/calico-node-d92l5" Sep 6 01:22:29.426221 kubelet[2507]: I0906 01:22:29.425223 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/e66b5619-f07d-4ba5-9297-48d0ce4b9093-var-lib-calico\") pod \"calico-node-d92l5\" (UID: \"e66b5619-f07d-4ba5-9297-48d0ce4b9093\") " pod="calico-system/calico-node-d92l5" Sep 6 01:22:29.442273 systemd[1]: Started cri-containerd-402d8103a100b65769e4d3409e9e7fd82686ab1289a12e8c3c9b2e99c1a8840f.scope. Sep 6 01:22:29.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.467000 audit: BPF prog-id=123 op=LOAD Sep 6 01:22:29.467000 audit[2971]: AVC avc: denied { bpf } for pid=2971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.467000 audit[2971]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2960 pid=2971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:29.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430326438313033613130306236353736396534643334303965396537 Sep 6 01:22:29.467000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.467000 audit[2971]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2960 pid=2971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:29.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430326438313033613130306236353736396534643334303965396537 Sep 6 01:22:29.467000 audit[2971]: AVC avc: denied { bpf } for pid=2971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.467000 audit[2971]: AVC avc: denied { bpf } for pid=2971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.467000 audit[2971]: AVC avc: denied { bpf } for pid=2971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.467000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.467000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.467000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.467000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.467000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.467000 audit[2971]: AVC avc: denied { bpf } for pid=2971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.467000 audit[2971]: AVC avc: denied { bpf } for pid=2971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.467000 audit: BPF prog-id=124 op=LOAD Sep 6 01:22:29.467000 audit[2971]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2960 pid=2971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:29.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430326438313033613130306236353736396534643334303965396537 Sep 6 01:22:29.467000 audit[2971]: AVC avc: denied { bpf } for pid=2971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.467000 audit[2971]: AVC avc: denied { bpf } for pid=2971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.467000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.467000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.467000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.467000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.467000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.467000 audit[2971]: AVC avc: denied { bpf } for pid=2971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.467000 audit[2971]: AVC avc: denied { bpf } for pid=2971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.467000 audit: BPF prog-id=125 op=LOAD Sep 6 01:22:29.467000 audit[2971]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2960 pid=2971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:29.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430326438313033613130306236353736396534643334303965396537 Sep 6 01:22:29.468000 audit: BPF prog-id=125 op=UNLOAD Sep 6 01:22:29.468000 audit: BPF prog-id=124 op=UNLOAD Sep 6 01:22:29.468000 audit[2971]: AVC avc: denied { bpf } for pid=2971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.468000 audit[2971]: AVC avc: denied { bpf } for pid=2971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.468000 audit[2971]: AVC avc: denied { bpf } for pid=2971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.468000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.468000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.468000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.468000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.468000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.468000 audit[2971]: AVC avc: denied { bpf } for pid=2971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.468000 audit[2971]: AVC avc: denied { bpf } for pid=2971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.468000 audit: BPF prog-id=126 op=LOAD Sep 6 01:22:29.468000 audit[2971]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2960 pid=2971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:29.468000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430326438313033613130306236353736396534643334303965396537 Sep 6 01:22:29.498151 kubelet[2507]: E0906 01:22:29.497964 2507 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-m9tfk" podUID="04a7e183-4c51-4aa6-b31d-7efe6ca81746" Sep 6 01:22:29.523619 env[1474]: time="2025-09-06T01:22:29.523571173Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-7bb4884d66-kp6zs,Uid:ee06ba70-cd77-4c0c-9012-be5e420c4dd1,Namespace:calico-system,Attempt:0,} returns sandbox id \"402d8103a100b65769e4d3409e9e7fd82686ab1289a12e8c3c9b2e99c1a8840f\"" Sep 6 01:22:29.525497 kubelet[2507]: I0906 01:22:29.525452 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/04a7e183-4c51-4aa6-b31d-7efe6ca81746-kubelet-dir\") pod \"csi-node-driver-m9tfk\" (UID: \"04a7e183-4c51-4aa6-b31d-7efe6ca81746\") " pod="calico-system/csi-node-driver-m9tfk" Sep 6 01:22:29.525497 kubelet[2507]: I0906 01:22:29.525501 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/04a7e183-4c51-4aa6-b31d-7efe6ca81746-registration-dir\") pod \"csi-node-driver-m9tfk\" (UID: \"04a7e183-4c51-4aa6-b31d-7efe6ca81746\") " pod="calico-system/csi-node-driver-m9tfk" Sep 6 01:22:29.525668 kubelet[2507]: I0906 01:22:29.525520 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/04a7e183-4c51-4aa6-b31d-7efe6ca81746-varrun\") pod \"csi-node-driver-m9tfk\" (UID: \"04a7e183-4c51-4aa6-b31d-7efe6ca81746\") " pod="calico-system/csi-node-driver-m9tfk" Sep 6 01:22:29.525668 kubelet[2507]: I0906 01:22:29.525616 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/04a7e183-4c51-4aa6-b31d-7efe6ca81746-socket-dir\") pod \"csi-node-driver-m9tfk\" (UID: \"04a7e183-4c51-4aa6-b31d-7efe6ca81746\") " pod="calico-system/csi-node-driver-m9tfk" Sep 6 01:22:29.525668 kubelet[2507]: I0906 01:22:29.525634 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5hcsm\" (UniqueName: \"kubernetes.io/projected/04a7e183-4c51-4aa6-b31d-7efe6ca81746-kube-api-access-5hcsm\") pod \"csi-node-driver-m9tfk\" (UID: \"04a7e183-4c51-4aa6-b31d-7efe6ca81746\") " pod="calico-system/csi-node-driver-m9tfk" Sep 6 01:22:29.526678 env[1474]: time="2025-09-06T01:22:29.526639339Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\"" Sep 6 01:22:29.529522 kubelet[2507]: E0906 01:22:29.529459 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.529522 kubelet[2507]: W0906 01:22:29.529490 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.529682 kubelet[2507]: E0906 01:22:29.529537 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.530035 kubelet[2507]: E0906 01:22:29.529843 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.530035 kubelet[2507]: W0906 01:22:29.530030 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.530164 kubelet[2507]: E0906 01:22:29.530045 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.537361 kubelet[2507]: E0906 01:22:29.536970 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.537361 kubelet[2507]: W0906 01:22:29.536998 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.537361 kubelet[2507]: E0906 01:22:29.537021 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.537361 kubelet[2507]: E0906 01:22:29.537228 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.537361 kubelet[2507]: W0906 01:22:29.537238 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.537361 kubelet[2507]: E0906 01:22:29.537247 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.537627 kubelet[2507]: E0906 01:22:29.537375 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.537627 kubelet[2507]: W0906 01:22:29.537395 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.537627 kubelet[2507]: E0906 01:22:29.537404 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.537627 kubelet[2507]: E0906 01:22:29.537543 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.537627 kubelet[2507]: W0906 01:22:29.537553 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.537627 kubelet[2507]: E0906 01:22:29.537561 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.537766 kubelet[2507]: E0906 01:22:29.537701 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.537766 kubelet[2507]: W0906 01:22:29.537709 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.537766 kubelet[2507]: E0906 01:22:29.537717 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.537860 kubelet[2507]: E0906 01:22:29.537834 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.537860 kubelet[2507]: W0906 01:22:29.537856 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.537940 kubelet[2507]: E0906 01:22:29.537921 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.538129 kubelet[2507]: E0906 01:22:29.538024 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.538129 kubelet[2507]: W0906 01:22:29.538036 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.538129 kubelet[2507]: E0906 01:22:29.538044 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.538375 kubelet[2507]: E0906 01:22:29.538216 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.538375 kubelet[2507]: W0906 01:22:29.538229 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.538375 kubelet[2507]: E0906 01:22:29.538238 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.538464 kubelet[2507]: E0906 01:22:29.538391 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.538464 kubelet[2507]: W0906 01:22:29.538400 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.538464 kubelet[2507]: E0906 01:22:29.538409 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.538873 kubelet[2507]: E0906 01:22:29.538599 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.538873 kubelet[2507]: W0906 01:22:29.538614 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.538873 kubelet[2507]: E0906 01:22:29.538623 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.548239 kubelet[2507]: E0906 01:22:29.548205 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.548239 kubelet[2507]: W0906 01:22:29.548230 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.548406 kubelet[2507]: E0906 01:22:29.548257 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.627006 kubelet[2507]: E0906 01:22:29.626900 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.627006 kubelet[2507]: W0906 01:22:29.626930 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.627006 kubelet[2507]: E0906 01:22:29.626951 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.629377 kubelet[2507]: E0906 01:22:29.629344 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.629377 kubelet[2507]: W0906 01:22:29.629368 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.629547 kubelet[2507]: E0906 01:22:29.629394 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.629675 kubelet[2507]: E0906 01:22:29.629651 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.629675 kubelet[2507]: W0906 01:22:29.629666 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.629787 kubelet[2507]: E0906 01:22:29.629770 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.630095 kubelet[2507]: E0906 01:22:29.630071 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.630095 kubelet[2507]: W0906 01:22:29.630095 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.630223 kubelet[2507]: E0906 01:22:29.630194 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.630323 kubelet[2507]: E0906 01:22:29.630308 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.630323 kubelet[2507]: W0906 01:22:29.630320 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.630394 kubelet[2507]: E0906 01:22:29.630333 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.630560 kubelet[2507]: E0906 01:22:29.630537 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.630560 kubelet[2507]: W0906 01:22:29.630554 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.630647 kubelet[2507]: E0906 01:22:29.630572 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.630754 kubelet[2507]: E0906 01:22:29.630736 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.630754 kubelet[2507]: W0906 01:22:29.630749 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.630821 kubelet[2507]: E0906 01:22:29.630758 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.630979 kubelet[2507]: E0906 01:22:29.630960 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.630979 kubelet[2507]: W0906 01:22:29.630974 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.631056 kubelet[2507]: E0906 01:22:29.630987 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.631430 kubelet[2507]: E0906 01:22:29.631402 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.631430 kubelet[2507]: W0906 01:22:29.631420 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.631430 kubelet[2507]: E0906 01:22:29.631436 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.631739 kubelet[2507]: E0906 01:22:29.631719 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.631739 kubelet[2507]: W0906 01:22:29.631734 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.631830 kubelet[2507]: E0906 01:22:29.631810 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.631989 kubelet[2507]: E0906 01:22:29.631963 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.631989 kubelet[2507]: W0906 01:22:29.631978 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.632102 kubelet[2507]: E0906 01:22:29.632086 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.632366 kubelet[2507]: E0906 01:22:29.632344 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.632366 kubelet[2507]: W0906 01:22:29.632360 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.632466 kubelet[2507]: E0906 01:22:29.632443 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.632564 kubelet[2507]: E0906 01:22:29.632548 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.632564 kubelet[2507]: W0906 01:22:29.632559 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.632627 kubelet[2507]: E0906 01:22:29.632571 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.632776 kubelet[2507]: E0906 01:22:29.632756 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.632776 kubelet[2507]: W0906 01:22:29.632771 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.632857 kubelet[2507]: E0906 01:22:29.632786 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.632941 kubelet[2507]: E0906 01:22:29.632926 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.632941 kubelet[2507]: W0906 01:22:29.632938 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.633024 kubelet[2507]: E0906 01:22:29.633000 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.633215 kubelet[2507]: E0906 01:22:29.633195 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.633215 kubelet[2507]: W0906 01:22:29.633210 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.633335 kubelet[2507]: E0906 01:22:29.633319 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.633403 kubelet[2507]: E0906 01:22:29.633358 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.633466 kubelet[2507]: W0906 01:22:29.633453 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.633563 kubelet[2507]: E0906 01:22:29.633540 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.634258 kubelet[2507]: E0906 01:22:29.634231 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.634426 kubelet[2507]: W0906 01:22:29.634408 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.636801 kubelet[2507]: E0906 01:22:29.636769 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.637189 kubelet[2507]: E0906 01:22:29.637139 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.637282 kubelet[2507]: W0906 01:22:29.637266 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.637408 kubelet[2507]: E0906 01:22:29.637382 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.637677 kubelet[2507]: E0906 01:22:29.637660 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.637767 kubelet[2507]: W0906 01:22:29.637753 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.637871 kubelet[2507]: E0906 01:22:29.637847 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.638190 kubelet[2507]: E0906 01:22:29.638173 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.638283 kubelet[2507]: W0906 01:22:29.638270 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.638369 kubelet[2507]: E0906 01:22:29.638349 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.639110 kubelet[2507]: E0906 01:22:29.639089 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.639235 kubelet[2507]: W0906 01:22:29.639220 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.639327 kubelet[2507]: E0906 01:22:29.639305 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.640219 kubelet[2507]: E0906 01:22:29.640200 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.640318 kubelet[2507]: W0906 01:22:29.640304 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.642253 kubelet[2507]: E0906 01:22:29.642130 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.642580 kubelet[2507]: E0906 01:22:29.642566 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.642654 kubelet[2507]: W0906 01:22:29.642642 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.642726 kubelet[2507]: E0906 01:22:29.642713 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.642940 kubelet[2507]: E0906 01:22:29.642918 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.642940 kubelet[2507]: W0906 01:22:29.642934 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.643018 kubelet[2507]: E0906 01:22:29.642947 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.649582 kubelet[2507]: E0906 01:22:29.649545 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:29.649582 kubelet[2507]: W0906 01:22:29.649569 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:29.649748 kubelet[2507]: E0906 01:22:29.649591 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:29.668252 env[1474]: time="2025-09-06T01:22:29.668191593Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-d92l5,Uid:e66b5619-f07d-4ba5-9297-48d0ce4b9093,Namespace:calico-system,Attempt:0,}" Sep 6 01:22:29.745500 env[1474]: time="2025-09-06T01:22:29.745420651Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:22:29.745500 env[1474]: time="2025-09-06T01:22:29.745498332Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:22:29.745672 env[1474]: time="2025-09-06T01:22:29.745525212Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:22:29.747242 env[1474]: time="2025-09-06T01:22:29.745851772Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0beb9a016e2ccf3dd1c0868332e5ffdd0a44e5a9582867567224c5f2abf6082c pid=3044 runtime=io.containerd.runc.v2 Sep 6 01:22:29.763383 systemd[1]: Started cri-containerd-0beb9a016e2ccf3dd1c0868332e5ffdd0a44e5a9582867567224c5f2abf6082c.scope. Sep 6 01:22:29.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit: BPF prog-id=127 op=LOAD Sep 6 01:22:29.778000 audit[3055]: AVC avc: denied { bpf } for pid=3055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit[3055]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=3044 pid=3055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:29.778000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062656239613031366532636366336464316330383638333332653566 Sep 6 01:22:29.778000 audit[3055]: AVC avc: denied { perfmon } for pid=3055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit[3055]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=3044 pid=3055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:29.778000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062656239613031366532636366336464316330383638333332653566 Sep 6 01:22:29.778000 audit[3055]: AVC avc: denied { bpf } for pid=3055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit[3055]: AVC avc: denied { bpf } for pid=3055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit[3055]: AVC avc: denied { bpf } for pid=3055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit[3055]: AVC avc: denied { perfmon } for pid=3055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit[3055]: AVC avc: denied { perfmon } for pid=3055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit[3055]: AVC avc: denied { perfmon } for pid=3055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit[3055]: AVC avc: denied { perfmon } for pid=3055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit[3055]: AVC avc: denied { perfmon } for pid=3055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit[3055]: AVC avc: denied { bpf } for pid=3055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit[3055]: AVC avc: denied { bpf } for pid=3055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit: BPF prog-id=128 op=LOAD Sep 6 01:22:29.778000 audit[3055]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=3044 pid=3055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:29.778000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062656239613031366532636366336464316330383638333332653566 Sep 6 01:22:29.778000 audit[3055]: AVC avc: denied { bpf } for pid=3055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit[3055]: AVC avc: denied { bpf } for pid=3055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit[3055]: AVC avc: denied { perfmon } for pid=3055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit[3055]: AVC avc: denied { perfmon } for pid=3055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit[3055]: AVC avc: denied { perfmon } for pid=3055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit[3055]: AVC avc: denied { perfmon } for pid=3055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit[3055]: AVC avc: denied { perfmon } for pid=3055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit[3055]: AVC avc: denied { bpf } for pid=3055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit[3055]: AVC avc: denied { bpf } for pid=3055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit: BPF prog-id=129 op=LOAD Sep 6 01:22:29.778000 audit[3055]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=3044 pid=3055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:29.778000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062656239613031366532636366336464316330383638333332653566 Sep 6 01:22:29.778000 audit: BPF prog-id=129 op=UNLOAD Sep 6 01:22:29.778000 audit: BPF prog-id=128 op=UNLOAD Sep 6 01:22:29.778000 audit[3055]: AVC avc: denied { bpf } for pid=3055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit[3055]: AVC avc: denied { bpf } for pid=3055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit[3055]: AVC avc: denied { bpf } for pid=3055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit[3055]: AVC avc: denied { perfmon } for pid=3055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit[3055]: AVC avc: denied { perfmon } for pid=3055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit[3055]: AVC avc: denied { perfmon } for pid=3055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit[3055]: AVC avc: denied { perfmon } for pid=3055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit[3055]: AVC avc: denied { perfmon } for pid=3055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit[3055]: AVC avc: denied { bpf } for pid=3055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit[3055]: AVC avc: denied { bpf } for pid=3055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:29.778000 audit: BPF prog-id=130 op=LOAD Sep 6 01:22:29.778000 audit[3055]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=3044 pid=3055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:29.778000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062656239613031366532636366336464316330383638333332653566 Sep 6 01:22:29.797898 env[1474]: time="2025-09-06T01:22:29.797852025Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-d92l5,Uid:e66b5619-f07d-4ba5-9297-48d0ce4b9093,Namespace:calico-system,Attempt:0,} returns sandbox id \"0beb9a016e2ccf3dd1c0868332e5ffdd0a44e5a9582867567224c5f2abf6082c\"" Sep 6 01:22:30.125000 audit[3080]: NETFILTER_CFG table=filter:104 family=2 entries=21 op=nft_register_rule pid=3080 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:30.125000 audit[3080]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffdb7e87e0 a2=0 a3=1 items=0 ppid=2649 pid=3080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:30.125000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:30.131000 audit[3080]: NETFILTER_CFG table=nat:105 family=2 entries=12 op=nft_register_rule pid=3080 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:30.131000 audit[3080]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdb7e87e0 a2=0 a3=1 items=0 ppid=2649 pid=3080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:30.131000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:30.233449 systemd[1]: run-containerd-runc-k8s.io-402d8103a100b65769e4d3409e9e7fd82686ab1289a12e8c3c9b2e99c1a8840f-runc.p1p1Qt.mount: Deactivated successfully. Sep 6 01:22:30.630888 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3013089124.mount: Deactivated successfully. Sep 6 01:22:31.429092 env[1474]: time="2025-09-06T01:22:31.429051498Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:31.441686 env[1474]: time="2025-09-06T01:22:31.441645800Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6a1496fdc48cc0b9ab3c10aef777497484efac5df9efbfbbdf9775e9583645cb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:31.448803 env[1474]: time="2025-09-06T01:22:31.448758572Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:31.460995 env[1474]: time="2025-09-06T01:22:31.460945594Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:f4a3d61ffda9c98a53adeb412c5af404ca3727a3cc2d0b4ef28d197bdd47ecaa,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:31.462151 env[1474]: time="2025-09-06T01:22:31.462091476Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\" returns image reference \"sha256:6a1496fdc48cc0b9ab3c10aef777497484efac5df9efbfbbdf9775e9583645cb\"" Sep 6 01:22:31.464137 env[1474]: time="2025-09-06T01:22:31.464084679Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\"" Sep 6 01:22:31.479048 env[1474]: time="2025-09-06T01:22:31.479002225Z" level=info msg="CreateContainer within sandbox \"402d8103a100b65769e4d3409e9e7fd82686ab1289a12e8c3c9b2e99c1a8840f\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Sep 6 01:22:31.524783 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2808005261.mount: Deactivated successfully. Sep 6 01:22:31.535369 kubelet[2507]: E0906 01:22:31.535322 2507 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-m9tfk" podUID="04a7e183-4c51-4aa6-b31d-7efe6ca81746" Sep 6 01:22:31.551529 env[1474]: time="2025-09-06T01:22:31.551477351Z" level=info msg="CreateContainer within sandbox \"402d8103a100b65769e4d3409e9e7fd82686ab1289a12e8c3c9b2e99c1a8840f\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"630c1c75efac5ae4af8e3089ac38cac11bcec2fa15723deeec38224db0cd544a\"" Sep 6 01:22:31.552274 env[1474]: time="2025-09-06T01:22:31.552236472Z" level=info msg="StartContainer for \"630c1c75efac5ae4af8e3089ac38cac11bcec2fa15723deeec38224db0cd544a\"" Sep 6 01:22:31.579041 systemd[1]: Started cri-containerd-630c1c75efac5ae4af8e3089ac38cac11bcec2fa15723deeec38224db0cd544a.scope. Sep 6 01:22:31.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.595000 audit: BPF prog-id=131 op=LOAD Sep 6 01:22:31.595000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.595000 audit[3091]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2960 pid=3091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:31.595000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633306331633735656661633561653461663865333038396163333863 Sep 6 01:22:31.595000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.595000 audit[3091]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2960 pid=3091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:31.595000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633306331633735656661633561653461663865333038396163333863 Sep 6 01:22:31.595000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.595000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.595000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.595000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.595000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.595000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.595000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.595000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.595000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.595000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.595000 audit: BPF prog-id=132 op=LOAD Sep 6 01:22:31.595000 audit[3091]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2960 pid=3091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:31.595000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633306331633735656661633561653461663865333038396163333863 Sep 6 01:22:31.596000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.596000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.596000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.596000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.596000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.596000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.596000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.596000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.596000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.596000 audit: BPF prog-id=133 op=LOAD Sep 6 01:22:31.596000 audit[3091]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2960 pid=3091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:31.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633306331633735656661633561653461663865333038396163333863 Sep 6 01:22:31.596000 audit: BPF prog-id=133 op=UNLOAD Sep 6 01:22:31.596000 audit: BPF prog-id=132 op=UNLOAD Sep 6 01:22:31.596000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.596000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.596000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.596000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.596000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.596000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.596000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.596000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.596000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.596000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:31.596000 audit: BPF prog-id=134 op=LOAD Sep 6 01:22:31.596000 audit[3091]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2960 pid=3091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:31.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633306331633735656661633561653461663865333038396163333863 Sep 6 01:22:31.625644 env[1474]: time="2025-09-06T01:22:31.625585679Z" level=info msg="StartContainer for \"630c1c75efac5ae4af8e3089ac38cac11bcec2fa15723deeec38224db0cd544a\" returns successfully" Sep 6 01:22:31.718201 kubelet[2507]: E0906 01:22:31.717944 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.718201 kubelet[2507]: W0906 01:22:31.717972 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.718201 kubelet[2507]: E0906 01:22:31.717995 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.720299 kubelet[2507]: E0906 01:22:31.720077 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.720299 kubelet[2507]: W0906 01:22:31.720104 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.720299 kubelet[2507]: E0906 01:22:31.720178 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.720657 kubelet[2507]: E0906 01:22:31.720537 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.720657 kubelet[2507]: W0906 01:22:31.720551 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.720657 kubelet[2507]: E0906 01:22:31.720563 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.720938 kubelet[2507]: E0906 01:22:31.720825 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.720938 kubelet[2507]: W0906 01:22:31.720837 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.720938 kubelet[2507]: E0906 01:22:31.720848 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.721215 kubelet[2507]: E0906 01:22:31.721110 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.721215 kubelet[2507]: W0906 01:22:31.721133 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.721215 kubelet[2507]: E0906 01:22:31.721143 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.721469 kubelet[2507]: E0906 01:22:31.721368 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.721469 kubelet[2507]: W0906 01:22:31.721380 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.721469 kubelet[2507]: E0906 01:22:31.721389 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.721728 kubelet[2507]: E0906 01:22:31.721628 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.721728 kubelet[2507]: W0906 01:22:31.721639 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.721728 kubelet[2507]: E0906 01:22:31.721649 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.721984 kubelet[2507]: E0906 01:22:31.721875 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.721984 kubelet[2507]: W0906 01:22:31.721886 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.721984 kubelet[2507]: E0906 01:22:31.721895 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.722260 kubelet[2507]: E0906 01:22:31.722161 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.722260 kubelet[2507]: W0906 01:22:31.722175 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.722260 kubelet[2507]: E0906 01:22:31.722184 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.722503 kubelet[2507]: E0906 01:22:31.722413 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.722503 kubelet[2507]: W0906 01:22:31.722424 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.722503 kubelet[2507]: E0906 01:22:31.722434 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.722670 kubelet[2507]: E0906 01:22:31.722659 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.722730 kubelet[2507]: W0906 01:22:31.722719 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.722786 kubelet[2507]: E0906 01:22:31.722776 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.726355 kubelet[2507]: E0906 01:22:31.726328 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.726490 kubelet[2507]: W0906 01:22:31.726475 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.726583 kubelet[2507]: E0906 01:22:31.726571 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.726992 kubelet[2507]: E0906 01:22:31.726977 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.727093 kubelet[2507]: W0906 01:22:31.727071 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.727184 kubelet[2507]: E0906 01:22:31.727170 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.727523 kubelet[2507]: E0906 01:22:31.727501 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.727621 kubelet[2507]: W0906 01:22:31.727607 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.727689 kubelet[2507]: E0906 01:22:31.727677 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.729130 kubelet[2507]: E0906 01:22:31.729098 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.729242 kubelet[2507]: W0906 01:22:31.729228 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.729341 kubelet[2507]: E0906 01:22:31.729327 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.746449 kubelet[2507]: E0906 01:22:31.746409 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.746449 kubelet[2507]: W0906 01:22:31.746436 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.746628 kubelet[2507]: E0906 01:22:31.746458 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.746707 kubelet[2507]: E0906 01:22:31.746691 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.746707 kubelet[2507]: W0906 01:22:31.746704 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.746775 kubelet[2507]: E0906 01:22:31.746719 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.746964 kubelet[2507]: E0906 01:22:31.746943 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.746964 kubelet[2507]: W0906 01:22:31.746959 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.747045 kubelet[2507]: E0906 01:22:31.746975 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.747252 kubelet[2507]: E0906 01:22:31.747234 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.747252 kubelet[2507]: W0906 01:22:31.747248 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.747329 kubelet[2507]: E0906 01:22:31.747261 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.747482 kubelet[2507]: E0906 01:22:31.747463 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.747482 kubelet[2507]: W0906 01:22:31.747477 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.747561 kubelet[2507]: E0906 01:22:31.747492 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.747668 kubelet[2507]: E0906 01:22:31.747625 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.747668 kubelet[2507]: W0906 01:22:31.747639 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.747668 kubelet[2507]: E0906 01:22:31.747647 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.747874 kubelet[2507]: E0906 01:22:31.747859 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.747874 kubelet[2507]: W0906 01:22:31.747872 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.747957 kubelet[2507]: E0906 01:22:31.747939 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.748236 kubelet[2507]: E0906 01:22:31.748215 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.748236 kubelet[2507]: W0906 01:22:31.748231 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.748352 kubelet[2507]: E0906 01:22:31.748336 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.748551 kubelet[2507]: E0906 01:22:31.748531 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.748551 kubelet[2507]: W0906 01:22:31.748547 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.748635 kubelet[2507]: E0906 01:22:31.748621 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.748748 kubelet[2507]: E0906 01:22:31.748733 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.748748 kubelet[2507]: W0906 01:22:31.748746 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.748813 kubelet[2507]: E0906 01:22:31.748757 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.750274 kubelet[2507]: E0906 01:22:31.750240 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.750274 kubelet[2507]: W0906 01:22:31.750264 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.750404 kubelet[2507]: E0906 01:22:31.750287 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.750512 kubelet[2507]: E0906 01:22:31.750497 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.750512 kubelet[2507]: W0906 01:22:31.750509 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.750588 kubelet[2507]: E0906 01:22:31.750576 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.750758 kubelet[2507]: E0906 01:22:31.750741 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.750758 kubelet[2507]: W0906 01:22:31.750754 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.750833 kubelet[2507]: E0906 01:22:31.750767 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.750947 kubelet[2507]: E0906 01:22:31.750927 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.750947 kubelet[2507]: W0906 01:22:31.750940 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.751018 kubelet[2507]: E0906 01:22:31.750954 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.751202 kubelet[2507]: E0906 01:22:31.751186 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.751202 kubelet[2507]: W0906 01:22:31.751199 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.751279 kubelet[2507]: E0906 01:22:31.751212 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.751709 kubelet[2507]: E0906 01:22:31.751687 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.751709 kubelet[2507]: W0906 01:22:31.751704 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.751823 kubelet[2507]: E0906 01:22:31.751807 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.752026 kubelet[2507]: E0906 01:22:31.752007 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.752026 kubelet[2507]: W0906 01:22:31.752022 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.752103 kubelet[2507]: E0906 01:22:31.752033 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:31.752403 kubelet[2507]: E0906 01:22:31.752383 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:31.752403 kubelet[2507]: W0906 01:22:31.752400 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:31.752477 kubelet[2507]: E0906 01:22:31.752411 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.672157 kubelet[2507]: I0906 01:22:32.670572 2507 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-7bb4884d66-kp6zs" podStartSLOduration=2.732578454 podStartE2EDuration="4.670554915s" podCreationTimestamp="2025-09-06 01:22:28 +0000 UTC" firstStartedPulling="2025-09-06 01:22:29.525707017 +0000 UTC m=+24.105231219" lastFinishedPulling="2025-09-06 01:22:31.463683478 +0000 UTC m=+26.043207680" observedRunningTime="2025-09-06 01:22:31.665493389 +0000 UTC m=+26.245017591" watchObservedRunningTime="2025-09-06 01:22:32.670554915 +0000 UTC m=+27.250079117" Sep 6 01:22:32.695000 audit[3158]: NETFILTER_CFG table=filter:106 family=2 entries=21 op=nft_register_rule pid=3158 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:32.695000 audit[3158]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffd4246d80 a2=0 a3=1 items=0 ppid=2649 pid=3158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:32.695000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:32.699000 audit[3158]: NETFILTER_CFG table=nat:107 family=2 entries=19 op=nft_register_chain pid=3158 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:32.699000 audit[3158]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffd4246d80 a2=0 a3=1 items=0 ppid=2649 pid=3158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:32.699000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:32.730890 env[1474]: time="2025-09-06T01:22:32.730850298Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:32.735453 kubelet[2507]: E0906 01:22:32.735335 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.735453 kubelet[2507]: W0906 01:22:32.735357 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.735453 kubelet[2507]: E0906 01:22:32.735377 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.735785 kubelet[2507]: E0906 01:22:32.735682 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.735785 kubelet[2507]: W0906 01:22:32.735695 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.735785 kubelet[2507]: E0906 01:22:32.735705 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.736055 kubelet[2507]: E0906 01:22:32.735957 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.736055 kubelet[2507]: W0906 01:22:32.735972 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.736055 kubelet[2507]: E0906 01:22:32.735982 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.736335 kubelet[2507]: E0906 01:22:32.736234 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.736335 kubelet[2507]: W0906 01:22:32.736246 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.736335 kubelet[2507]: E0906 01:22:32.736256 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.736589 kubelet[2507]: E0906 01:22:32.736498 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.736589 kubelet[2507]: W0906 01:22:32.736509 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.736589 kubelet[2507]: E0906 01:22:32.736518 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.736829 kubelet[2507]: E0906 01:22:32.736742 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.736829 kubelet[2507]: W0906 01:22:32.736752 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.736829 kubelet[2507]: E0906 01:22:32.736761 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.737064 kubelet[2507]: E0906 01:22:32.736972 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.737064 kubelet[2507]: W0906 01:22:32.736983 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.737064 kubelet[2507]: E0906 01:22:32.736992 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.737356 kubelet[2507]: E0906 01:22:32.737251 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.737356 kubelet[2507]: W0906 01:22:32.737263 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.737356 kubelet[2507]: E0906 01:22:32.737272 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.737711 kubelet[2507]: E0906 01:22:32.737537 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.737711 kubelet[2507]: W0906 01:22:32.737550 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.737711 kubelet[2507]: E0906 01:22:32.737560 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.737995 kubelet[2507]: E0906 01:22:32.737898 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.737995 kubelet[2507]: W0906 01:22:32.737910 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.737995 kubelet[2507]: E0906 01:22:32.737920 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.738273 kubelet[2507]: E0906 01:22:32.738174 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.738273 kubelet[2507]: W0906 01:22:32.738185 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.738273 kubelet[2507]: E0906 01:22:32.738195 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.738528 kubelet[2507]: E0906 01:22:32.738431 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.738528 kubelet[2507]: W0906 01:22:32.738442 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.738528 kubelet[2507]: E0906 01:22:32.738451 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.738696 kubelet[2507]: E0906 01:22:32.738684 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.738758 kubelet[2507]: W0906 01:22:32.738746 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.738819 kubelet[2507]: E0906 01:22:32.738808 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.739092 kubelet[2507]: E0906 01:22:32.739078 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.739204 kubelet[2507]: W0906 01:22:32.739190 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.739270 kubelet[2507]: E0906 01:22:32.739257 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.739486 kubelet[2507]: E0906 01:22:32.739473 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.739560 kubelet[2507]: W0906 01:22:32.739548 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.739619 kubelet[2507]: E0906 01:22:32.739608 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.751885 kubelet[2507]: E0906 01:22:32.751855 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.751885 kubelet[2507]: W0906 01:22:32.751878 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.752043 kubelet[2507]: E0906 01:22:32.751896 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.752139 kubelet[2507]: E0906 01:22:32.752110 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.752139 kubelet[2507]: W0906 01:22:32.752137 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.752235 kubelet[2507]: E0906 01:22:32.752150 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.752445 kubelet[2507]: E0906 01:22:32.752427 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.752445 kubelet[2507]: W0906 01:22:32.752443 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.752445 kubelet[2507]: E0906 01:22:32.752454 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.752684 kubelet[2507]: E0906 01:22:32.752649 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.752684 kubelet[2507]: W0906 01:22:32.752672 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.752684 kubelet[2507]: E0906 01:22:32.752683 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.752922 kubelet[2507]: E0906 01:22:32.752904 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.752922 kubelet[2507]: W0906 01:22:32.752919 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.753001 kubelet[2507]: E0906 01:22:32.752933 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.753086 kubelet[2507]: E0906 01:22:32.753072 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.753086 kubelet[2507]: W0906 01:22:32.753084 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.753192 kubelet[2507]: E0906 01:22:32.753172 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.753362 kubelet[2507]: E0906 01:22:32.753345 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.753362 kubelet[2507]: W0906 01:22:32.753358 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.753475 kubelet[2507]: E0906 01:22:32.753460 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.753544 kubelet[2507]: E0906 01:22:32.753502 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.753605 kubelet[2507]: W0906 01:22:32.753593 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.753719 kubelet[2507]: E0906 01:22:32.753698 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.753947 kubelet[2507]: E0906 01:22:32.753933 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.754027 kubelet[2507]: W0906 01:22:32.754016 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.754102 kubelet[2507]: E0906 01:22:32.754090 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.754304 kubelet[2507]: E0906 01:22:32.754285 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.754354 kubelet[2507]: W0906 01:22:32.754326 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.754354 kubelet[2507]: E0906 01:22:32.754340 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.754624 kubelet[2507]: E0906 01:22:32.754606 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.754624 kubelet[2507]: W0906 01:22:32.754622 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.754727 kubelet[2507]: E0906 01:22:32.754635 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.754846 kubelet[2507]: E0906 01:22:32.754826 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.754888 kubelet[2507]: W0906 01:22:32.754845 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.754888 kubelet[2507]: E0906 01:22:32.754862 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.755235 kubelet[2507]: E0906 01:22:32.755218 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.755330 kubelet[2507]: W0906 01:22:32.755316 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.755401 kubelet[2507]: E0906 01:22:32.755389 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.755640 kubelet[2507]: E0906 01:22:32.755620 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.755640 kubelet[2507]: W0906 01:22:32.755636 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.755727 kubelet[2507]: E0906 01:22:32.755653 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.755805 kubelet[2507]: E0906 01:22:32.755790 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.755805 kubelet[2507]: W0906 01:22:32.755804 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.755877 kubelet[2507]: E0906 01:22:32.755816 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.756037 kubelet[2507]: E0906 01:22:32.756019 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.756037 kubelet[2507]: W0906 01:22:32.756033 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.756111 kubelet[2507]: E0906 01:22:32.756048 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.756374 kubelet[2507]: E0906 01:22:32.756358 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.756458 kubelet[2507]: W0906 01:22:32.756445 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.756534 kubelet[2507]: E0906 01:22:32.756522 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.756768 kubelet[2507]: E0906 01:22:32.756750 2507 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:32.756768 kubelet[2507]: W0906 01:22:32.756766 2507 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:32.756844 kubelet[2507]: E0906 01:22:32.756777 2507 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:32.774454 env[1474]: time="2025-09-06T01:22:32.774375092Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:29e6f31ad72882b1b817dd257df6b7981e4d7d31d872b7fe2cf102c6e2af27a5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:32.783045 env[1474]: time="2025-09-06T01:22:32.783005787Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:32.794630 env[1474]: time="2025-09-06T01:22:32.794589567Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:81bdfcd9dbd36624dc35354e8c181c75631ba40e6c7df5820f5f56cea36f0ef9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:32.795454 env[1474]: time="2025-09-06T01:22:32.795422488Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\" returns image reference \"sha256:29e6f31ad72882b1b817dd257df6b7981e4d7d31d872b7fe2cf102c6e2af27a5\"" Sep 6 01:22:32.799141 env[1474]: time="2025-09-06T01:22:32.798989935Z" level=info msg="CreateContainer within sandbox \"0beb9a016e2ccf3dd1c0868332e5ffdd0a44e5a9582867567224c5f2abf6082c\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Sep 6 01:22:32.850694 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1125450237.mount: Deactivated successfully. Sep 6 01:22:32.878014 env[1474]: time="2025-09-06T01:22:32.877946309Z" level=info msg="CreateContainer within sandbox \"0beb9a016e2ccf3dd1c0868332e5ffdd0a44e5a9582867567224c5f2abf6082c\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"4461ba7d60d9fd346ccbe84f3a3f5c11756799e3a2dd9aeb0bcf896fa111954d\"" Sep 6 01:22:32.880540 env[1474]: time="2025-09-06T01:22:32.880504994Z" level=info msg="StartContainer for \"4461ba7d60d9fd346ccbe84f3a3f5c11756799e3a2dd9aeb0bcf896fa111954d\"" Sep 6 01:22:32.905555 systemd[1]: Started cri-containerd-4461ba7d60d9fd346ccbe84f3a3f5c11756799e3a2dd9aeb0bcf896fa111954d.scope. Sep 6 01:22:32.918000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:32.918000 audit[3200]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3044 pid=3200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:32.918000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434363162613764363064396664333436636362653834663361336635 Sep 6 01:22:32.918000 audit[3200]: AVC avc: denied { bpf } for pid=3200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:32.918000 audit[3200]: AVC avc: denied { bpf } for pid=3200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:32.918000 audit[3200]: AVC avc: denied { bpf } for pid=3200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:32.918000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:32.918000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:32.918000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:32.918000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:32.918000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:32.918000 audit[3200]: AVC avc: denied { bpf } for pid=3200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:32.918000 audit[3200]: AVC avc: denied { bpf } for pid=3200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:32.918000 audit: BPF prog-id=135 op=LOAD Sep 6 01:22:32.918000 audit[3200]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3044 pid=3200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:32.918000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434363162613764363064396664333436636362653834663361336635 Sep 6 01:22:32.918000 audit[3200]: AVC avc: denied { bpf } for pid=3200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:32.918000 audit[3200]: AVC avc: denied { bpf } for pid=3200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:32.918000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:32.918000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:32.918000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:32.918000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:32.918000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:32.918000 audit[3200]: AVC avc: denied { bpf } for pid=3200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:32.918000 audit[3200]: AVC avc: denied { bpf } for pid=3200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:32.918000 audit: BPF prog-id=136 op=LOAD Sep 6 01:22:32.918000 audit[3200]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3044 pid=3200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:32.918000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434363162613764363064396664333436636362653834663361336635 Sep 6 01:22:32.918000 audit: BPF prog-id=136 op=UNLOAD Sep 6 01:22:32.918000 audit: BPF prog-id=135 op=UNLOAD Sep 6 01:22:32.918000 audit[3200]: AVC avc: denied { bpf } for pid=3200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:32.918000 audit[3200]: AVC avc: denied { bpf } for pid=3200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:32.918000 audit[3200]: AVC avc: denied { bpf } for pid=3200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:32.918000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:32.918000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:32.918000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:32.918000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:32.918000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:32.918000 audit[3200]: AVC avc: denied { bpf } for pid=3200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:32.918000 audit[3200]: AVC avc: denied { bpf } for pid=3200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:32.918000 audit: BPF prog-id=137 op=LOAD Sep 6 01:22:32.918000 audit[3200]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3044 pid=3200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:32.918000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434363162613764363064396664333436636362653834663361336635 Sep 6 01:22:32.945358 env[1474]: time="2025-09-06T01:22:32.945198704Z" level=info msg="StartContainer for \"4461ba7d60d9fd346ccbe84f3a3f5c11756799e3a2dd9aeb0bcf896fa111954d\" returns successfully" Sep 6 01:22:32.956030 systemd[1]: cri-containerd-4461ba7d60d9fd346ccbe84f3a3f5c11756799e3a2dd9aeb0bcf896fa111954d.scope: Deactivated successfully. Sep 6 01:22:32.958000 audit: BPF prog-id=137 op=UNLOAD Sep 6 01:22:33.468735 systemd[1]: run-containerd-runc-k8s.io-4461ba7d60d9fd346ccbe84f3a3f5c11756799e3a2dd9aeb0bcf896fa111954d-runc.6G9WUD.mount: Deactivated successfully. Sep 6 01:22:33.468819 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4461ba7d60d9fd346ccbe84f3a3f5c11756799e3a2dd9aeb0bcf896fa111954d-rootfs.mount: Deactivated successfully. Sep 6 01:22:33.525327 env[1474]: time="2025-09-06T01:22:33.525285281Z" level=info msg="shim disconnected" id=4461ba7d60d9fd346ccbe84f3a3f5c11756799e3a2dd9aeb0bcf896fa111954d Sep 6 01:22:33.525541 env[1474]: time="2025-09-06T01:22:33.525522722Z" level=warning msg="cleaning up after shim disconnected" id=4461ba7d60d9fd346ccbe84f3a3f5c11756799e3a2dd9aeb0bcf896fa111954d namespace=k8s.io Sep 6 01:22:33.525602 env[1474]: time="2025-09-06T01:22:33.525590322Z" level=info msg="cleaning up dead shim" Sep 6 01:22:33.533267 env[1474]: time="2025-09-06T01:22:33.533225055Z" level=warning msg="cleanup warnings time=\"2025-09-06T01:22:33Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3240 runtime=io.containerd.runc.v2\n" Sep 6 01:22:33.536142 kubelet[2507]: E0906 01:22:33.536010 2507 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-m9tfk" podUID="04a7e183-4c51-4aa6-b31d-7efe6ca81746" Sep 6 01:22:33.653425 env[1474]: time="2025-09-06T01:22:33.653374337Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\"" Sep 6 01:22:35.536666 kubelet[2507]: E0906 01:22:35.536623 2507 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-m9tfk" podUID="04a7e183-4c51-4aa6-b31d-7efe6ca81746" Sep 6 01:22:36.580088 env[1474]: time="2025-09-06T01:22:36.580037697Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:36.590980 env[1474]: time="2025-09-06T01:22:36.590940754Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7077a1dc632ee598cbfa626f9e3c9bca5b20c0d1e1e557995890125b2e8d2e23,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:36.600335 env[1474]: time="2025-09-06T01:22:36.600290969Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:36.605654 env[1474]: time="2025-09-06T01:22:36.605616058Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:73d1e391050490d54e5bee8ff2b1a50a8be1746c98dc530361b00e8c0ab63f87,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:36.606335 env[1474]: time="2025-09-06T01:22:36.606304059Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\" returns image reference \"sha256:7077a1dc632ee598cbfa626f9e3c9bca5b20c0d1e1e557995890125b2e8d2e23\"" Sep 6 01:22:36.609170 env[1474]: time="2025-09-06T01:22:36.609132784Z" level=info msg="CreateContainer within sandbox \"0beb9a016e2ccf3dd1c0868332e5ffdd0a44e5a9582867567224c5f2abf6082c\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Sep 6 01:22:36.645487 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2593780673.mount: Deactivated successfully. Sep 6 01:22:36.667479 env[1474]: time="2025-09-06T01:22:36.667431117Z" level=info msg="CreateContainer within sandbox \"0beb9a016e2ccf3dd1c0868332e5ffdd0a44e5a9582867567224c5f2abf6082c\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"ce37d36283ee1757d7d17c0b60f1c9ee7d6280d66aa099c33cb7af31d8bf31af\"" Sep 6 01:22:36.668459 env[1474]: time="2025-09-06T01:22:36.668419759Z" level=info msg="StartContainer for \"ce37d36283ee1757d7d17c0b60f1c9ee7d6280d66aa099c33cb7af31d8bf31af\"" Sep 6 01:22:36.694553 systemd[1]: Started cri-containerd-ce37d36283ee1757d7d17c0b60f1c9ee7d6280d66aa099c33cb7af31d8bf31af.scope. Sep 6 01:22:36.732732 kernel: kauditd_printk_skb: 229 callbacks suppressed Sep 6 01:22:36.733920 kernel: audit: type=1400 audit(1757121756.707:1045): avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.734030 kernel: audit: type=1300 audit(1757121756.707:1045): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3044 pid=3266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.707000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.707000 audit[3266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3044 pid=3266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.707000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365333764333632383365653137353764376431376330623630663163 Sep 6 01:22:36.708000 audit[3266]: AVC avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.787233 kernel: audit: type=1327 audit(1757121756.707:1045): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365333764333632383365653137353764376431376330623630663163 Sep 6 01:22:36.816158 kernel: audit: type=1400 audit(1757121756.708:1046): avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.816277 kernel: audit: type=1400 audit(1757121756.708:1046): avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.708000 audit[3266]: AVC avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.708000 audit[3266]: AVC avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.850311 kernel: audit: type=1400 audit(1757121756.708:1046): avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.708000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.870155 kernel: audit: type=1400 audit(1757121756.708:1046): avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.708000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.891555 kernel: audit: type=1400 audit(1757121756.708:1046): avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.892601 kernel: audit: type=1400 audit(1757121756.708:1046): avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.708000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.912751 env[1474]: time="2025-09-06T01:22:36.912671671Z" level=info msg="StartContainer for \"ce37d36283ee1757d7d17c0b60f1c9ee7d6280d66aa099c33cb7af31d8bf31af\" returns successfully" Sep 6 01:22:36.708000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.931165 kernel: audit: type=1400 audit(1757121756.708:1046): avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.708000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.708000 audit[3266]: AVC avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.708000 audit[3266]: AVC avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.708000 audit: BPF prog-id=138 op=LOAD Sep 6 01:22:36.708000 audit[3266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3044 pid=3266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.708000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365333764333632383365653137353764376431376330623630663163 Sep 6 01:22:36.713000 audit[3266]: AVC avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.713000 audit[3266]: AVC avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.713000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.713000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.713000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.713000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.713000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.713000 audit[3266]: AVC avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.713000 audit[3266]: AVC avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.713000 audit: BPF prog-id=139 op=LOAD Sep 6 01:22:36.713000 audit[3266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3044 pid=3266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.713000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365333764333632383365653137353764376431376330623630663163 Sep 6 01:22:36.733000 audit: BPF prog-id=139 op=UNLOAD Sep 6 01:22:36.733000 audit: BPF prog-id=138 op=UNLOAD Sep 6 01:22:36.733000 audit[3266]: AVC avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.733000 audit[3266]: AVC avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.733000 audit[3266]: AVC avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.733000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.733000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.733000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.733000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.733000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.733000 audit[3266]: AVC avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.733000 audit[3266]: AVC avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.733000 audit: BPF prog-id=140 op=LOAD Sep 6 01:22:36.733000 audit[3266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3044 pid=3266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.733000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365333764333632383365653137353764376431376330623630663163 Sep 6 01:22:37.536457 kubelet[2507]: E0906 01:22:37.536400 2507 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-m9tfk" podUID="04a7e183-4c51-4aa6-b31d-7efe6ca81746" Sep 6 01:22:37.643062 systemd[1]: run-containerd-runc-k8s.io-ce37d36283ee1757d7d17c0b60f1c9ee7d6280d66aa099c33cb7af31d8bf31af-runc.sqwGL6.mount: Deactivated successfully. Sep 6 01:22:38.115737 env[1474]: time="2025-09-06T01:22:38.115660214Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 6 01:22:38.118298 systemd[1]: cri-containerd-ce37d36283ee1757d7d17c0b60f1c9ee7d6280d66aa099c33cb7af31d8bf31af.scope: Deactivated successfully. Sep 6 01:22:38.121000 audit: BPF prog-id=140 op=UNLOAD Sep 6 01:22:38.138859 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ce37d36283ee1757d7d17c0b60f1c9ee7d6280d66aa099c33cb7af31d8bf31af-rootfs.mount: Deactivated successfully. Sep 6 01:22:38.143655 kubelet[2507]: I0906 01:22:38.143404 2507 kubelet_node_status.go:488] "Fast updating node status as it just became ready" Sep 6 01:22:38.192263 systemd[1]: Created slice kubepods-burstable-pod4639beed_680f_4604_a20a_d9cafa08e5ea.slice. Sep 6 01:22:38.206901 systemd[1]: Created slice kubepods-burstable-pode7b9d8f2_69b8_4c82_be6b_f97e78bfa002.slice. Sep 6 01:22:38.616868 kubelet[2507]: I0906 01:22:38.287382 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ttsct\" (UniqueName: \"kubernetes.io/projected/d17efce8-fa93-4bdb-81af-efc70b288052-kube-api-access-ttsct\") pod \"calico-apiserver-64697d84fd-9hmdg\" (UID: \"d17efce8-fa93-4bdb-81af-efc70b288052\") " pod="calico-apiserver/calico-apiserver-64697d84fd-9hmdg" Sep 6 01:22:38.616868 kubelet[2507]: I0906 01:22:38.287421 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6lph6\" (UniqueName: \"kubernetes.io/projected/173204e3-49e1-4a48-a5e0-d8016e50ca28-kube-api-access-6lph6\") pod \"goldmane-7988f88666-xjt8j\" (UID: \"173204e3-49e1-4a48-a5e0-d8016e50ca28\") " pod="calico-system/goldmane-7988f88666-xjt8j" Sep 6 01:22:38.616868 kubelet[2507]: I0906 01:22:38.287441 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/37035637-3da4-419c-9970-0103d9f2a7f3-calico-apiserver-certs\") pod \"calico-apiserver-64697d84fd-sjx99\" (UID: \"37035637-3da4-419c-9970-0103d9f2a7f3\") " pod="calico-apiserver/calico-apiserver-64697d84fd-sjx99" Sep 6 01:22:38.616868 kubelet[2507]: I0906 01:22:38.287459 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/173204e3-49e1-4a48-a5e0-d8016e50ca28-goldmane-ca-bundle\") pod \"goldmane-7988f88666-xjt8j\" (UID: \"173204e3-49e1-4a48-a5e0-d8016e50ca28\") " pod="calico-system/goldmane-7988f88666-xjt8j" Sep 6 01:22:38.616868 kubelet[2507]: I0906 01:22:38.287474 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/173204e3-49e1-4a48-a5e0-d8016e50ca28-goldmane-key-pair\") pod \"goldmane-7988f88666-xjt8j\" (UID: \"173204e3-49e1-4a48-a5e0-d8016e50ca28\") " pod="calico-system/goldmane-7988f88666-xjt8j" Sep 6 01:22:38.212978 systemd[1]: Created slice kubepods-besteffort-pod124eeee7_5ce0_48f1_a731_7543dcb4a9e4.slice. Sep 6 01:22:38.617459 kubelet[2507]: I0906 01:22:38.287492 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/d8ba8d28-dc95-4133-afdd-c6fcfa29ca05-whisker-backend-key-pair\") pod \"whisker-5dfb6f899c-9sb29\" (UID: \"d8ba8d28-dc95-4133-afdd-c6fcfa29ca05\") " pod="calico-system/whisker-5dfb6f899c-9sb29" Sep 6 01:22:38.617459 kubelet[2507]: I0906 01:22:38.287507 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2cfgf\" (UniqueName: \"kubernetes.io/projected/d8ba8d28-dc95-4133-afdd-c6fcfa29ca05-kube-api-access-2cfgf\") pod \"whisker-5dfb6f899c-9sb29\" (UID: \"d8ba8d28-dc95-4133-afdd-c6fcfa29ca05\") " pod="calico-system/whisker-5dfb6f899c-9sb29" Sep 6 01:22:38.617459 kubelet[2507]: I0906 01:22:38.287523 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/124eeee7-5ce0-48f1-a731-7543dcb4a9e4-tigera-ca-bundle\") pod \"calico-kube-controllers-7748ff464c-46pw5\" (UID: \"124eeee7-5ce0-48f1-a731-7543dcb4a9e4\") " pod="calico-system/calico-kube-controllers-7748ff464c-46pw5" Sep 6 01:22:38.617459 kubelet[2507]: I0906 01:22:38.287538 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-c2bdp\" (UniqueName: \"kubernetes.io/projected/e7b9d8f2-69b8-4c82-be6b-f97e78bfa002-kube-api-access-c2bdp\") pod \"coredns-7c65d6cfc9-dk7np\" (UID: \"e7b9d8f2-69b8-4c82-be6b-f97e78bfa002\") " pod="kube-system/coredns-7c65d6cfc9-dk7np" Sep 6 01:22:38.617459 kubelet[2507]: I0906 01:22:38.287559 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vfw8s\" (UniqueName: \"kubernetes.io/projected/37035637-3da4-419c-9970-0103d9f2a7f3-kube-api-access-vfw8s\") pod \"calico-apiserver-64697d84fd-sjx99\" (UID: \"37035637-3da4-419c-9970-0103d9f2a7f3\") " pod="calico-apiserver/calico-apiserver-64697d84fd-sjx99" Sep 6 01:22:38.226385 systemd[1]: Created slice kubepods-besteffort-pod173204e3_49e1_4a48_a5e0_d8016e50ca28.slice. Sep 6 01:22:38.617770 kubelet[2507]: I0906 01:22:38.287575 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d8ba8d28-dc95-4133-afdd-c6fcfa29ca05-whisker-ca-bundle\") pod \"whisker-5dfb6f899c-9sb29\" (UID: \"d8ba8d28-dc95-4133-afdd-c6fcfa29ca05\") " pod="calico-system/whisker-5dfb6f899c-9sb29" Sep 6 01:22:38.617770 kubelet[2507]: I0906 01:22:38.287591 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/4639beed-680f-4604-a20a-d9cafa08e5ea-config-volume\") pod \"coredns-7c65d6cfc9-zsbc4\" (UID: \"4639beed-680f-4604-a20a-d9cafa08e5ea\") " pod="kube-system/coredns-7c65d6cfc9-zsbc4" Sep 6 01:22:38.617770 kubelet[2507]: I0906 01:22:38.287638 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-88hvr\" (UniqueName: \"kubernetes.io/projected/124eeee7-5ce0-48f1-a731-7543dcb4a9e4-kube-api-access-88hvr\") pod \"calico-kube-controllers-7748ff464c-46pw5\" (UID: \"124eeee7-5ce0-48f1-a731-7543dcb4a9e4\") " pod="calico-system/calico-kube-controllers-7748ff464c-46pw5" Sep 6 01:22:38.617770 kubelet[2507]: I0906 01:22:38.287695 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rt4rd\" (UniqueName: \"kubernetes.io/projected/4639beed-680f-4604-a20a-d9cafa08e5ea-kube-api-access-rt4rd\") pod \"coredns-7c65d6cfc9-zsbc4\" (UID: \"4639beed-680f-4604-a20a-d9cafa08e5ea\") " pod="kube-system/coredns-7c65d6cfc9-zsbc4" Sep 6 01:22:38.617770 kubelet[2507]: I0906 01:22:38.287715 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/173204e3-49e1-4a48-a5e0-d8016e50ca28-config\") pod \"goldmane-7988f88666-xjt8j\" (UID: \"173204e3-49e1-4a48-a5e0-d8016e50ca28\") " pod="calico-system/goldmane-7988f88666-xjt8j" Sep 6 01:22:38.231283 systemd[1]: Created slice kubepods-besteffort-pod37035637_3da4_419c_9970_0103d9f2a7f3.slice. Sep 6 01:22:38.618001 kubelet[2507]: I0906 01:22:38.287755 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/e7b9d8f2-69b8-4c82-be6b-f97e78bfa002-config-volume\") pod \"coredns-7c65d6cfc9-dk7np\" (UID: \"e7b9d8f2-69b8-4c82-be6b-f97e78bfa002\") " pod="kube-system/coredns-7c65d6cfc9-dk7np" Sep 6 01:22:38.618001 kubelet[2507]: I0906 01:22:38.287776 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/d17efce8-fa93-4bdb-81af-efc70b288052-calico-apiserver-certs\") pod \"calico-apiserver-64697d84fd-9hmdg\" (UID: \"d17efce8-fa93-4bdb-81af-efc70b288052\") " pod="calico-apiserver/calico-apiserver-64697d84fd-9hmdg" Sep 6 01:22:38.240882 systemd[1]: Created slice kubepods-besteffort-podd17efce8_fa93_4bdb_81af_efc70b288052.slice. Sep 6 01:22:38.248476 systemd[1]: Created slice kubepods-besteffort-podd8ba8d28_dc95_4133_afdd_c6fcfa29ca05.slice. Sep 6 01:22:38.650823 env[1474]: time="2025-09-06T01:22:38.650415407Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7748ff464c-46pw5,Uid:124eeee7-5ce0-48f1-a731-7543dcb4a9e4,Namespace:calico-system,Attempt:0,}" Sep 6 01:22:38.918092 env[1474]: time="2025-09-06T01:22:38.917824424Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-zsbc4,Uid:4639beed-680f-4604-a20a-d9cafa08e5ea,Namespace:kube-system,Attempt:0,}" Sep 6 01:22:38.925215 env[1474]: time="2025-09-06T01:22:38.925168676Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-7988f88666-xjt8j,Uid:173204e3-49e1-4a48-a5e0-d8016e50ca28,Namespace:calico-system,Attempt:0,}" Sep 6 01:22:38.925433 env[1474]: time="2025-09-06T01:22:38.925168796Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-dk7np,Uid:e7b9d8f2-69b8-4c82-be6b-f97e78bfa002,Namespace:kube-system,Attempt:0,}" Sep 6 01:22:38.950635 env[1474]: time="2025-09-06T01:22:38.950376715Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5dfb6f899c-9sb29,Uid:d8ba8d28-dc95-4133-afdd-c6fcfa29ca05,Namespace:calico-system,Attempt:0,}" Sep 6 01:22:38.950635 env[1474]: time="2025-09-06T01:22:38.950486595Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64697d84fd-sjx99,Uid:37035637-3da4-419c-9970-0103d9f2a7f3,Namespace:calico-apiserver,Attempt:0,}" Sep 6 01:22:38.950842 env[1474]: time="2025-09-06T01:22:38.950783036Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64697d84fd-9hmdg,Uid:d17efce8-fa93-4bdb-81af-efc70b288052,Namespace:calico-apiserver,Attempt:0,}" Sep 6 01:22:39.040425 env[1474]: time="2025-09-06T01:22:39.040373615Z" level=info msg="shim disconnected" id=ce37d36283ee1757d7d17c0b60f1c9ee7d6280d66aa099c33cb7af31d8bf31af Sep 6 01:22:39.040425 env[1474]: time="2025-09-06T01:22:39.040418975Z" level=warning msg="cleaning up after shim disconnected" id=ce37d36283ee1757d7d17c0b60f1c9ee7d6280d66aa099c33cb7af31d8bf31af namespace=k8s.io Sep 6 01:22:39.040425 env[1474]: time="2025-09-06T01:22:39.040428495Z" level=info msg="cleaning up dead shim" Sep 6 01:22:39.048432 env[1474]: time="2025-09-06T01:22:39.048365187Z" level=warning msg="cleanup warnings time=\"2025-09-06T01:22:39Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3338 runtime=io.containerd.runc.v2\n" Sep 6 01:22:39.407258 env[1474]: time="2025-09-06T01:22:39.407186818Z" level=error msg="Failed to destroy network for sandbox \"a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.407919 env[1474]: time="2025-09-06T01:22:39.407885179Z" level=error msg="encountered an error cleaning up failed sandbox \"a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.408081 env[1474]: time="2025-09-06T01:22:39.408027220Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7748ff464c-46pw5,Uid:124eeee7-5ce0-48f1-a731-7543dcb4a9e4,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.408452 kubelet[2507]: E0906 01:22:39.408406 2507 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.408550 kubelet[2507]: E0906 01:22:39.408479 2507 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7748ff464c-46pw5" Sep 6 01:22:39.408550 kubelet[2507]: E0906 01:22:39.408500 2507 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7748ff464c-46pw5" Sep 6 01:22:39.408613 kubelet[2507]: E0906 01:22:39.408548 2507 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-7748ff464c-46pw5_calico-system(124eeee7-5ce0-48f1-a731-7543dcb4a9e4)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-7748ff464c-46pw5_calico-system(124eeee7-5ce0-48f1-a731-7543dcb4a9e4)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7748ff464c-46pw5" podUID="124eeee7-5ce0-48f1-a731-7543dcb4a9e4" Sep 6 01:22:39.501773 env[1474]: time="2025-09-06T01:22:39.501699484Z" level=error msg="Failed to destroy network for sandbox \"49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.502128 env[1474]: time="2025-09-06T01:22:39.502074444Z" level=error msg="encountered an error cleaning up failed sandbox \"49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.502222 env[1474]: time="2025-09-06T01:22:39.502190964Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-zsbc4,Uid:4639beed-680f-4604-a20a-d9cafa08e5ea,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.502608 kubelet[2507]: E0906 01:22:39.502433 2507 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.502608 kubelet[2507]: E0906 01:22:39.502500 2507 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-zsbc4" Sep 6 01:22:39.502608 kubelet[2507]: E0906 01:22:39.502519 2507 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-zsbc4" Sep 6 01:22:39.504143 kubelet[2507]: E0906 01:22:39.502570 2507 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-zsbc4_kube-system(4639beed-680f-4604-a20a-d9cafa08e5ea)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-zsbc4_kube-system(4639beed-680f-4604-a20a-d9cafa08e5ea)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-zsbc4" podUID="4639beed-680f-4604-a20a-d9cafa08e5ea" Sep 6 01:22:39.541203 systemd[1]: Created slice kubepods-besteffort-pod04a7e183_4c51_4aa6_b31d_7efe6ca81746.slice. Sep 6 01:22:39.544320 env[1474]: time="2025-09-06T01:22:39.539598782Z" level=error msg="Failed to destroy network for sandbox \"ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.544967 env[1474]: time="2025-09-06T01:22:39.544920070Z" level=error msg="encountered an error cleaning up failed sandbox \"ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.545147 env[1474]: time="2025-09-06T01:22:39.545088350Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-7988f88666-xjt8j,Uid:173204e3-49e1-4a48-a5e0-d8016e50ca28,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.545300 env[1474]: time="2025-09-06T01:22:39.544586430Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-m9tfk,Uid:04a7e183-4c51-4aa6-b31d-7efe6ca81746,Namespace:calico-system,Attempt:0,}" Sep 6 01:22:39.545980 kubelet[2507]: E0906 01:22:39.545939 2507 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.546074 kubelet[2507]: E0906 01:22:39.546001 2507 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-7988f88666-xjt8j" Sep 6 01:22:39.546074 kubelet[2507]: E0906 01:22:39.546020 2507 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-7988f88666-xjt8j" Sep 6 01:22:39.546074 kubelet[2507]: E0906 01:22:39.546055 2507 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-7988f88666-xjt8j_calico-system(173204e3-49e1-4a48-a5e0-d8016e50ca28)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-7988f88666-xjt8j_calico-system(173204e3-49e1-4a48-a5e0-d8016e50ca28)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-7988f88666-xjt8j" podUID="173204e3-49e1-4a48-a5e0-d8016e50ca28" Sep 6 01:22:39.564283 env[1474]: time="2025-09-06T01:22:39.564219980Z" level=error msg="Failed to destroy network for sandbox \"7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.564608 env[1474]: time="2025-09-06T01:22:39.564568540Z" level=error msg="encountered an error cleaning up failed sandbox \"7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.564670 env[1474]: time="2025-09-06T01:22:39.564624900Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5dfb6f899c-9sb29,Uid:d8ba8d28-dc95-4133-afdd-c6fcfa29ca05,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.565204 kubelet[2507]: E0906 01:22:39.565158 2507 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.565306 kubelet[2507]: E0906 01:22:39.565216 2507 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-5dfb6f899c-9sb29" Sep 6 01:22:39.565306 kubelet[2507]: E0906 01:22:39.565236 2507 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-5dfb6f899c-9sb29" Sep 6 01:22:39.565306 kubelet[2507]: E0906 01:22:39.565276 2507 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-5dfb6f899c-9sb29_calico-system(d8ba8d28-dc95-4133-afdd-c6fcfa29ca05)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-5dfb6f899c-9sb29_calico-system(d8ba8d28-dc95-4133-afdd-c6fcfa29ca05)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-5dfb6f899c-9sb29" podUID="d8ba8d28-dc95-4133-afdd-c6fcfa29ca05" Sep 6 01:22:39.585851 env[1474]: time="2025-09-06T01:22:39.585783693Z" level=error msg="Failed to destroy network for sandbox \"2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.586328 env[1474]: time="2025-09-06T01:22:39.586287094Z" level=error msg="encountered an error cleaning up failed sandbox \"2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.586390 env[1474]: time="2025-09-06T01:22:39.586348814Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-dk7np,Uid:e7b9d8f2-69b8-4c82-be6b-f97e78bfa002,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.588596 kubelet[2507]: E0906 01:22:39.586585 2507 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.588596 kubelet[2507]: E0906 01:22:39.586675 2507 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-dk7np" Sep 6 01:22:39.588596 kubelet[2507]: E0906 01:22:39.586692 2507 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-dk7np" Sep 6 01:22:39.588908 kubelet[2507]: E0906 01:22:39.586774 2507 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-dk7np_kube-system(e7b9d8f2-69b8-4c82-be6b-f97e78bfa002)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-dk7np_kube-system(e7b9d8f2-69b8-4c82-be6b-f97e78bfa002)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-dk7np" podUID="e7b9d8f2-69b8-4c82-be6b-f97e78bfa002" Sep 6 01:22:39.599731 env[1474]: time="2025-09-06T01:22:39.599662314Z" level=error msg="Failed to destroy network for sandbox \"210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.600096 env[1474]: time="2025-09-06T01:22:39.600054675Z" level=error msg="encountered an error cleaning up failed sandbox \"210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.600217 env[1474]: time="2025-09-06T01:22:39.600186675Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64697d84fd-sjx99,Uid:37035637-3da4-419c-9970-0103d9f2a7f3,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.601738 kubelet[2507]: E0906 01:22:39.600436 2507 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.601738 kubelet[2507]: E0906 01:22:39.600504 2507 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-64697d84fd-sjx99" Sep 6 01:22:39.601738 kubelet[2507]: E0906 01:22:39.600524 2507 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-64697d84fd-sjx99" Sep 6 01:22:39.601988 kubelet[2507]: E0906 01:22:39.600576 2507 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-64697d84fd-sjx99_calico-apiserver(37035637-3da4-419c-9970-0103d9f2a7f3)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-64697d84fd-sjx99_calico-apiserver(37035637-3da4-419c-9970-0103d9f2a7f3)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-64697d84fd-sjx99" podUID="37035637-3da4-419c-9970-0103d9f2a7f3" Sep 6 01:22:39.616267 env[1474]: time="2025-09-06T01:22:39.616206460Z" level=error msg="Failed to destroy network for sandbox \"9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.616791 env[1474]: time="2025-09-06T01:22:39.616755540Z" level=error msg="encountered an error cleaning up failed sandbox \"9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.616929 env[1474]: time="2025-09-06T01:22:39.616901261Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64697d84fd-9hmdg,Uid:d17efce8-fa93-4bdb-81af-efc70b288052,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.618978 kubelet[2507]: E0906 01:22:39.617287 2507 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.618978 kubelet[2507]: E0906 01:22:39.617353 2507 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-64697d84fd-9hmdg" Sep 6 01:22:39.618978 kubelet[2507]: E0906 01:22:39.617376 2507 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-64697d84fd-9hmdg" Sep 6 01:22:39.619438 kubelet[2507]: E0906 01:22:39.617427 2507 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-64697d84fd-9hmdg_calico-apiserver(d17efce8-fa93-4bdb-81af-efc70b288052)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-64697d84fd-9hmdg_calico-apiserver(d17efce8-fa93-4bdb-81af-efc70b288052)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-64697d84fd-9hmdg" podUID="d17efce8-fa93-4bdb-81af-efc70b288052" Sep 6 01:22:39.646743 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655-shm.mount: Deactivated successfully. Sep 6 01:22:39.646829 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d-shm.mount: Deactivated successfully. Sep 6 01:22:39.666972 env[1474]: time="2025-09-06T01:22:39.665626096Z" level=error msg="Failed to destroy network for sandbox \"d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.670258 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98-shm.mount: Deactivated successfully. Sep 6 01:22:39.671505 env[1474]: time="2025-09-06T01:22:39.671451784Z" level=error msg="encountered an error cleaning up failed sandbox \"d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.671975 env[1474]: time="2025-09-06T01:22:39.671923625Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-m9tfk,Uid:04a7e183-4c51-4aa6-b31d-7efe6ca81746,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.673149 kubelet[2507]: E0906 01:22:39.672449 2507 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.673149 kubelet[2507]: E0906 01:22:39.672506 2507 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-m9tfk" Sep 6 01:22:39.673149 kubelet[2507]: E0906 01:22:39.672542 2507 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-m9tfk" Sep 6 01:22:39.673300 kubelet[2507]: E0906 01:22:39.672576 2507 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-m9tfk_calico-system(04a7e183-4c51-4aa6-b31d-7efe6ca81746)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-m9tfk_calico-system(04a7e183-4c51-4aa6-b31d-7efe6ca81746)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-m9tfk" podUID="04a7e183-4c51-4aa6-b31d-7efe6ca81746" Sep 6 01:22:39.674530 kubelet[2507]: I0906 01:22:39.674041 2507 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" Sep 6 01:22:39.674966 env[1474]: time="2025-09-06T01:22:39.674923790Z" level=info msg="StopPodSandbox for \"49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655\"" Sep 6 01:22:39.675512 kubelet[2507]: I0906 01:22:39.675475 2507 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" Sep 6 01:22:39.676147 env[1474]: time="2025-09-06T01:22:39.676092272Z" level=info msg="StopPodSandbox for \"7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6\"" Sep 6 01:22:39.694954 env[1474]: time="2025-09-06T01:22:39.694910461Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\"" Sep 6 01:22:39.700338 kubelet[2507]: I0906 01:22:39.699761 2507 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" Sep 6 01:22:39.700780 env[1474]: time="2025-09-06T01:22:39.700746150Z" level=info msg="StopPodSandbox for \"ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959\"" Sep 6 01:22:39.704469 kubelet[2507]: I0906 01:22:39.703922 2507 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" Sep 6 01:22:39.704838 env[1474]: time="2025-09-06T01:22:39.704805876Z" level=info msg="StopPodSandbox for \"2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6\"" Sep 6 01:22:39.707630 kubelet[2507]: I0906 01:22:39.707247 2507 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" Sep 6 01:22:39.707969 env[1474]: time="2025-09-06T01:22:39.707937761Z" level=info msg="StopPodSandbox for \"9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7\"" Sep 6 01:22:39.712256 kubelet[2507]: I0906 01:22:39.712223 2507 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" Sep 6 01:22:39.714493 env[1474]: time="2025-09-06T01:22:39.714421971Z" level=info msg="StopPodSandbox for \"a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d\"" Sep 6 01:22:39.716313 kubelet[2507]: I0906 01:22:39.715878 2507 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" Sep 6 01:22:39.716596 env[1474]: time="2025-09-06T01:22:39.716567334Z" level=info msg="StopPodSandbox for \"210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287\"" Sep 6 01:22:39.749058 env[1474]: time="2025-09-06T01:22:39.748997864Z" level=error msg="StopPodSandbox for \"49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655\" failed" error="failed to destroy network for sandbox \"49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.749836 kubelet[2507]: E0906 01:22:39.749645 2507 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" Sep 6 01:22:39.749836 kubelet[2507]: E0906 01:22:39.749701 2507 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655"} Sep 6 01:22:39.749836 kubelet[2507]: E0906 01:22:39.749755 2507 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"4639beed-680f-4604-a20a-d9cafa08e5ea\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 01:22:39.749836 kubelet[2507]: E0906 01:22:39.749783 2507 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"4639beed-680f-4604-a20a-d9cafa08e5ea\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-zsbc4" podUID="4639beed-680f-4604-a20a-d9cafa08e5ea" Sep 6 01:22:39.757034 env[1474]: time="2025-09-06T01:22:39.756965836Z" level=error msg="StopPodSandbox for \"7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6\" failed" error="failed to destroy network for sandbox \"7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.757477 kubelet[2507]: E0906 01:22:39.757335 2507 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" Sep 6 01:22:39.757477 kubelet[2507]: E0906 01:22:39.757378 2507 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6"} Sep 6 01:22:39.757477 kubelet[2507]: E0906 01:22:39.757410 2507 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d8ba8d28-dc95-4133-afdd-c6fcfa29ca05\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 01:22:39.757477 kubelet[2507]: E0906 01:22:39.757435 2507 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d8ba8d28-dc95-4133-afdd-c6fcfa29ca05\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-5dfb6f899c-9sb29" podUID="d8ba8d28-dc95-4133-afdd-c6fcfa29ca05" Sep 6 01:22:39.809491 env[1474]: time="2025-09-06T01:22:39.809431637Z" level=error msg="StopPodSandbox for \"ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959\" failed" error="failed to destroy network for sandbox \"ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.810001 kubelet[2507]: E0906 01:22:39.809854 2507 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" Sep 6 01:22:39.810001 kubelet[2507]: E0906 01:22:39.809904 2507 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959"} Sep 6 01:22:39.810001 kubelet[2507]: E0906 01:22:39.809936 2507 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"173204e3-49e1-4a48-a5e0-d8016e50ca28\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 01:22:39.810001 kubelet[2507]: E0906 01:22:39.809960 2507 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"173204e3-49e1-4a48-a5e0-d8016e50ca28\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-7988f88666-xjt8j" podUID="173204e3-49e1-4a48-a5e0-d8016e50ca28" Sep 6 01:22:39.814204 env[1474]: time="2025-09-06T01:22:39.814151884Z" level=error msg="StopPodSandbox for \"a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d\" failed" error="failed to destroy network for sandbox \"a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.814642 kubelet[2507]: E0906 01:22:39.814497 2507 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" Sep 6 01:22:39.814642 kubelet[2507]: E0906 01:22:39.814545 2507 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d"} Sep 6 01:22:39.814642 kubelet[2507]: E0906 01:22:39.814576 2507 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"124eeee7-5ce0-48f1-a731-7543dcb4a9e4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 01:22:39.814642 kubelet[2507]: E0906 01:22:39.814597 2507 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"124eeee7-5ce0-48f1-a731-7543dcb4a9e4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7748ff464c-46pw5" podUID="124eeee7-5ce0-48f1-a731-7543dcb4a9e4" Sep 6 01:22:39.817739 env[1474]: time="2025-09-06T01:22:39.817684849Z" level=error msg="StopPodSandbox for \"9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7\" failed" error="failed to destroy network for sandbox \"9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.818189 kubelet[2507]: E0906 01:22:39.818037 2507 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" Sep 6 01:22:39.818189 kubelet[2507]: E0906 01:22:39.818086 2507 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7"} Sep 6 01:22:39.818189 kubelet[2507]: E0906 01:22:39.818127 2507 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d17efce8-fa93-4bdb-81af-efc70b288052\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 01:22:39.818189 kubelet[2507]: E0906 01:22:39.818152 2507 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d17efce8-fa93-4bdb-81af-efc70b288052\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-64697d84fd-9hmdg" podUID="d17efce8-fa93-4bdb-81af-efc70b288052" Sep 6 01:22:39.824255 env[1474]: time="2025-09-06T01:22:39.824202739Z" level=error msg="StopPodSandbox for \"2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6\" failed" error="failed to destroy network for sandbox \"2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.824749 kubelet[2507]: E0906 01:22:39.824590 2507 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" Sep 6 01:22:39.824749 kubelet[2507]: E0906 01:22:39.824646 2507 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6"} Sep 6 01:22:39.824749 kubelet[2507]: E0906 01:22:39.824678 2507 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"e7b9d8f2-69b8-4c82-be6b-f97e78bfa002\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 01:22:39.824749 kubelet[2507]: E0906 01:22:39.824702 2507 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"e7b9d8f2-69b8-4c82-be6b-f97e78bfa002\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-dk7np" podUID="e7b9d8f2-69b8-4c82-be6b-f97e78bfa002" Sep 6 01:22:39.831338 env[1474]: time="2025-09-06T01:22:39.831284830Z" level=error msg="StopPodSandbox for \"210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287\" failed" error="failed to destroy network for sandbox \"210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:39.831824 kubelet[2507]: E0906 01:22:39.831679 2507 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" Sep 6 01:22:39.831824 kubelet[2507]: E0906 01:22:39.831731 2507 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287"} Sep 6 01:22:39.831824 kubelet[2507]: E0906 01:22:39.831763 2507 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"37035637-3da4-419c-9970-0103d9f2a7f3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 01:22:39.831824 kubelet[2507]: E0906 01:22:39.831784 2507 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"37035637-3da4-419c-9970-0103d9f2a7f3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-64697d84fd-sjx99" podUID="37035637-3da4-419c-9970-0103d9f2a7f3" Sep 6 01:22:40.718962 kubelet[2507]: I0906 01:22:40.718926 2507 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" Sep 6 01:22:40.719725 env[1474]: time="2025-09-06T01:22:40.719689100Z" level=info msg="StopPodSandbox for \"d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98\"" Sep 6 01:22:40.746883 env[1474]: time="2025-09-06T01:22:40.746779101Z" level=error msg="StopPodSandbox for \"d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98\" failed" error="failed to destroy network for sandbox \"d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:40.747359 kubelet[2507]: E0906 01:22:40.747321 2507 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" Sep 6 01:22:40.747458 kubelet[2507]: E0906 01:22:40.747371 2507 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98"} Sep 6 01:22:40.747458 kubelet[2507]: E0906 01:22:40.747411 2507 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"04a7e183-4c51-4aa6-b31d-7efe6ca81746\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 01:22:40.747458 kubelet[2507]: E0906 01:22:40.747433 2507 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"04a7e183-4c51-4aa6-b31d-7efe6ca81746\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-m9tfk" podUID="04a7e183-4c51-4aa6-b31d-7efe6ca81746" Sep 6 01:22:44.766299 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2776983426.mount: Deactivated successfully. Sep 6 01:22:45.047428 env[1474]: time="2025-09-06T01:22:45.047312371Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:45.059031 env[1474]: time="2025-09-06T01:22:45.058977548Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2b8abd2140fc4464ed664d225fe38e5b90bbfcf62996b484b0fc0e0537b6a4a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:45.063973 env[1474]: time="2025-09-06T01:22:45.063923395Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:45.069055 env[1474]: time="2025-09-06T01:22:45.069016882Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:bcb8146fcaeced1e1c88fad3eaa697f1680746bd23c3e7e8d4535bc484c6f2a1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:45.069665 env[1474]: time="2025-09-06T01:22:45.069630803Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\" returns image reference \"sha256:2b8abd2140fc4464ed664d225fe38e5b90bbfcf62996b484b0fc0e0537b6a4a9\"" Sep 6 01:22:45.093148 env[1474]: time="2025-09-06T01:22:45.092816076Z" level=info msg="CreateContainer within sandbox \"0beb9a016e2ccf3dd1c0868332e5ffdd0a44e5a9582867567224c5f2abf6082c\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Sep 6 01:22:45.133611 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3305173140.mount: Deactivated successfully. Sep 6 01:22:45.169853 env[1474]: time="2025-09-06T01:22:45.169709025Z" level=info msg="CreateContainer within sandbox \"0beb9a016e2ccf3dd1c0868332e5ffdd0a44e5a9582867567224c5f2abf6082c\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"6497e70858216fbc735ce77a474bc3b4d95448ef2a62bba112ec29db7e0d52f0\"" Sep 6 01:22:45.171153 env[1474]: time="2025-09-06T01:22:45.170474986Z" level=info msg="StartContainer for \"6497e70858216fbc735ce77a474bc3b4d95448ef2a62bba112ec29db7e0d52f0\"" Sep 6 01:22:45.188325 systemd[1]: Started cri-containerd-6497e70858216fbc735ce77a474bc3b4d95448ef2a62bba112ec29db7e0d52f0.scope. Sep 6 01:22:45.209000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.216412 kernel: kauditd_printk_skb: 34 callbacks suppressed Sep 6 01:22:45.216513 kernel: audit: type=1400 audit(1757121765.209:1052): avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.209000 audit[3705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3044 pid=3705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:45.263138 kernel: audit: type=1300 audit(1757121765.209:1052): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3044 pid=3705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:45.209000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634393765373038353832313666626337333563653737613437346263 Sep 6 01:22:45.292285 kernel: audit: type=1327 audit(1757121765.209:1052): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634393765373038353832313666626337333563653737613437346263 Sep 6 01:22:45.296091 kernel: audit: type=1400 audit(1757121765.209:1053): avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.209000 audit[3705]: AVC avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.209000 audit[3705]: AVC avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.335237 kernel: audit: type=1400 audit(1757121765.209:1053): avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.335308 kernel: audit: type=1400 audit(1757121765.209:1053): avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.209000 audit[3705]: AVC avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.209000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.353839 env[1474]: time="2025-09-06T01:22:45.353795806Z" level=info msg="StartContainer for \"6497e70858216fbc735ce77a474bc3b4d95448ef2a62bba112ec29db7e0d52f0\" returns successfully" Sep 6 01:22:45.371720 kernel: audit: type=1400 audit(1757121765.209:1053): avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.209000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.390521 kernel: audit: type=1400 audit(1757121765.209:1053): avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.209000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.409861 kernel: audit: type=1400 audit(1757121765.209:1053): avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.410011 kernel: audit: type=1400 audit(1757121765.209:1053): avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.209000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.209000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.209000 audit[3705]: AVC avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.209000 audit[3705]: AVC avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.209000 audit: BPF prog-id=141 op=LOAD Sep 6 01:22:45.209000 audit[3705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3044 pid=3705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:45.209000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634393765373038353832313666626337333563653737613437346263 Sep 6 01:22:45.209000 audit[3705]: AVC avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.209000 audit[3705]: AVC avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.209000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.209000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.209000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.209000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.209000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.209000 audit[3705]: AVC avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.209000 audit[3705]: AVC avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.209000 audit: BPF prog-id=142 op=LOAD Sep 6 01:22:45.209000 audit[3705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3044 pid=3705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:45.209000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634393765373038353832313666626337333563653737613437346263 Sep 6 01:22:45.209000 audit: BPF prog-id=142 op=UNLOAD Sep 6 01:22:45.209000 audit: BPF prog-id=141 op=UNLOAD Sep 6 01:22:45.209000 audit[3705]: AVC avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.209000 audit[3705]: AVC avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.209000 audit[3705]: AVC avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.209000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.209000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.209000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.209000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.209000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.209000 audit[3705]: AVC avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.209000 audit[3705]: AVC avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:45.209000 audit: BPF prog-id=143 op=LOAD Sep 6 01:22:45.209000 audit[3705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3044 pid=3705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:45.209000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634393765373038353832313666626337333563653737613437346263 Sep 6 01:22:45.570602 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Sep 6 01:22:45.570740 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Sep 6 01:22:45.701815 env[1474]: time="2025-09-06T01:22:45.701590218Z" level=info msg="StopPodSandbox for \"7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6\"" Sep 6 01:22:45.786480 kubelet[2507]: I0906 01:22:45.786414 2507 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-d92l5" podStartSLOduration=1.517791528 podStartE2EDuration="16.786393899s" podCreationTimestamp="2025-09-06 01:22:29 +0000 UTC" firstStartedPulling="2025-09-06 01:22:29.802175633 +0000 UTC m=+24.381699835" lastFinishedPulling="2025-09-06 01:22:45.070778004 +0000 UTC m=+39.650302206" observedRunningTime="2025-09-06 01:22:45.786243338 +0000 UTC m=+40.365767540" watchObservedRunningTime="2025-09-06 01:22:45.786393899 +0000 UTC m=+40.365918101" Sep 6 01:22:45.870619 env[1474]: 2025-09-06 01:22:45.816 [INFO][3757] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" Sep 6 01:22:45.870619 env[1474]: 2025-09-06 01:22:45.816 [INFO][3757] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" iface="eth0" netns="/var/run/netns/cni-885edcf4-56b3-6ce9-b5ef-fb011caec82e" Sep 6 01:22:45.870619 env[1474]: 2025-09-06 01:22:45.816 [INFO][3757] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" iface="eth0" netns="/var/run/netns/cni-885edcf4-56b3-6ce9-b5ef-fb011caec82e" Sep 6 01:22:45.870619 env[1474]: 2025-09-06 01:22:45.816 [INFO][3757] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" iface="eth0" netns="/var/run/netns/cni-885edcf4-56b3-6ce9-b5ef-fb011caec82e" Sep 6 01:22:45.870619 env[1474]: 2025-09-06 01:22:45.816 [INFO][3757] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" Sep 6 01:22:45.870619 env[1474]: 2025-09-06 01:22:45.816 [INFO][3757] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" Sep 6 01:22:45.870619 env[1474]: 2025-09-06 01:22:45.851 [INFO][3779] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" HandleID="k8s-pod-network.7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-whisker--5dfb6f899c--9sb29-eth0" Sep 6 01:22:45.870619 env[1474]: 2025-09-06 01:22:45.852 [INFO][3779] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:45.870619 env[1474]: 2025-09-06 01:22:45.852 [INFO][3779] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:45.870619 env[1474]: 2025-09-06 01:22:45.865 [WARNING][3779] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" HandleID="k8s-pod-network.7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-whisker--5dfb6f899c--9sb29-eth0" Sep 6 01:22:45.870619 env[1474]: 2025-09-06 01:22:45.865 [INFO][3779] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" HandleID="k8s-pod-network.7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-whisker--5dfb6f899c--9sb29-eth0" Sep 6 01:22:45.870619 env[1474]: 2025-09-06 01:22:45.867 [INFO][3779] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:45.870619 env[1474]: 2025-09-06 01:22:45.869 [INFO][3757] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" Sep 6 01:22:45.874010 env[1474]: time="2025-09-06T01:22:45.872957781Z" level=info msg="TearDown network for sandbox \"7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6\" successfully" Sep 6 01:22:45.874010 env[1474]: time="2025-09-06T01:22:45.872995541Z" level=info msg="StopPodSandbox for \"7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6\" returns successfully" Sep 6 01:22:45.872901 systemd[1]: run-netns-cni\x2d885edcf4\x2d56b3\x2d6ce9\x2db5ef\x2dfb011caec82e.mount: Deactivated successfully. Sep 6 01:22:45.976534 kubelet[2507]: I0906 01:22:45.975741 2507 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/d8ba8d28-dc95-4133-afdd-c6fcfa29ca05-whisker-backend-key-pair\") pod \"d8ba8d28-dc95-4133-afdd-c6fcfa29ca05\" (UID: \"d8ba8d28-dc95-4133-afdd-c6fcfa29ca05\") " Sep 6 01:22:45.976534 kubelet[2507]: I0906 01:22:45.975787 2507 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-2cfgf\" (UniqueName: \"kubernetes.io/projected/d8ba8d28-dc95-4133-afdd-c6fcfa29ca05-kube-api-access-2cfgf\") pod \"d8ba8d28-dc95-4133-afdd-c6fcfa29ca05\" (UID: \"d8ba8d28-dc95-4133-afdd-c6fcfa29ca05\") " Sep 6 01:22:45.976534 kubelet[2507]: I0906 01:22:45.975815 2507 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d8ba8d28-dc95-4133-afdd-c6fcfa29ca05-whisker-ca-bundle\") pod \"d8ba8d28-dc95-4133-afdd-c6fcfa29ca05\" (UID: \"d8ba8d28-dc95-4133-afdd-c6fcfa29ca05\") " Sep 6 01:22:45.976534 kubelet[2507]: I0906 01:22:45.976153 2507 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/d8ba8d28-dc95-4133-afdd-c6fcfa29ca05-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "d8ba8d28-dc95-4133-afdd-c6fcfa29ca05" (UID: "d8ba8d28-dc95-4133-afdd-c6fcfa29ca05"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGidValue "" Sep 6 01:22:45.981329 systemd[1]: var-lib-kubelet-pods-d8ba8d28\x2ddc95\x2d4133\x2dafdd\x2dc6fcfa29ca05-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Sep 6 01:22:45.984391 systemd[1]: var-lib-kubelet-pods-d8ba8d28\x2ddc95\x2d4133\x2dafdd\x2dc6fcfa29ca05-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d2cfgf.mount: Deactivated successfully. Sep 6 01:22:45.985888 kubelet[2507]: I0906 01:22:45.985841 2507 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/d8ba8d28-dc95-4133-afdd-c6fcfa29ca05-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "d8ba8d28-dc95-4133-afdd-c6fcfa29ca05" (UID: "d8ba8d28-dc95-4133-afdd-c6fcfa29ca05"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGidValue "" Sep 6 01:22:45.985997 kubelet[2507]: I0906 01:22:45.985969 2507 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/d8ba8d28-dc95-4133-afdd-c6fcfa29ca05-kube-api-access-2cfgf" (OuterVolumeSpecName: "kube-api-access-2cfgf") pod "d8ba8d28-dc95-4133-afdd-c6fcfa29ca05" (UID: "d8ba8d28-dc95-4133-afdd-c6fcfa29ca05"). InnerVolumeSpecName "kube-api-access-2cfgf". PluginName "kubernetes.io/projected", VolumeGidValue "" Sep 6 01:22:46.076710 kubelet[2507]: I0906 01:22:46.076671 2507 reconciler_common.go:293] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/d8ba8d28-dc95-4133-afdd-c6fcfa29ca05-whisker-backend-key-pair\") on node \"ci-3510.3.8-n-b5f8f4c6c5\" DevicePath \"\"" Sep 6 01:22:46.076710 kubelet[2507]: I0906 01:22:46.076706 2507 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-2cfgf\" (UniqueName: \"kubernetes.io/projected/d8ba8d28-dc95-4133-afdd-c6fcfa29ca05-kube-api-access-2cfgf\") on node \"ci-3510.3.8-n-b5f8f4c6c5\" DevicePath \"\"" Sep 6 01:22:46.076710 kubelet[2507]: I0906 01:22:46.076717 2507 reconciler_common.go:293] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d8ba8d28-dc95-4133-afdd-c6fcfa29ca05-whisker-ca-bundle\") on node \"ci-3510.3.8-n-b5f8f4c6c5\" DevicePath \"\"" Sep 6 01:22:46.739401 systemd[1]: Removed slice kubepods-besteffort-podd8ba8d28_dc95_4133_afdd_c6fcfa29ca05.slice. Sep 6 01:22:46.766551 systemd[1]: run-containerd-runc-k8s.io-6497e70858216fbc735ce77a474bc3b4d95448ef2a62bba112ec29db7e0d52f0-runc.C6DHiy.mount: Deactivated successfully. Sep 6 01:22:46.833965 systemd[1]: Created slice kubepods-besteffort-pod4b652f78_cc92_4154_9af4_7026a7cf24c3.slice. Sep 6 01:22:46.881389 kubelet[2507]: I0906 01:22:46.881345 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-w4hdg\" (UniqueName: \"kubernetes.io/projected/4b652f78-cc92-4154-9af4-7026a7cf24c3-kube-api-access-w4hdg\") pod \"whisker-689b5f669b-rt8b6\" (UID: \"4b652f78-cc92-4154-9af4-7026a7cf24c3\") " pod="calico-system/whisker-689b5f669b-rt8b6" Sep 6 01:22:46.881806 kubelet[2507]: I0906 01:22:46.881787 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/4b652f78-cc92-4154-9af4-7026a7cf24c3-whisker-backend-key-pair\") pod \"whisker-689b5f669b-rt8b6\" (UID: \"4b652f78-cc92-4154-9af4-7026a7cf24c3\") " pod="calico-system/whisker-689b5f669b-rt8b6" Sep 6 01:22:46.881925 kubelet[2507]: I0906 01:22:46.881912 2507 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/4b652f78-cc92-4154-9af4-7026a7cf24c3-whisker-ca-bundle\") pod \"whisker-689b5f669b-rt8b6\" (UID: \"4b652f78-cc92-4154-9af4-7026a7cf24c3\") " pod="calico-system/whisker-689b5f669b-rt8b6" Sep 6 01:22:47.099000 audit[3865]: AVC avc: denied { write } for pid=3865 comm="tee" name="fd" dev="proc" ino=25273 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 01:22:47.099000 audit[3865]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd0b7f7cc a2=241 a3=1b6 items=1 ppid=3835 pid=3865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.099000 audit: CWD cwd="/etc/service/enabled/bird/log" Sep 6 01:22:47.099000 audit: PATH item=0 name="/dev/fd/63" inode=25753 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:22:47.099000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 01:22:47.102000 audit[3874]: AVC avc: denied { write } for pid=3874 comm="tee" name="fd" dev="proc" ino=25767 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 01:22:47.102000 audit[3874]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc1e057cb a2=241 a3=1b6 items=1 ppid=3844 pid=3874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.102000 audit: CWD cwd="/etc/service/enabled/felix/log" Sep 6 01:22:47.102000 audit: PATH item=0 name="/dev/fd/63" inode=25262 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:22:47.102000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 01:22:47.129000 audit[3900]: AVC avc: denied { write } for pid=3900 comm="tee" name="fd" dev="proc" ino=25290 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 01:22:47.131000 audit[3903]: AVC avc: denied { write } for pid=3903 comm="tee" name="fd" dev="proc" ino=25293 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 01:22:47.134000 audit[3886]: AVC avc: denied { write } for pid=3886 comm="tee" name="fd" dev="proc" ino=25294 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 01:22:47.134000 audit[3886]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc7f1f7cb a2=241 a3=1b6 items=1 ppid=3837 pid=3886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.134000 audit: CWD cwd="/etc/service/enabled/confd/log" Sep 6 01:22:47.134000 audit: PATH item=0 name="/dev/fd/63" inode=25764 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:22:47.134000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 01:22:47.141745 env[1474]: time="2025-09-06T01:22:47.141685997Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-689b5f669b-rt8b6,Uid:4b652f78-cc92-4154-9af4-7026a7cf24c3,Namespace:calico-system,Attempt:0,}" Sep 6 01:22:47.144000 audit[3890]: AVC avc: denied { write } for pid=3890 comm="tee" name="fd" dev="proc" ino=25298 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 01:22:47.131000 audit[3903]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc52d17bc a2=241 a3=1b6 items=1 ppid=3838 pid=3903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.131000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Sep 6 01:22:47.131000 audit: PATH item=0 name="/dev/fd/63" inode=25283 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:22:47.131000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 01:22:47.129000 audit[3900]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe7aee7cd a2=241 a3=1b6 items=1 ppid=3841 pid=3900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.129000 audit: CWD cwd="/etc/service/enabled/cni/log" Sep 6 01:22:47.129000 audit: PATH item=0 name="/dev/fd/63" inode=25774 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:22:47.129000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 01:22:47.144000 audit[3890]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff67867cb a2=241 a3=1b6 items=1 ppid=3833 pid=3890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.144000 audit: CWD cwd="/etc/service/enabled/bird6/log" Sep 6 01:22:47.144000 audit: PATH item=0 name="/dev/fd/63" inode=25771 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:22:47.144000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 01:22:47.171000 audit[3909]: AVC avc: denied { write } for pid=3909 comm="tee" name="fd" dev="proc" ino=25305 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 01:22:47.171000 audit[3909]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe64c37bb a2=241 a3=1b6 items=1 ppid=3851 pid=3909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.171000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Sep 6 01:22:47.171000 audit: PATH item=0 name="/dev/fd/63" inode=25775 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:22:47.171000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 01:22:47.365000 audit[3922]: AVC avc: denied { bpf } for pid=3922 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.365000 audit[3922]: AVC avc: denied { bpf } for pid=3922 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.365000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.365000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.365000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.365000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.365000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.365000 audit[3922]: AVC avc: denied { bpf } for pid=3922 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.365000 audit[3922]: AVC avc: denied { bpf } for pid=3922 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.365000 audit: BPF prog-id=144 op=LOAD Sep 6 01:22:47.365000 audit[3922]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff564e108 a2=98 a3=fffff564e0f8 items=0 ppid=3845 pid=3922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.365000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 6 01:22:47.365000 audit: BPF prog-id=144 op=UNLOAD Sep 6 01:22:47.365000 audit[3922]: AVC avc: denied { bpf } for pid=3922 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.365000 audit[3922]: AVC avc: denied { bpf } for pid=3922 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.365000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.365000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.365000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.365000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.365000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.365000 audit[3922]: AVC avc: denied { bpf } for pid=3922 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.365000 audit[3922]: AVC avc: denied { bpf } for pid=3922 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.365000 audit: BPF prog-id=145 op=LOAD Sep 6 01:22:47.365000 audit[3922]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff564dfb8 a2=74 a3=95 items=0 ppid=3845 pid=3922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.365000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 6 01:22:47.365000 audit: BPF prog-id=145 op=UNLOAD Sep 6 01:22:47.365000 audit[3922]: AVC avc: denied { bpf } for pid=3922 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.365000 audit[3922]: AVC avc: denied { bpf } for pid=3922 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.365000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.365000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.365000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.365000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.365000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.365000 audit[3922]: AVC avc: denied { bpf } for pid=3922 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.365000 audit[3922]: AVC avc: denied { bpf } for pid=3922 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.365000 audit: BPF prog-id=146 op=LOAD Sep 6 01:22:47.365000 audit[3922]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff564dfe8 a2=40 a3=fffff564e018 items=0 ppid=3845 pid=3922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.365000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 6 01:22:47.365000 audit: BPF prog-id=146 op=UNLOAD Sep 6 01:22:47.365000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.365000 audit[3922]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=fffff564e100 a2=50 a3=0 items=0 ppid=3845 pid=3922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.365000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 6 01:22:47.391000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.391000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.391000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.391000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.391000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.391000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.391000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.391000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.391000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.391000 audit: BPF prog-id=147 op=LOAD Sep 6 01:22:47.391000 audit[3925]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcc261da8 a2=98 a3=ffffcc261d98 items=0 ppid=3845 pid=3925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.391000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:47.392000 audit: BPF prog-id=147 op=UNLOAD Sep 6 01:22:47.393000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.393000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.393000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.393000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.393000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.393000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.393000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.393000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.393000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.393000 audit: BPF prog-id=148 op=LOAD Sep 6 01:22:47.393000 audit[3925]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffcc261a38 a2=74 a3=95 items=0 ppid=3845 pid=3925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.393000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:47.393000 audit: BPF prog-id=148 op=UNLOAD Sep 6 01:22:47.393000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.393000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.393000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.393000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.393000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.393000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.393000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.393000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.393000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.393000 audit: BPF prog-id=149 op=LOAD Sep 6 01:22:47.393000 audit[3925]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffcc261a98 a2=94 a3=2 items=0 ppid=3845 pid=3925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.393000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:47.394000 audit: BPF prog-id=149 op=UNLOAD Sep 6 01:22:47.520000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.520000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.520000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.520000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.520000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.520000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.520000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.520000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.520000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.520000 audit: BPF prog-id=150 op=LOAD Sep 6 01:22:47.520000 audit[3925]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffcc261a58 a2=40 a3=ffffcc261a88 items=0 ppid=3845 pid=3925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.520000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:47.520000 audit: BPF prog-id=150 op=UNLOAD Sep 6 01:22:47.520000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.520000 audit[3925]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffcc261b70 a2=50 a3=0 items=0 ppid=3845 pid=3925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.520000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:47.529000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.529000 audit[3925]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcc261ac8 a2=28 a3=ffffcc261bf8 items=0 ppid=3845 pid=3925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.529000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit[3925]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcc261af8 a2=28 a3=ffffcc261c28 items=0 ppid=3845 pid=3925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.530000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit[3925]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcc2619a8 a2=28 a3=ffffcc261ad8 items=0 ppid=3845 pid=3925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.530000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit[3925]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcc261b18 a2=28 a3=ffffcc261c48 items=0 ppid=3845 pid=3925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.530000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit[3925]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcc261af8 a2=28 a3=ffffcc261c28 items=0 ppid=3845 pid=3925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.530000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit[3925]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcc261ae8 a2=28 a3=ffffcc261c18 items=0 ppid=3845 pid=3925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.530000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit[3925]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcc261b18 a2=28 a3=ffffcc261c48 items=0 ppid=3845 pid=3925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.530000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit[3925]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcc261af8 a2=28 a3=ffffcc261c28 items=0 ppid=3845 pid=3925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.530000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit[3925]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcc261b18 a2=28 a3=ffffcc261c48 items=0 ppid=3845 pid=3925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.530000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit[3925]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcc261ae8 a2=28 a3=ffffcc261c18 items=0 ppid=3845 pid=3925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.530000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit[3925]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcc261b68 a2=28 a3=ffffcc261ca8 items=0 ppid=3845 pid=3925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.530000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit[3925]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffcc2618a0 a2=50 a3=0 items=0 ppid=3845 pid=3925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.530000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit: BPF prog-id=151 op=LOAD Sep 6 01:22:47.530000 audit[3925]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffcc2618a8 a2=94 a3=5 items=0 ppid=3845 pid=3925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.530000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:47.530000 audit: BPF prog-id=151 op=UNLOAD Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit[3925]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffcc2619b0 a2=50 a3=0 items=0 ppid=3845 pid=3925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.530000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit[3925]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffcc261af8 a2=4 a3=3 items=0 ppid=3845 pid=3925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.530000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.530000 audit[3925]: AVC avc: denied { confidentiality } for pid=3925 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 01:22:47.530000 audit[3925]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffcc261ad8 a2=94 a3=6 items=0 ppid=3845 pid=3925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.530000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:47.531000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.531000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.531000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.531000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.531000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.531000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.531000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.531000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.531000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.531000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.531000 audit[3925]: AVC avc: denied { confidentiality } for pid=3925 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 01:22:47.531000 audit[3925]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffcc2612a8 a2=94 a3=83 items=0 ppid=3845 pid=3925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.531000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:47.531000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.531000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.531000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.531000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.531000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.531000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.531000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.531000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.531000 audit[3925]: AVC avc: denied { perfmon } for pid=3925 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.531000 audit[3925]: AVC avc: denied { bpf } for pid=3925 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.531000 audit[3925]: AVC avc: denied { confidentiality } for pid=3925 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 01:22:47.531000 audit[3925]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffcc2612a8 a2=94 a3=83 items=0 ppid=3845 pid=3925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.531000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:47.550071 kubelet[2507]: I0906 01:22:47.550029 2507 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="d8ba8d28-dc95-4133-afdd-c6fcfa29ca05" path="/var/lib/kubelet/pods/d8ba8d28-dc95-4133-afdd-c6fcfa29ca05/volumes" Sep 6 01:22:47.552000 audit[3946]: AVC avc: denied { bpf } for pid=3946 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.552000 audit[3946]: AVC avc: denied { bpf } for pid=3946 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.552000 audit[3946]: AVC avc: denied { perfmon } for pid=3946 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.552000 audit[3946]: AVC avc: denied { perfmon } for pid=3946 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.552000 audit[3946]: AVC avc: denied { perfmon } for pid=3946 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.552000 audit[3946]: AVC avc: denied { perfmon } for pid=3946 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.552000 audit[3946]: AVC avc: denied { perfmon } for pid=3946 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.552000 audit[3946]: AVC avc: denied { bpf } for pid=3946 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.552000 audit[3946]: AVC avc: denied { bpf } for pid=3946 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.552000 audit: BPF prog-id=152 op=LOAD Sep 6 01:22:47.552000 audit[3946]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff343a2e8 a2=98 a3=fffff343a2d8 items=0 ppid=3845 pid=3946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.552000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 6 01:22:47.552000 audit: BPF prog-id=152 op=UNLOAD Sep 6 01:22:47.552000 audit[3946]: AVC avc: denied { bpf } for pid=3946 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.552000 audit[3946]: AVC avc: denied { bpf } for pid=3946 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.552000 audit[3946]: AVC avc: denied { perfmon } for pid=3946 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.552000 audit[3946]: AVC avc: denied { perfmon } for pid=3946 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.552000 audit[3946]: AVC avc: denied { perfmon } for pid=3946 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.552000 audit[3946]: AVC avc: denied { perfmon } for pid=3946 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.552000 audit[3946]: AVC avc: denied { perfmon } for pid=3946 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.552000 audit[3946]: AVC avc: denied { bpf } for pid=3946 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.552000 audit[3946]: AVC avc: denied { bpf } for pid=3946 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.552000 audit: BPF prog-id=153 op=LOAD Sep 6 01:22:47.552000 audit[3946]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff343a198 a2=74 a3=95 items=0 ppid=3845 pid=3946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.552000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 6 01:22:47.552000 audit: BPF prog-id=153 op=UNLOAD Sep 6 01:22:47.552000 audit[3946]: AVC avc: denied { bpf } for pid=3946 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.552000 audit[3946]: AVC avc: denied { bpf } for pid=3946 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.552000 audit[3946]: AVC avc: denied { perfmon } for pid=3946 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.552000 audit[3946]: AVC avc: denied { perfmon } for pid=3946 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.552000 audit[3946]: AVC avc: denied { perfmon } for pid=3946 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.552000 audit[3946]: AVC avc: denied { perfmon } for pid=3946 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.552000 audit[3946]: AVC avc: denied { perfmon } for pid=3946 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.552000 audit[3946]: AVC avc: denied { bpf } for pid=3946 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.552000 audit[3946]: AVC avc: denied { bpf } for pid=3946 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.552000 audit: BPF prog-id=154 op=LOAD Sep 6 01:22:47.552000 audit[3946]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff343a1c8 a2=40 a3=fffff343a1f8 items=0 ppid=3845 pid=3946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.552000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 6 01:22:47.552000 audit: BPF prog-id=154 op=UNLOAD Sep 6 01:22:47.750843 systemd-networkd[1625]: vxlan.calico: Link UP Sep 6 01:22:47.750858 systemd-networkd[1625]: vxlan.calico: Gained carrier Sep 6 01:22:47.796000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.796000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.796000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.796000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.796000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.796000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.796000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.796000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.796000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.796000 audit: BPF prog-id=155 op=LOAD Sep 6 01:22:47.796000 audit[3991]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe02cae88 a2=98 a3=ffffe02cae78 items=0 ppid=3845 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.796000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:47.796000 audit: BPF prog-id=155 op=UNLOAD Sep 6 01:22:47.796000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.796000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.796000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.796000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.796000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.796000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.796000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.796000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.796000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.796000 audit: BPF prog-id=156 op=LOAD Sep 6 01:22:47.796000 audit[3991]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe02cab68 a2=74 a3=95 items=0 ppid=3845 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.796000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:47.796000 audit: BPF prog-id=156 op=UNLOAD Sep 6 01:22:47.796000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.796000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.796000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.796000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.796000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.796000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.796000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.796000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.796000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.796000 audit: BPF prog-id=157 op=LOAD Sep 6 01:22:47.796000 audit[3991]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe02cabc8 a2=94 a3=2 items=0 ppid=3845 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.796000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:47.796000 audit: BPF prog-id=157 op=UNLOAD Sep 6 01:22:47.797000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.797000 audit[3991]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe02cabf8 a2=28 a3=ffffe02cad28 items=0 ppid=3845 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.797000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:47.797000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.797000 audit[3991]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe02cac28 a2=28 a3=ffffe02cad58 items=0 ppid=3845 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.797000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:47.797000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.797000 audit[3991]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe02caad8 a2=28 a3=ffffe02cac08 items=0 ppid=3845 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.797000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:47.797000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.797000 audit[3991]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe02cac48 a2=28 a3=ffffe02cad78 items=0 ppid=3845 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.797000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:47.797000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.797000 audit[3991]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe02cac28 a2=28 a3=ffffe02cad58 items=0 ppid=3845 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.797000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:47.797000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.797000 audit[3991]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe02cac18 a2=28 a3=ffffe02cad48 items=0 ppid=3845 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.797000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:47.797000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.797000 audit[3991]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe02cac48 a2=28 a3=ffffe02cad78 items=0 ppid=3845 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.797000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:47.797000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.797000 audit[3991]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe02cac28 a2=28 a3=ffffe02cad58 items=0 ppid=3845 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.797000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:47.797000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.797000 audit[3991]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe02cac48 a2=28 a3=ffffe02cad78 items=0 ppid=3845 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.797000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:47.797000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.797000 audit[3991]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe02cac18 a2=28 a3=ffffe02cad48 items=0 ppid=3845 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.797000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:47.797000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.797000 audit[3991]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe02cac98 a2=28 a3=ffffe02cadd8 items=0 ppid=3845 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.797000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:47.797000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.797000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.797000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.797000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.797000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.797000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.797000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.797000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.797000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.797000 audit: BPF prog-id=158 op=LOAD Sep 6 01:22:47.797000 audit[3991]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe02caab8 a2=40 a3=ffffe02caae8 items=0 ppid=3845 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.797000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:47.797000 audit: BPF prog-id=158 op=UNLOAD Sep 6 01:22:47.798000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.798000 audit[3991]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffe02caae0 a2=50 a3=0 items=0 ppid=3845 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.798000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:47.798000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.798000 audit[3991]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=ffffe02caae0 a2=50 a3=0 items=0 ppid=3845 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.798000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:47.798000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.798000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.798000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.798000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.798000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.798000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.798000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.798000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.798000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.798000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.798000 audit: BPF prog-id=159 op=LOAD Sep 6 01:22:47.798000 audit[3991]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe02ca248 a2=94 a3=2 items=0 ppid=3845 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.798000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:47.798000 audit: BPF prog-id=159 op=UNLOAD Sep 6 01:22:47.798000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.798000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.798000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.798000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.798000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.798000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.798000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.798000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.798000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.798000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.798000 audit: BPF prog-id=160 op=LOAD Sep 6 01:22:47.798000 audit[3991]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe02ca3d8 a2=94 a3=30 items=0 ppid=3845 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.798000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:47.810000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.810000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.810000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.810000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.810000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.810000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.810000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.810000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.810000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.810000 audit: BPF prog-id=161 op=LOAD Sep 6 01:22:47.810000 audit[3997]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc203e658 a2=98 a3=ffffc203e648 items=0 ppid=3845 pid=3997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.810000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:47.810000 audit: BPF prog-id=161 op=UNLOAD Sep 6 01:22:47.810000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.810000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.810000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.810000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.810000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.810000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.810000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.810000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.810000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.810000 audit: BPF prog-id=162 op=LOAD Sep 6 01:22:47.810000 audit[3997]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc203e2e8 a2=74 a3=95 items=0 ppid=3845 pid=3997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.810000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:47.810000 audit: BPF prog-id=162 op=UNLOAD Sep 6 01:22:47.810000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.810000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.810000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.810000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.810000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.810000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.810000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.810000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.810000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.810000 audit: BPF prog-id=163 op=LOAD Sep 6 01:22:47.810000 audit[3997]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc203e348 a2=94 a3=2 items=0 ppid=3845 pid=3997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.810000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:47.811000 audit: BPF prog-id=163 op=UNLOAD Sep 6 01:22:47.834721 systemd-networkd[1625]: calia628c622ac0: Link UP Sep 6 01:22:47.844498 systemd-networkd[1625]: calia628c622ac0: Gained carrier Sep 6 01:22:47.845197 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calia628c622ac0: link becomes ready Sep 6 01:22:47.870512 env[1474]: 2025-09-06 01:22:47.706 [INFO][3958] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--b5f8f4c6c5-k8s-whisker--689b5f669b--rt8b6-eth0 whisker-689b5f669b- calico-system 4b652f78-cc92-4154-9af4-7026a7cf24c3 928 0 2025-09-06 01:22:46 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:689b5f669b projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s ci-3510.3.8-n-b5f8f4c6c5 whisker-689b5f669b-rt8b6 eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] calia628c622ac0 [] [] }} ContainerID="955a1f7cfd0a1c9696c6b262d97ab525318386eb1a3547f4c6f6fedf01558780" Namespace="calico-system" Pod="whisker-689b5f669b-rt8b6" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-whisker--689b5f669b--rt8b6-" Sep 6 01:22:47.870512 env[1474]: 2025-09-06 01:22:47.706 [INFO][3958] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="955a1f7cfd0a1c9696c6b262d97ab525318386eb1a3547f4c6f6fedf01558780" Namespace="calico-system" Pod="whisker-689b5f669b-rt8b6" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-whisker--689b5f669b--rt8b6-eth0" Sep 6 01:22:47.870512 env[1474]: 2025-09-06 01:22:47.764 [INFO][3972] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="955a1f7cfd0a1c9696c6b262d97ab525318386eb1a3547f4c6f6fedf01558780" HandleID="k8s-pod-network.955a1f7cfd0a1c9696c6b262d97ab525318386eb1a3547f4c6f6fedf01558780" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-whisker--689b5f669b--rt8b6-eth0" Sep 6 01:22:47.870512 env[1474]: 2025-09-06 01:22:47.764 [INFO][3972] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="955a1f7cfd0a1c9696c6b262d97ab525318386eb1a3547f4c6f6fedf01558780" HandleID="k8s-pod-network.955a1f7cfd0a1c9696c6b262d97ab525318386eb1a3547f4c6f6fedf01558780" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-whisker--689b5f669b--rt8b6-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d3b60), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-b5f8f4c6c5", "pod":"whisker-689b5f669b-rt8b6", "timestamp":"2025-09-06 01:22:47.764436698 +0000 UTC"}, Hostname:"ci-3510.3.8-n-b5f8f4c6c5", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 01:22:47.870512 env[1474]: 2025-09-06 01:22:47.764 [INFO][3972] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:47.870512 env[1474]: 2025-09-06 01:22:47.764 [INFO][3972] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:47.870512 env[1474]: 2025-09-06 01:22:47.764 [INFO][3972] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-b5f8f4c6c5' Sep 6 01:22:47.870512 env[1474]: 2025-09-06 01:22:47.776 [INFO][3972] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.955a1f7cfd0a1c9696c6b262d97ab525318386eb1a3547f4c6f6fedf01558780" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:47.870512 env[1474]: 2025-09-06 01:22:47.780 [INFO][3972] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:47.870512 env[1474]: 2025-09-06 01:22:47.786 [INFO][3972] ipam/ipam.go 511: Trying affinity for 192.168.37.192/26 host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:47.870512 env[1474]: 2025-09-06 01:22:47.795 [INFO][3972] ipam/ipam.go 158: Attempting to load block cidr=192.168.37.192/26 host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:47.870512 env[1474]: 2025-09-06 01:22:47.800 [INFO][3972] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.37.192/26 host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:47.870512 env[1474]: 2025-09-06 01:22:47.800 [INFO][3972] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.37.192/26 handle="k8s-pod-network.955a1f7cfd0a1c9696c6b262d97ab525318386eb1a3547f4c6f6fedf01558780" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:47.870512 env[1474]: 2025-09-06 01:22:47.802 [INFO][3972] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.955a1f7cfd0a1c9696c6b262d97ab525318386eb1a3547f4c6f6fedf01558780 Sep 6 01:22:47.870512 env[1474]: 2025-09-06 01:22:47.814 [INFO][3972] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.37.192/26 handle="k8s-pod-network.955a1f7cfd0a1c9696c6b262d97ab525318386eb1a3547f4c6f6fedf01558780" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:47.870512 env[1474]: 2025-09-06 01:22:47.827 [INFO][3972] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.37.193/26] block=192.168.37.192/26 handle="k8s-pod-network.955a1f7cfd0a1c9696c6b262d97ab525318386eb1a3547f4c6f6fedf01558780" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:47.870512 env[1474]: 2025-09-06 01:22:47.827 [INFO][3972] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.37.193/26] handle="k8s-pod-network.955a1f7cfd0a1c9696c6b262d97ab525318386eb1a3547f4c6f6fedf01558780" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:47.870512 env[1474]: 2025-09-06 01:22:47.827 [INFO][3972] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:47.870512 env[1474]: 2025-09-06 01:22:47.827 [INFO][3972] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.37.193/26] IPv6=[] ContainerID="955a1f7cfd0a1c9696c6b262d97ab525318386eb1a3547f4c6f6fedf01558780" HandleID="k8s-pod-network.955a1f7cfd0a1c9696c6b262d97ab525318386eb1a3547f4c6f6fedf01558780" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-whisker--689b5f669b--rt8b6-eth0" Sep 6 01:22:47.871257 env[1474]: 2025-09-06 01:22:47.829 [INFO][3958] cni-plugin/k8s.go 418: Populated endpoint ContainerID="955a1f7cfd0a1c9696c6b262d97ab525318386eb1a3547f4c6f6fedf01558780" Namespace="calico-system" Pod="whisker-689b5f669b-rt8b6" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-whisker--689b5f669b--rt8b6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--b5f8f4c6c5-k8s-whisker--689b5f669b--rt8b6-eth0", GenerateName:"whisker-689b5f669b-", Namespace:"calico-system", SelfLink:"", UID:"4b652f78-cc92-4154-9af4-7026a7cf24c3", ResourceVersion:"928", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"689b5f669b", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-b5f8f4c6c5", ContainerID:"", Pod:"whisker-689b5f669b-rt8b6", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.37.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calia628c622ac0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:47.871257 env[1474]: 2025-09-06 01:22:47.829 [INFO][3958] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.37.193/32] ContainerID="955a1f7cfd0a1c9696c6b262d97ab525318386eb1a3547f4c6f6fedf01558780" Namespace="calico-system" Pod="whisker-689b5f669b-rt8b6" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-whisker--689b5f669b--rt8b6-eth0" Sep 6 01:22:47.871257 env[1474]: 2025-09-06 01:22:47.829 [INFO][3958] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calia628c622ac0 ContainerID="955a1f7cfd0a1c9696c6b262d97ab525318386eb1a3547f4c6f6fedf01558780" Namespace="calico-system" Pod="whisker-689b5f669b-rt8b6" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-whisker--689b5f669b--rt8b6-eth0" Sep 6 01:22:47.871257 env[1474]: 2025-09-06 01:22:47.845 [INFO][3958] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="955a1f7cfd0a1c9696c6b262d97ab525318386eb1a3547f4c6f6fedf01558780" Namespace="calico-system" Pod="whisker-689b5f669b-rt8b6" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-whisker--689b5f669b--rt8b6-eth0" Sep 6 01:22:47.871257 env[1474]: 2025-09-06 01:22:47.853 [INFO][3958] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="955a1f7cfd0a1c9696c6b262d97ab525318386eb1a3547f4c6f6fedf01558780" Namespace="calico-system" Pod="whisker-689b5f669b-rt8b6" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-whisker--689b5f669b--rt8b6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--b5f8f4c6c5-k8s-whisker--689b5f669b--rt8b6-eth0", GenerateName:"whisker-689b5f669b-", Namespace:"calico-system", SelfLink:"", UID:"4b652f78-cc92-4154-9af4-7026a7cf24c3", ResourceVersion:"928", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"689b5f669b", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-b5f8f4c6c5", ContainerID:"955a1f7cfd0a1c9696c6b262d97ab525318386eb1a3547f4c6f6fedf01558780", Pod:"whisker-689b5f669b-rt8b6", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.37.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calia628c622ac0", MAC:"7e:66:fd:32:2b:74", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:47.871257 env[1474]: 2025-09-06 01:22:47.867 [INFO][3958] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="955a1f7cfd0a1c9696c6b262d97ab525318386eb1a3547f4c6f6fedf01558780" Namespace="calico-system" Pod="whisker-689b5f669b-rt8b6" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-whisker--689b5f669b--rt8b6-eth0" Sep 6 01:22:47.943000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.943000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.943000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.943000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.943000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.943000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.943000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.943000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.943000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.943000 audit: BPF prog-id=164 op=LOAD Sep 6 01:22:47.943000 audit[3997]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc203e308 a2=40 a3=ffffc203e338 items=0 ppid=3845 pid=3997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.943000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:47.944000 audit: BPF prog-id=164 op=UNLOAD Sep 6 01:22:47.944000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.944000 audit[3997]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffc203e420 a2=50 a3=0 items=0 ppid=3845 pid=3997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.944000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:47.953000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.953000 audit[3997]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc203e378 a2=28 a3=ffffc203e4a8 items=0 ppid=3845 pid=3997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.953000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:47.953000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.953000 audit[3997]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc203e3a8 a2=28 a3=ffffc203e4d8 items=0 ppid=3845 pid=3997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.953000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:47.954000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.954000 audit[3997]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc203e258 a2=28 a3=ffffc203e388 items=0 ppid=3845 pid=3997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.954000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:47.954000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.954000 audit[3997]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc203e3c8 a2=28 a3=ffffc203e4f8 items=0 ppid=3845 pid=3997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.954000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:47.954000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.954000 audit[3997]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc203e3a8 a2=28 a3=ffffc203e4d8 items=0 ppid=3845 pid=3997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.954000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:47.954000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.954000 audit[3997]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc203e398 a2=28 a3=ffffc203e4c8 items=0 ppid=3845 pid=3997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.954000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:47.954000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.954000 audit[3997]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc203e3c8 a2=28 a3=ffffc203e4f8 items=0 ppid=3845 pid=3997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.954000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:47.955000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.955000 audit[3997]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc203e3a8 a2=28 a3=ffffc203e4d8 items=0 ppid=3845 pid=3997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.955000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:47.955000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.955000 audit[3997]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc203e3c8 a2=28 a3=ffffc203e4f8 items=0 ppid=3845 pid=3997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.955000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:47.956000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.956000 audit[3997]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc203e398 a2=28 a3=ffffc203e4c8 items=0 ppid=3845 pid=3997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.956000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:47.956000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.956000 audit[3997]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc203e418 a2=28 a3=ffffc203e558 items=0 ppid=3845 pid=3997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.956000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:47.960000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.960000 audit[3997]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffc203e150 a2=50 a3=0 items=0 ppid=3845 pid=3997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.960000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:47.960000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.960000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.960000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.960000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.960000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.960000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.960000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.960000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.960000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.960000 audit: BPF prog-id=165 op=LOAD Sep 6 01:22:47.960000 audit[3997]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffc203e158 a2=94 a3=5 items=0 ppid=3845 pid=3997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.960000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:47.966000 audit: BPF prog-id=165 op=UNLOAD Sep 6 01:22:47.966000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.966000 audit[3997]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffc203e260 a2=50 a3=0 items=0 ppid=3845 pid=3997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.966000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:47.966000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.966000 audit[3997]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffc203e3a8 a2=4 a3=3 items=0 ppid=3845 pid=3997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.966000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:47.966000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.966000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.966000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.966000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.966000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.966000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.966000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.966000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.966000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.966000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.966000 audit[3997]: AVC avc: denied { confidentiality } for pid=3997 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 01:22:47.966000 audit[3997]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc203e388 a2=94 a3=6 items=0 ppid=3845 pid=3997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.966000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:47.967000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.967000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.967000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.967000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.967000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.967000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.967000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.967000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.967000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.967000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.967000 audit[3997]: AVC avc: denied { confidentiality } for pid=3997 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 01:22:47.967000 audit[3997]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc203db58 a2=94 a3=83 items=0 ppid=3845 pid=3997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.967000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:47.967000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.967000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.967000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.967000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.967000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.967000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.967000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.967000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.967000 audit[3997]: AVC avc: denied { perfmon } for pid=3997 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.967000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.967000 audit[3997]: AVC avc: denied { confidentiality } for pid=3997 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 01:22:47.967000 audit[3997]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc203db58 a2=94 a3=83 items=0 ppid=3845 pid=3997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.967000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:47.968000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.968000 audit[3997]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffc203f598 a2=10 a3=ffffc203f688 items=0 ppid=3845 pid=3997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.968000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:47.969000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.969000 audit[3997]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffc203f458 a2=10 a3=ffffc203f548 items=0 ppid=3845 pid=3997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.969000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:47.969000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.969000 audit[3997]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffc203f3c8 a2=10 a3=ffffc203f548 items=0 ppid=3845 pid=3997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.976130 env[1474]: time="2025-09-06T01:22:47.968921300Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:22:47.976130 env[1474]: time="2025-09-06T01:22:47.968980260Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:22:47.976130 env[1474]: time="2025-09-06T01:22:47.968991020Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:22:47.976130 env[1474]: time="2025-09-06T01:22:47.969204981Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/955a1f7cfd0a1c9696c6b262d97ab525318386eb1a3547f4c6f6fedf01558780 pid=4013 runtime=io.containerd.runc.v2 Sep 6 01:22:47.969000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:47.975000 audit[3997]: AVC avc: denied { bpf } for pid=3997 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:47.975000 audit[3997]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffc203f3c8 a2=10 a3=ffffc203f548 items=0 ppid=3845 pid=3997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:47.975000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:47.980000 audit: BPF prog-id=160 op=UNLOAD Sep 6 01:22:47.996509 systemd[1]: run-containerd-runc-k8s.io-955a1f7cfd0a1c9696c6b262d97ab525318386eb1a3547f4c6f6fedf01558780-runc.5Kw4xL.mount: Deactivated successfully. Sep 6 01:22:47.998774 systemd[1]: Started cri-containerd-955a1f7cfd0a1c9696c6b262d97ab525318386eb1a3547f4c6f6fedf01558780.scope. Sep 6 01:22:48.018000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.018000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.018000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.018000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.018000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.018000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.018000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.018000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.018000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.018000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.018000 audit: BPF prog-id=166 op=LOAD Sep 6 01:22:48.024000 audit[4022]: AVC avc: denied { bpf } for pid=4022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.024000 audit[4022]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011fb38 a2=10 a3=0 items=0 ppid=4013 pid=4022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:48.024000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935356131663763666430613163393639366336623236326439376162 Sep 6 01:22:48.024000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.024000 audit[4022]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011f5a0 a2=3c a3=0 items=0 ppid=4013 pid=4022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:48.024000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935356131663763666430613163393639366336623236326439376162 Sep 6 01:22:48.024000 audit[4022]: AVC avc: denied { bpf } for pid=4022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.024000 audit[4022]: AVC avc: denied { bpf } for pid=4022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.024000 audit[4022]: AVC avc: denied { bpf } for pid=4022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.024000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.024000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.024000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.024000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.024000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.024000 audit[4022]: AVC avc: denied { bpf } for pid=4022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.024000 audit[4022]: AVC avc: denied { bpf } for pid=4022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.024000 audit: BPF prog-id=167 op=LOAD Sep 6 01:22:48.024000 audit[4022]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011f8e0 a2=78 a3=0 items=0 ppid=4013 pid=4022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:48.024000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935356131663763666430613163393639366336623236326439376162 Sep 6 01:22:48.024000 audit[4022]: AVC avc: denied { bpf } for pid=4022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.024000 audit[4022]: AVC avc: denied { bpf } for pid=4022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.024000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.024000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.024000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.024000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.024000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.024000 audit[4022]: AVC avc: denied { bpf } for pid=4022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.024000 audit[4022]: AVC avc: denied { bpf } for pid=4022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.024000 audit: BPF prog-id=168 op=LOAD Sep 6 01:22:48.024000 audit[4022]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011f670 a2=78 a3=0 items=0 ppid=4013 pid=4022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:48.024000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935356131663763666430613163393639366336623236326439376162 Sep 6 01:22:48.024000 audit: BPF prog-id=168 op=UNLOAD Sep 6 01:22:48.024000 audit: BPF prog-id=167 op=UNLOAD Sep 6 01:22:48.024000 audit[4022]: AVC avc: denied { bpf } for pid=4022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.024000 audit[4022]: AVC avc: denied { bpf } for pid=4022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.024000 audit[4022]: AVC avc: denied { bpf } for pid=4022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.024000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.024000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.024000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.024000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.024000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.024000 audit[4022]: AVC avc: denied { bpf } for pid=4022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.024000 audit[4022]: AVC avc: denied { bpf } for pid=4022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:48.024000 audit: BPF prog-id=169 op=LOAD Sep 6 01:22:48.024000 audit[4022]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011fb40 a2=78 a3=0 items=0 ppid=4013 pid=4022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:48.024000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935356131663763666430613163393639366336623236326439376162 Sep 6 01:22:48.048675 env[1474]: time="2025-09-06T01:22:48.048622290Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-689b5f669b-rt8b6,Uid:4b652f78-cc92-4154-9af4-7026a7cf24c3,Namespace:calico-system,Attempt:0,} returns sandbox id \"955a1f7cfd0a1c9696c6b262d97ab525318386eb1a3547f4c6f6fedf01558780\"" Sep 6 01:22:48.051430 env[1474]: time="2025-09-06T01:22:48.051381253Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\"" Sep 6 01:22:48.376000 audit[4073]: NETFILTER_CFG table=mangle:108 family=2 entries=16 op=nft_register_chain pid=4073 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 01:22:48.376000 audit[4073]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=ffffdcfa90d0 a2=0 a3=ffffb3b20fa8 items=0 ppid=3845 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:48.376000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 01:22:48.382000 audit[4074]: NETFILTER_CFG table=nat:109 family=2 entries=15 op=nft_register_chain pid=4074 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 01:22:48.382000 audit[4074]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffdd961200 a2=0 a3=ffffa4466fa8 items=0 ppid=3845 pid=4074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:48.382000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 01:22:48.398000 audit[4075]: NETFILTER_CFG table=filter:110 family=2 entries=39 op=nft_register_chain pid=4075 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 01:22:48.398000 audit[4075]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=18968 a0=3 a1=ffffcc156cc0 a2=0 a3=ffffa3720fa8 items=0 ppid=3845 pid=4075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:48.398000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 01:22:48.425000 audit[4072]: NETFILTER_CFG table=raw:111 family=2 entries=21 op=nft_register_chain pid=4072 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 01:22:48.425000 audit[4072]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=ffffc023d9b0 a2=0 a3=ffff8c64ffa8 items=0 ppid=3845 pid=4072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:48.425000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 01:22:48.453000 audit[4084]: NETFILTER_CFG table=filter:112 family=2 entries=59 op=nft_register_chain pid=4084 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 01:22:48.453000 audit[4084]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=35860 a0=3 a1=fffff2831cb0 a2=0 a3=ffff8d548fa8 items=0 ppid=3845 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:48.453000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 01:22:49.069278 systemd-networkd[1625]: calia628c622ac0: Gained IPv6LL Sep 6 01:22:49.133328 systemd-networkd[1625]: vxlan.calico: Gained IPv6LL Sep 6 01:22:49.599217 env[1474]: time="2025-09-06T01:22:49.599173837Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:49.609825 env[1474]: time="2025-09-06T01:22:49.609784932Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:270a0129ec34c3ad6ae6d56c0afce111eb0baa25dfdacb63722ec5887bafd3c5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:49.618012 env[1474]: time="2025-09-06T01:22:49.617958663Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:49.629143 env[1474]: time="2025-09-06T01:22:49.629082358Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:e7113761fc7633d515882f0d48b5c8d0b8e62f3f9d34823f2ee194bb16d2ec44,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:49.629623 env[1474]: time="2025-09-06T01:22:49.629590998Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\" returns image reference \"sha256:270a0129ec34c3ad6ae6d56c0afce111eb0baa25dfdacb63722ec5887bafd3c5\"" Sep 6 01:22:49.632394 env[1474]: time="2025-09-06T01:22:49.632340682Z" level=info msg="CreateContainer within sandbox \"955a1f7cfd0a1c9696c6b262d97ab525318386eb1a3547f4c6f6fedf01558780\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Sep 6 01:22:49.691314 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount58729728.mount: Deactivated successfully. Sep 6 01:22:49.715155 env[1474]: time="2025-09-06T01:22:49.715088834Z" level=info msg="CreateContainer within sandbox \"955a1f7cfd0a1c9696c6b262d97ab525318386eb1a3547f4c6f6fedf01558780\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"8082074737c576b6d87795d6f118d6df939e2edc99de19a65b91083b6a934418\"" Sep 6 01:22:49.717198 env[1474]: time="2025-09-06T01:22:49.716092075Z" level=info msg="StartContainer for \"8082074737c576b6d87795d6f118d6df939e2edc99de19a65b91083b6a934418\"" Sep 6 01:22:49.742750 systemd[1]: Started cri-containerd-8082074737c576b6d87795d6f118d6df939e2edc99de19a65b91083b6a934418.scope. Sep 6 01:22:49.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.758000 audit: BPF prog-id=170 op=LOAD Sep 6 01:22:49.759000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.759000 audit[4097]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=4013 pid=4097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:49.759000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830383230373437333763353736623664383737393564366631313864 Sep 6 01:22:49.759000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.759000 audit[4097]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=4013 pid=4097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:49.759000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830383230373437333763353736623664383737393564366631313864 Sep 6 01:22:49.759000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.759000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.759000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.759000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.759000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.759000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.759000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.759000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.759000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.759000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.759000 audit: BPF prog-id=171 op=LOAD Sep 6 01:22:49.759000 audit[4097]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=4013 pid=4097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:49.759000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830383230373437333763353736623664383737393564366631313864 Sep 6 01:22:49.760000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.760000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.760000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.760000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.760000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.760000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.760000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.760000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.760000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.760000 audit: BPF prog-id=172 op=LOAD Sep 6 01:22:49.760000 audit[4097]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=4013 pid=4097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:49.760000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830383230373437333763353736623664383737393564366631313864 Sep 6 01:22:49.761000 audit: BPF prog-id=172 op=UNLOAD Sep 6 01:22:49.761000 audit: BPF prog-id=171 op=UNLOAD Sep 6 01:22:49.761000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.761000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.761000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.761000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.761000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.761000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.761000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.761000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.761000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.761000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.761000 audit: BPF prog-id=173 op=LOAD Sep 6 01:22:49.761000 audit[4097]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=4013 pid=4097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:49.761000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830383230373437333763353736623664383737393564366631313864 Sep 6 01:22:49.790480 env[1474]: time="2025-09-06T01:22:49.790432455Z" level=info msg="StartContainer for \"8082074737c576b6d87795d6f118d6df939e2edc99de19a65b91083b6a934418\" returns successfully" Sep 6 01:22:49.792008 env[1474]: time="2025-09-06T01:22:49.791980257Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\"" Sep 6 01:22:49.793000 audit[4108]: AVC avc: denied { search } for pid=4108 comm="nginx" name="crypto" dev="proc" ino=26842 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c557 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Sep 6 01:22:49.793000 audit[4108]: SYSCALL arch=c00000b7 syscall=56 success=no exit=-13 a0=ffffffffffffff9c a1=ffff84422958 a2=0 a3=0 items=0 ppid=4013 pid=4108 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c434,c557 key=(null) Sep 6 01:22:49.793000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Sep 6 01:22:50.535715 env[1474]: time="2025-09-06T01:22:50.535668173Z" level=info msg="StopPodSandbox for \"a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d\"" Sep 6 01:22:50.627084 env[1474]: 2025-09-06 01:22:50.584 [INFO][4136] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" Sep 6 01:22:50.627084 env[1474]: 2025-09-06 01:22:50.584 [INFO][4136] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" iface="eth0" netns="/var/run/netns/cni-3ea6a392-a5d5-16a2-18cb-745468d58d96" Sep 6 01:22:50.627084 env[1474]: 2025-09-06 01:22:50.585 [INFO][4136] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" iface="eth0" netns="/var/run/netns/cni-3ea6a392-a5d5-16a2-18cb-745468d58d96" Sep 6 01:22:50.627084 env[1474]: 2025-09-06 01:22:50.585 [INFO][4136] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" iface="eth0" netns="/var/run/netns/cni-3ea6a392-a5d5-16a2-18cb-745468d58d96" Sep 6 01:22:50.627084 env[1474]: 2025-09-06 01:22:50.585 [INFO][4136] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" Sep 6 01:22:50.627084 env[1474]: 2025-09-06 01:22:50.585 [INFO][4136] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" Sep 6 01:22:50.627084 env[1474]: 2025-09-06 01:22:50.607 [INFO][4143] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" HandleID="k8s-pod-network.a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--kube--controllers--7748ff464c--46pw5-eth0" Sep 6 01:22:50.627084 env[1474]: 2025-09-06 01:22:50.607 [INFO][4143] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:50.627084 env[1474]: 2025-09-06 01:22:50.607 [INFO][4143] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:50.627084 env[1474]: 2025-09-06 01:22:50.622 [WARNING][4143] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" HandleID="k8s-pod-network.a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--kube--controllers--7748ff464c--46pw5-eth0" Sep 6 01:22:50.627084 env[1474]: 2025-09-06 01:22:50.622 [INFO][4143] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" HandleID="k8s-pod-network.a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--kube--controllers--7748ff464c--46pw5-eth0" Sep 6 01:22:50.627084 env[1474]: 2025-09-06 01:22:50.624 [INFO][4143] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:50.627084 env[1474]: 2025-09-06 01:22:50.625 [INFO][4136] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" Sep 6 01:22:50.627998 env[1474]: time="2025-09-06T01:22:50.627946456Z" level=info msg="TearDown network for sandbox \"a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d\" successfully" Sep 6 01:22:50.628172 env[1474]: time="2025-09-06T01:22:50.628152936Z" level=info msg="StopPodSandbox for \"a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d\" returns successfully" Sep 6 01:22:50.628905 env[1474]: time="2025-09-06T01:22:50.628870617Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7748ff464c-46pw5,Uid:124eeee7-5ce0-48f1-a731-7543dcb4a9e4,Namespace:calico-system,Attempt:1,}" Sep 6 01:22:50.688361 systemd[1]: run-containerd-runc-k8s.io-8082074737c576b6d87795d6f118d6df939e2edc99de19a65b91083b6a934418-runc.QOV3QY.mount: Deactivated successfully. Sep 6 01:22:50.688458 systemd[1]: run-netns-cni\x2d3ea6a392\x2da5d5\x2d16a2\x2d18cb\x2d745468d58d96.mount: Deactivated successfully. Sep 6 01:22:50.841565 systemd-networkd[1625]: cali43012f3c65f: Link UP Sep 6 01:22:50.856006 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 6 01:22:50.856270 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali43012f3c65f: link becomes ready Sep 6 01:22:50.858672 systemd-networkd[1625]: cali43012f3c65f: Gained carrier Sep 6 01:22:50.876958 env[1474]: 2025-09-06 01:22:50.755 [INFO][4151] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--kube--controllers--7748ff464c--46pw5-eth0 calico-kube-controllers-7748ff464c- calico-system 124eeee7-5ce0-48f1-a731-7543dcb4a9e4 946 0 2025-09-06 01:22:29 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:7748ff464c projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ci-3510.3.8-n-b5f8f4c6c5 calico-kube-controllers-7748ff464c-46pw5 eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali43012f3c65f [] [] }} ContainerID="f304f062fc956576ba39004fa94179c3cc72fa5519f5a954b303271cc3b687d7" Namespace="calico-system" Pod="calico-kube-controllers-7748ff464c-46pw5" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--kube--controllers--7748ff464c--46pw5-" Sep 6 01:22:50.876958 env[1474]: 2025-09-06 01:22:50.756 [INFO][4151] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="f304f062fc956576ba39004fa94179c3cc72fa5519f5a954b303271cc3b687d7" Namespace="calico-system" Pod="calico-kube-controllers-7748ff464c-46pw5" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--kube--controllers--7748ff464c--46pw5-eth0" Sep 6 01:22:50.876958 env[1474]: 2025-09-06 01:22:50.784 [INFO][4165] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="f304f062fc956576ba39004fa94179c3cc72fa5519f5a954b303271cc3b687d7" HandleID="k8s-pod-network.f304f062fc956576ba39004fa94179c3cc72fa5519f5a954b303271cc3b687d7" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--kube--controllers--7748ff464c--46pw5-eth0" Sep 6 01:22:50.876958 env[1474]: 2025-09-06 01:22:50.785 [INFO][4165] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="f304f062fc956576ba39004fa94179c3cc72fa5519f5a954b303271cc3b687d7" HandleID="k8s-pod-network.f304f062fc956576ba39004fa94179c3cc72fa5519f5a954b303271cc3b687d7" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--kube--controllers--7748ff464c--46pw5-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d2ff0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-b5f8f4c6c5", "pod":"calico-kube-controllers-7748ff464c-46pw5", "timestamp":"2025-09-06 01:22:50.784898825 +0000 UTC"}, Hostname:"ci-3510.3.8-n-b5f8f4c6c5", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 01:22:50.876958 env[1474]: 2025-09-06 01:22:50.785 [INFO][4165] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:50.876958 env[1474]: 2025-09-06 01:22:50.785 [INFO][4165] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:50.876958 env[1474]: 2025-09-06 01:22:50.785 [INFO][4165] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-b5f8f4c6c5' Sep 6 01:22:50.876958 env[1474]: 2025-09-06 01:22:50.794 [INFO][4165] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.f304f062fc956576ba39004fa94179c3cc72fa5519f5a954b303271cc3b687d7" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:50.876958 env[1474]: 2025-09-06 01:22:50.798 [INFO][4165] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:50.876958 env[1474]: 2025-09-06 01:22:50.806 [INFO][4165] ipam/ipam.go 511: Trying affinity for 192.168.37.192/26 host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:50.876958 env[1474]: 2025-09-06 01:22:50.808 [INFO][4165] ipam/ipam.go 158: Attempting to load block cidr=192.168.37.192/26 host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:50.876958 env[1474]: 2025-09-06 01:22:50.810 [INFO][4165] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.37.192/26 host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:50.876958 env[1474]: 2025-09-06 01:22:50.811 [INFO][4165] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.37.192/26 handle="k8s-pod-network.f304f062fc956576ba39004fa94179c3cc72fa5519f5a954b303271cc3b687d7" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:50.876958 env[1474]: 2025-09-06 01:22:50.812 [INFO][4165] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.f304f062fc956576ba39004fa94179c3cc72fa5519f5a954b303271cc3b687d7 Sep 6 01:22:50.876958 env[1474]: 2025-09-06 01:22:50.821 [INFO][4165] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.37.192/26 handle="k8s-pod-network.f304f062fc956576ba39004fa94179c3cc72fa5519f5a954b303271cc3b687d7" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:50.876958 env[1474]: 2025-09-06 01:22:50.833 [INFO][4165] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.37.194/26] block=192.168.37.192/26 handle="k8s-pod-network.f304f062fc956576ba39004fa94179c3cc72fa5519f5a954b303271cc3b687d7" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:50.876958 env[1474]: 2025-09-06 01:22:50.833 [INFO][4165] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.37.194/26] handle="k8s-pod-network.f304f062fc956576ba39004fa94179c3cc72fa5519f5a954b303271cc3b687d7" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:50.876958 env[1474]: 2025-09-06 01:22:50.833 [INFO][4165] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:50.876958 env[1474]: 2025-09-06 01:22:50.833 [INFO][4165] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.37.194/26] IPv6=[] ContainerID="f304f062fc956576ba39004fa94179c3cc72fa5519f5a954b303271cc3b687d7" HandleID="k8s-pod-network.f304f062fc956576ba39004fa94179c3cc72fa5519f5a954b303271cc3b687d7" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--kube--controllers--7748ff464c--46pw5-eth0" Sep 6 01:22:50.877620 env[1474]: 2025-09-06 01:22:50.835 [INFO][4151] cni-plugin/k8s.go 418: Populated endpoint ContainerID="f304f062fc956576ba39004fa94179c3cc72fa5519f5a954b303271cc3b687d7" Namespace="calico-system" Pod="calico-kube-controllers-7748ff464c-46pw5" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--kube--controllers--7748ff464c--46pw5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--kube--controllers--7748ff464c--46pw5-eth0", GenerateName:"calico-kube-controllers-7748ff464c-", Namespace:"calico-system", SelfLink:"", UID:"124eeee7-5ce0-48f1-a731-7543dcb4a9e4", ResourceVersion:"946", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7748ff464c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-b5f8f4c6c5", ContainerID:"", Pod:"calico-kube-controllers-7748ff464c-46pw5", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.37.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali43012f3c65f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:50.877620 env[1474]: 2025-09-06 01:22:50.835 [INFO][4151] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.37.194/32] ContainerID="f304f062fc956576ba39004fa94179c3cc72fa5519f5a954b303271cc3b687d7" Namespace="calico-system" Pod="calico-kube-controllers-7748ff464c-46pw5" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--kube--controllers--7748ff464c--46pw5-eth0" Sep 6 01:22:50.877620 env[1474]: 2025-09-06 01:22:50.835 [INFO][4151] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali43012f3c65f ContainerID="f304f062fc956576ba39004fa94179c3cc72fa5519f5a954b303271cc3b687d7" Namespace="calico-system" Pod="calico-kube-controllers-7748ff464c-46pw5" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--kube--controllers--7748ff464c--46pw5-eth0" Sep 6 01:22:50.877620 env[1474]: 2025-09-06 01:22:50.857 [INFO][4151] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="f304f062fc956576ba39004fa94179c3cc72fa5519f5a954b303271cc3b687d7" Namespace="calico-system" Pod="calico-kube-controllers-7748ff464c-46pw5" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--kube--controllers--7748ff464c--46pw5-eth0" Sep 6 01:22:50.877620 env[1474]: 2025-09-06 01:22:50.859 [INFO][4151] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="f304f062fc956576ba39004fa94179c3cc72fa5519f5a954b303271cc3b687d7" Namespace="calico-system" Pod="calico-kube-controllers-7748ff464c-46pw5" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--kube--controllers--7748ff464c--46pw5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--kube--controllers--7748ff464c--46pw5-eth0", GenerateName:"calico-kube-controllers-7748ff464c-", Namespace:"calico-system", SelfLink:"", UID:"124eeee7-5ce0-48f1-a731-7543dcb4a9e4", ResourceVersion:"946", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7748ff464c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-b5f8f4c6c5", ContainerID:"f304f062fc956576ba39004fa94179c3cc72fa5519f5a954b303271cc3b687d7", Pod:"calico-kube-controllers-7748ff464c-46pw5", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.37.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali43012f3c65f", MAC:"2e:d3:61:9d:2e:5d", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:50.877620 env[1474]: 2025-09-06 01:22:50.875 [INFO][4151] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="f304f062fc956576ba39004fa94179c3cc72fa5519f5a954b303271cc3b687d7" Namespace="calico-system" Pod="calico-kube-controllers-7748ff464c-46pw5" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--kube--controllers--7748ff464c--46pw5-eth0" Sep 6 01:22:50.902171 kernel: kauditd_printk_skb: 710 callbacks suppressed Sep 6 01:22:50.902351 kernel: audit: type=1325 audit(1757121770.892:1205): table=filter:113 family=2 entries=36 op=nft_register_chain pid=4179 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 01:22:50.892000 audit[4179]: NETFILTER_CFG table=filter:113 family=2 entries=36 op=nft_register_chain pid=4179 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 01:22:50.914207 kernel: audit: type=1300 audit(1757121770.892:1205): arch=c00000b7 syscall=211 success=yes exit=19576 a0=3 a1=fffff6c41db0 a2=0 a3=ffffb3ef5fa8 items=0 ppid=3845 pid=4179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:50.892000 audit[4179]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19576 a0=3 a1=fffff6c41db0 a2=0 a3=ffffb3ef5fa8 items=0 ppid=3845 pid=4179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:50.892000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 01:22:50.959201 kernel: audit: type=1327 audit(1757121770.892:1205): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 01:22:50.978310 env[1474]: time="2025-09-06T01:22:50.978232643Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:22:50.978499 env[1474]: time="2025-09-06T01:22:50.978287843Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:22:50.978499 env[1474]: time="2025-09-06T01:22:50.978298443Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:22:50.978815 env[1474]: time="2025-09-06T01:22:50.978779964Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f304f062fc956576ba39004fa94179c3cc72fa5519f5a954b303271cc3b687d7 pid=4186 runtime=io.containerd.runc.v2 Sep 6 01:22:51.003873 systemd[1]: Started cri-containerd-f304f062fc956576ba39004fa94179c3cc72fa5519f5a954b303271cc3b687d7.scope. Sep 6 01:22:51.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.052403 kernel: audit: type=1400 audit(1757121771.016:1206): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.052561 kernel: audit: type=1400 audit(1757121771.016:1207): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.074720 kernel: audit: type=1400 audit(1757121771.016:1208): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.094695 kernel: audit: type=1400 audit(1757121771.016:1209): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.115888 kernel: audit: type=1400 audit(1757121771.016:1210): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.135063 kernel: audit: type=1400 audit(1757121771.016:1211): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.155157 kernel: audit: type=1400 audit(1757121771.016:1212): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.034000 audit: BPF prog-id=174 op=LOAD Sep 6 01:22:51.034000 audit[4196]: AVC avc: denied { bpf } for pid=4196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.034000 audit[4196]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400019db38 a2=10 a3=0 items=0 ppid=4186 pid=4196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:51.034000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633303466303632666339353635373662613339303034666139343137 Sep 6 01:22:51.034000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.034000 audit[4196]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400019d5a0 a2=3c a3=0 items=0 ppid=4186 pid=4196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:51.034000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633303466303632666339353635373662613339303034666139343137 Sep 6 01:22:51.034000 audit[4196]: AVC avc: denied { bpf } for pid=4196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.034000 audit[4196]: AVC avc: denied { bpf } for pid=4196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.034000 audit[4196]: AVC avc: denied { bpf } for pid=4196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.034000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.034000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.034000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.034000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.034000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.034000 audit[4196]: AVC avc: denied { bpf } for pid=4196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.034000 audit[4196]: AVC avc: denied { bpf } for pid=4196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.034000 audit: BPF prog-id=175 op=LOAD Sep 6 01:22:51.034000 audit[4196]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400019d8e0 a2=78 a3=0 items=0 ppid=4186 pid=4196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:51.034000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633303466303632666339353635373662613339303034666139343137 Sep 6 01:22:51.051000 audit[4196]: AVC avc: denied { bpf } for pid=4196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.051000 audit[4196]: AVC avc: denied { bpf } for pid=4196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.051000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.051000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.051000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.051000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.051000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.051000 audit[4196]: AVC avc: denied { bpf } for pid=4196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.051000 audit[4196]: AVC avc: denied { bpf } for pid=4196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.051000 audit: BPF prog-id=176 op=LOAD Sep 6 01:22:51.051000 audit[4196]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400019d670 a2=78 a3=0 items=0 ppid=4186 pid=4196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:51.051000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633303466303632666339353635373662613339303034666139343137 Sep 6 01:22:51.051000 audit: BPF prog-id=176 op=UNLOAD Sep 6 01:22:51.051000 audit: BPF prog-id=175 op=UNLOAD Sep 6 01:22:51.051000 audit[4196]: AVC avc: denied { bpf } for pid=4196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.051000 audit[4196]: AVC avc: denied { bpf } for pid=4196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.051000 audit[4196]: AVC avc: denied { bpf } for pid=4196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.051000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.051000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.051000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.051000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.051000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.051000 audit[4196]: AVC avc: denied { bpf } for pid=4196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.051000 audit[4196]: AVC avc: denied { bpf } for pid=4196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.051000 audit: BPF prog-id=177 op=LOAD Sep 6 01:22:51.051000 audit[4196]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400019db40 a2=78 a3=0 items=0 ppid=4186 pid=4196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:51.051000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633303466303632666339353635373662613339303034666139343137 Sep 6 01:22:51.173213 env[1474]: time="2025-09-06T01:22:51.173165380Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7748ff464c-46pw5,Uid:124eeee7-5ce0-48f1-a731-7543dcb4a9e4,Namespace:calico-system,Attempt:1,} returns sandbox id \"f304f062fc956576ba39004fa94179c3cc72fa5519f5a954b303271cc3b687d7\"" Sep 6 01:22:51.537617 env[1474]: time="2025-09-06T01:22:51.536491139Z" level=info msg="StopPodSandbox for \"2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6\"" Sep 6 01:22:51.644396 env[1474]: 2025-09-06 01:22:51.590 [INFO][4228] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" Sep 6 01:22:51.644396 env[1474]: 2025-09-06 01:22:51.591 [INFO][4228] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" iface="eth0" netns="/var/run/netns/cni-c54ae6cf-9f34-f6e4-27f8-1c44aa6f8032" Sep 6 01:22:51.644396 env[1474]: 2025-09-06 01:22:51.591 [INFO][4228] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" iface="eth0" netns="/var/run/netns/cni-c54ae6cf-9f34-f6e4-27f8-1c44aa6f8032" Sep 6 01:22:51.644396 env[1474]: 2025-09-06 01:22:51.591 [INFO][4228] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" iface="eth0" netns="/var/run/netns/cni-c54ae6cf-9f34-f6e4-27f8-1c44aa6f8032" Sep 6 01:22:51.644396 env[1474]: 2025-09-06 01:22:51.591 [INFO][4228] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" Sep 6 01:22:51.644396 env[1474]: 2025-09-06 01:22:51.591 [INFO][4228] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" Sep 6 01:22:51.644396 env[1474]: 2025-09-06 01:22:51.616 [INFO][4236] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" HandleID="k8s-pod-network.2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--dk7np-eth0" Sep 6 01:22:51.644396 env[1474]: 2025-09-06 01:22:51.616 [INFO][4236] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:51.644396 env[1474]: 2025-09-06 01:22:51.616 [INFO][4236] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:51.644396 env[1474]: 2025-09-06 01:22:51.638 [WARNING][4236] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" HandleID="k8s-pod-network.2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--dk7np-eth0" Sep 6 01:22:51.644396 env[1474]: 2025-09-06 01:22:51.638 [INFO][4236] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" HandleID="k8s-pod-network.2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--dk7np-eth0" Sep 6 01:22:51.644396 env[1474]: 2025-09-06 01:22:51.640 [INFO][4236] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:51.644396 env[1474]: 2025-09-06 01:22:51.642 [INFO][4228] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" Sep 6 01:22:51.645314 env[1474]: time="2025-09-06T01:22:51.645258163Z" level=info msg="TearDown network for sandbox \"2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6\" successfully" Sep 6 01:22:51.645773 env[1474]: time="2025-09-06T01:22:51.645384523Z" level=info msg="StopPodSandbox for \"2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6\" returns successfully" Sep 6 01:22:51.646450 env[1474]: time="2025-09-06T01:22:51.646418044Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-dk7np,Uid:e7b9d8f2-69b8-4c82-be6b-f97e78bfa002,Namespace:kube-system,Attempt:1,}" Sep 6 01:22:51.689862 systemd[1]: run-containerd-runc-k8s.io-f304f062fc956576ba39004fa94179c3cc72fa5519f5a954b303271cc3b687d7-runc.v4daFf.mount: Deactivated successfully. Sep 6 01:22:51.689965 systemd[1]: run-netns-cni\x2dc54ae6cf\x2d9f34\x2df6e4\x2d27f8\x2d1c44aa6f8032.mount: Deactivated successfully. Sep 6 01:22:51.840774 systemd-networkd[1625]: caliae2d72ab7f9: Link UP Sep 6 01:22:51.857454 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 6 01:22:51.857608 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliae2d72ab7f9: link becomes ready Sep 6 01:22:51.857896 systemd-networkd[1625]: caliae2d72ab7f9: Gained carrier Sep 6 01:22:51.875141 env[1474]: 2025-09-06 01:22:51.760 [INFO][4242] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--dk7np-eth0 coredns-7c65d6cfc9- kube-system e7b9d8f2-69b8-4c82-be6b-f97e78bfa002 956 0 2025-09-06 01:22:10 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.8-n-b5f8f4c6c5 coredns-7c65d6cfc9-dk7np eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] caliae2d72ab7f9 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="935e4e94c9b35726b22c2cc65bf570802b65e4fbf2d4cebe6af0e4d7e0ba5fa1" Namespace="kube-system" Pod="coredns-7c65d6cfc9-dk7np" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--dk7np-" Sep 6 01:22:51.875141 env[1474]: 2025-09-06 01:22:51.760 [INFO][4242] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="935e4e94c9b35726b22c2cc65bf570802b65e4fbf2d4cebe6af0e4d7e0ba5fa1" Namespace="kube-system" Pod="coredns-7c65d6cfc9-dk7np" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--dk7np-eth0" Sep 6 01:22:51.875141 env[1474]: 2025-09-06 01:22:51.790 [INFO][4256] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="935e4e94c9b35726b22c2cc65bf570802b65e4fbf2d4cebe6af0e4d7e0ba5fa1" HandleID="k8s-pod-network.935e4e94c9b35726b22c2cc65bf570802b65e4fbf2d4cebe6af0e4d7e0ba5fa1" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--dk7np-eth0" Sep 6 01:22:51.875141 env[1474]: 2025-09-06 01:22:51.790 [INFO][4256] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="935e4e94c9b35726b22c2cc65bf570802b65e4fbf2d4cebe6af0e4d7e0ba5fa1" HandleID="k8s-pod-network.935e4e94c9b35726b22c2cc65bf570802b65e4fbf2d4cebe6af0e4d7e0ba5fa1" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--dk7np-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400024b820), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.8-n-b5f8f4c6c5", "pod":"coredns-7c65d6cfc9-dk7np", "timestamp":"2025-09-06 01:22:51.790343234 +0000 UTC"}, Hostname:"ci-3510.3.8-n-b5f8f4c6c5", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 01:22:51.875141 env[1474]: 2025-09-06 01:22:51.790 [INFO][4256] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:51.875141 env[1474]: 2025-09-06 01:22:51.790 [INFO][4256] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:51.875141 env[1474]: 2025-09-06 01:22:51.790 [INFO][4256] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-b5f8f4c6c5' Sep 6 01:22:51.875141 env[1474]: 2025-09-06 01:22:51.799 [INFO][4256] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.935e4e94c9b35726b22c2cc65bf570802b65e4fbf2d4cebe6af0e4d7e0ba5fa1" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:51.875141 env[1474]: 2025-09-06 01:22:51.803 [INFO][4256] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:51.875141 env[1474]: 2025-09-06 01:22:51.808 [INFO][4256] ipam/ipam.go 511: Trying affinity for 192.168.37.192/26 host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:51.875141 env[1474]: 2025-09-06 01:22:51.810 [INFO][4256] ipam/ipam.go 158: Attempting to load block cidr=192.168.37.192/26 host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:51.875141 env[1474]: 2025-09-06 01:22:51.812 [INFO][4256] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.37.192/26 host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:51.875141 env[1474]: 2025-09-06 01:22:51.812 [INFO][4256] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.37.192/26 handle="k8s-pod-network.935e4e94c9b35726b22c2cc65bf570802b65e4fbf2d4cebe6af0e4d7e0ba5fa1" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:51.875141 env[1474]: 2025-09-06 01:22:51.813 [INFO][4256] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.935e4e94c9b35726b22c2cc65bf570802b65e4fbf2d4cebe6af0e4d7e0ba5fa1 Sep 6 01:22:51.875141 env[1474]: 2025-09-06 01:22:51.819 [INFO][4256] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.37.192/26 handle="k8s-pod-network.935e4e94c9b35726b22c2cc65bf570802b65e4fbf2d4cebe6af0e4d7e0ba5fa1" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:51.875141 env[1474]: 2025-09-06 01:22:51.828 [INFO][4256] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.37.195/26] block=192.168.37.192/26 handle="k8s-pod-network.935e4e94c9b35726b22c2cc65bf570802b65e4fbf2d4cebe6af0e4d7e0ba5fa1" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:51.875141 env[1474]: 2025-09-06 01:22:51.828 [INFO][4256] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.37.195/26] handle="k8s-pod-network.935e4e94c9b35726b22c2cc65bf570802b65e4fbf2d4cebe6af0e4d7e0ba5fa1" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:51.875141 env[1474]: 2025-09-06 01:22:51.828 [INFO][4256] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:51.875141 env[1474]: 2025-09-06 01:22:51.828 [INFO][4256] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.37.195/26] IPv6=[] ContainerID="935e4e94c9b35726b22c2cc65bf570802b65e4fbf2d4cebe6af0e4d7e0ba5fa1" HandleID="k8s-pod-network.935e4e94c9b35726b22c2cc65bf570802b65e4fbf2d4cebe6af0e4d7e0ba5fa1" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--dk7np-eth0" Sep 6 01:22:51.875840 env[1474]: 2025-09-06 01:22:51.829 [INFO][4242] cni-plugin/k8s.go 418: Populated endpoint ContainerID="935e4e94c9b35726b22c2cc65bf570802b65e4fbf2d4cebe6af0e4d7e0ba5fa1" Namespace="kube-system" Pod="coredns-7c65d6cfc9-dk7np" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--dk7np-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--dk7np-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"e7b9d8f2-69b8-4c82-be6b-f97e78bfa002", ResourceVersion:"956", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-b5f8f4c6c5", ContainerID:"", Pod:"coredns-7c65d6cfc9-dk7np", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.37.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliae2d72ab7f9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:51.875840 env[1474]: 2025-09-06 01:22:51.829 [INFO][4242] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.37.195/32] ContainerID="935e4e94c9b35726b22c2cc65bf570802b65e4fbf2d4cebe6af0e4d7e0ba5fa1" Namespace="kube-system" Pod="coredns-7c65d6cfc9-dk7np" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--dk7np-eth0" Sep 6 01:22:51.875840 env[1474]: 2025-09-06 01:22:51.829 [INFO][4242] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to caliae2d72ab7f9 ContainerID="935e4e94c9b35726b22c2cc65bf570802b65e4fbf2d4cebe6af0e4d7e0ba5fa1" Namespace="kube-system" Pod="coredns-7c65d6cfc9-dk7np" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--dk7np-eth0" Sep 6 01:22:51.875840 env[1474]: 2025-09-06 01:22:51.858 [INFO][4242] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="935e4e94c9b35726b22c2cc65bf570802b65e4fbf2d4cebe6af0e4d7e0ba5fa1" Namespace="kube-system" Pod="coredns-7c65d6cfc9-dk7np" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--dk7np-eth0" Sep 6 01:22:51.875840 env[1474]: 2025-09-06 01:22:51.859 [INFO][4242] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="935e4e94c9b35726b22c2cc65bf570802b65e4fbf2d4cebe6af0e4d7e0ba5fa1" Namespace="kube-system" Pod="coredns-7c65d6cfc9-dk7np" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--dk7np-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--dk7np-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"e7b9d8f2-69b8-4c82-be6b-f97e78bfa002", ResourceVersion:"956", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-b5f8f4c6c5", ContainerID:"935e4e94c9b35726b22c2cc65bf570802b65e4fbf2d4cebe6af0e4d7e0ba5fa1", Pod:"coredns-7c65d6cfc9-dk7np", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.37.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliae2d72ab7f9", MAC:"e6:ea:c2:10:4b:cd", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:51.875840 env[1474]: 2025-09-06 01:22:51.872 [INFO][4242] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="935e4e94c9b35726b22c2cc65bf570802b65e4fbf2d4cebe6af0e4d7e0ba5fa1" Namespace="kube-system" Pod="coredns-7c65d6cfc9-dk7np" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--dk7np-eth0" Sep 6 01:22:51.891000 audit[4271]: NETFILTER_CFG table=filter:114 family=2 entries=52 op=nft_register_chain pid=4271 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 01:22:51.891000 audit[4271]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=26592 a0=3 a1=ffffc5989940 a2=0 a3=ffffb2722fa8 items=0 ppid=3845 pid=4271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:51.891000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 01:22:51.911545 env[1474]: time="2025-09-06T01:22:51.911332633Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:22:51.911545 env[1474]: time="2025-09-06T01:22:51.911371874Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:22:51.911545 env[1474]: time="2025-09-06T01:22:51.911382314Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:22:51.911835 env[1474]: time="2025-09-06T01:22:51.911787634Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/935e4e94c9b35726b22c2cc65bf570802b65e4fbf2d4cebe6af0e4d7e0ba5fa1 pid=4280 runtime=io.containerd.runc.v2 Sep 6 01:22:51.938604 systemd[1]: Started cri-containerd-935e4e94c9b35726b22c2cc65bf570802b65e4fbf2d4cebe6af0e4d7e0ba5fa1.scope. Sep 6 01:22:51.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.952000 audit: BPF prog-id=178 op=LOAD Sep 6 01:22:51.953000 audit[4291]: AVC avc: denied { bpf } for pid=4291 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.953000 audit[4291]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=4280 pid=4291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:51.953000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933356534653934633962333537323662323263326363363562663537 Sep 6 01:22:51.953000 audit[4291]: AVC avc: denied { perfmon } for pid=4291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.953000 audit[4291]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=4280 pid=4291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:51.953000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933356534653934633962333537323662323263326363363562663537 Sep 6 01:22:51.953000 audit[4291]: AVC avc: denied { bpf } for pid=4291 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.953000 audit[4291]: AVC avc: denied { bpf } for pid=4291 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.953000 audit[4291]: AVC avc: denied { bpf } for pid=4291 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.953000 audit[4291]: AVC avc: denied { perfmon } for pid=4291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.953000 audit[4291]: AVC avc: denied { perfmon } for pid=4291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.953000 audit[4291]: AVC avc: denied { perfmon } for pid=4291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.953000 audit[4291]: AVC avc: denied { perfmon } for pid=4291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.953000 audit[4291]: AVC avc: denied { perfmon } for pid=4291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.953000 audit[4291]: AVC avc: denied { bpf } for pid=4291 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.953000 audit[4291]: AVC avc: denied { bpf } for pid=4291 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.953000 audit: BPF prog-id=179 op=LOAD Sep 6 01:22:51.953000 audit[4291]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=4280 pid=4291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:51.953000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933356534653934633962333537323662323263326363363562663537 Sep 6 01:22:51.954000 audit[4291]: AVC avc: denied { bpf } for pid=4291 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.954000 audit[4291]: AVC avc: denied { bpf } for pid=4291 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.954000 audit[4291]: AVC avc: denied { perfmon } for pid=4291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.954000 audit[4291]: AVC avc: denied { perfmon } for pid=4291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.954000 audit[4291]: AVC avc: denied { perfmon } for pid=4291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.954000 audit[4291]: AVC avc: denied { perfmon } for pid=4291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.954000 audit[4291]: AVC avc: denied { perfmon } for pid=4291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.954000 audit[4291]: AVC avc: denied { bpf } for pid=4291 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.954000 audit[4291]: AVC avc: denied { bpf } for pid=4291 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.954000 audit: BPF prog-id=180 op=LOAD Sep 6 01:22:51.954000 audit[4291]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=4280 pid=4291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:51.954000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933356534653934633962333537323662323263326363363562663537 Sep 6 01:22:51.955000 audit: BPF prog-id=180 op=UNLOAD Sep 6 01:22:51.955000 audit: BPF prog-id=179 op=UNLOAD Sep 6 01:22:51.955000 audit[4291]: AVC avc: denied { bpf } for pid=4291 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.955000 audit[4291]: AVC avc: denied { bpf } for pid=4291 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.955000 audit[4291]: AVC avc: denied { bpf } for pid=4291 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.955000 audit[4291]: AVC avc: denied { perfmon } for pid=4291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.955000 audit[4291]: AVC avc: denied { perfmon } for pid=4291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.955000 audit[4291]: AVC avc: denied { perfmon } for pid=4291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.955000 audit[4291]: AVC avc: denied { perfmon } for pid=4291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.955000 audit[4291]: AVC avc: denied { perfmon } for pid=4291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.955000 audit[4291]: AVC avc: denied { bpf } for pid=4291 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.955000 audit[4291]: AVC avc: denied { bpf } for pid=4291 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.955000 audit: BPF prog-id=181 op=LOAD Sep 6 01:22:51.955000 audit[4291]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=4280 pid=4291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:51.955000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933356534653934633962333537323662323263326363363562663537 Sep 6 01:22:51.975365 env[1474]: time="2025-09-06T01:22:51.975231798Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-dk7np,Uid:e7b9d8f2-69b8-4c82-be6b-f97e78bfa002,Namespace:kube-system,Attempt:1,} returns sandbox id \"935e4e94c9b35726b22c2cc65bf570802b65e4fbf2d4cebe6af0e4d7e0ba5fa1\"" Sep 6 01:22:51.979579 env[1474]: time="2025-09-06T01:22:51.979534603Z" level=info msg="CreateContainer within sandbox \"935e4e94c9b35726b22c2cc65bf570802b65e4fbf2d4cebe6af0e4d7e0ba5fa1\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 6 01:22:52.041317 env[1474]: time="2025-09-06T01:22:52.041268164Z" level=info msg="CreateContainer within sandbox \"935e4e94c9b35726b22c2cc65bf570802b65e4fbf2d4cebe6af0e4d7e0ba5fa1\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"3cfb56bd6771a2ce842ed1837b6bb87be66d305a3b6aa9516718f532573549d9\"" Sep 6 01:22:52.042253 env[1474]: time="2025-09-06T01:22:52.042221325Z" level=info msg="StartContainer for \"3cfb56bd6771a2ce842ed1837b6bb87be66d305a3b6aa9516718f532573549d9\"" Sep 6 01:22:52.057421 systemd[1]: Started cri-containerd-3cfb56bd6771a2ce842ed1837b6bb87be66d305a3b6aa9516718f532573549d9.scope. Sep 6 01:22:52.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.072000 audit: BPF prog-id=182 op=LOAD Sep 6 01:22:52.073000 audit[4321]: AVC avc: denied { bpf } for pid=4321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.073000 audit[4321]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400019db38 a2=10 a3=0 items=0 ppid=4280 pid=4321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:52.073000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363666235366264363737316132636538343265643138333762366262 Sep 6 01:22:52.073000 audit[4321]: AVC avc: denied { perfmon } for pid=4321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.073000 audit[4321]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400019d5a0 a2=3c a3=0 items=0 ppid=4280 pid=4321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:52.073000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363666235366264363737316132636538343265643138333762366262 Sep 6 01:22:52.073000 audit[4321]: AVC avc: denied { bpf } for pid=4321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.073000 audit[4321]: AVC avc: denied { bpf } for pid=4321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.073000 audit[4321]: AVC avc: denied { bpf } for pid=4321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.073000 audit[4321]: AVC avc: denied { perfmon } for pid=4321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.073000 audit[4321]: AVC avc: denied { perfmon } for pid=4321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.073000 audit[4321]: AVC avc: denied { perfmon } for pid=4321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.073000 audit[4321]: AVC avc: denied { perfmon } for pid=4321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.073000 audit[4321]: AVC avc: denied { perfmon } for pid=4321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.073000 audit[4321]: AVC avc: denied { bpf } for pid=4321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.073000 audit[4321]: AVC avc: denied { bpf } for pid=4321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.073000 audit: BPF prog-id=183 op=LOAD Sep 6 01:22:52.073000 audit[4321]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400019d8e0 a2=78 a3=0 items=0 ppid=4280 pid=4321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:52.073000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363666235366264363737316132636538343265643138333762366262 Sep 6 01:22:52.073000 audit[4321]: AVC avc: denied { bpf } for pid=4321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.073000 audit[4321]: AVC avc: denied { bpf } for pid=4321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.073000 audit[4321]: AVC avc: denied { perfmon } for pid=4321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.073000 audit[4321]: AVC avc: denied { perfmon } for pid=4321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.073000 audit[4321]: AVC avc: denied { perfmon } for pid=4321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.073000 audit[4321]: AVC avc: denied { perfmon } for pid=4321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.073000 audit[4321]: AVC avc: denied { perfmon } for pid=4321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.073000 audit[4321]: AVC avc: denied { bpf } for pid=4321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.073000 audit[4321]: AVC avc: denied { bpf } for pid=4321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.073000 audit: BPF prog-id=184 op=LOAD Sep 6 01:22:52.073000 audit[4321]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400019d670 a2=78 a3=0 items=0 ppid=4280 pid=4321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:52.073000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363666235366264363737316132636538343265643138333762366262 Sep 6 01:22:52.073000 audit: BPF prog-id=184 op=UNLOAD Sep 6 01:22:52.073000 audit: BPF prog-id=183 op=UNLOAD Sep 6 01:22:52.073000 audit[4321]: AVC avc: denied { bpf } for pid=4321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.073000 audit[4321]: AVC avc: denied { bpf } for pid=4321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.073000 audit[4321]: AVC avc: denied { bpf } for pid=4321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.073000 audit[4321]: AVC avc: denied { perfmon } for pid=4321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.073000 audit[4321]: AVC avc: denied { perfmon } for pid=4321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.073000 audit[4321]: AVC avc: denied { perfmon } for pid=4321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.073000 audit[4321]: AVC avc: denied { perfmon } for pid=4321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.073000 audit[4321]: AVC avc: denied { perfmon } for pid=4321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.073000 audit[4321]: AVC avc: denied { bpf } for pid=4321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.073000 audit[4321]: AVC avc: denied { bpf } for pid=4321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.073000 audit: BPF prog-id=185 op=LOAD Sep 6 01:22:52.073000 audit[4321]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400019db40 a2=78 a3=0 items=0 ppid=4280 pid=4321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:52.073000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363666235366264363737316132636538343265643138333762366262 Sep 6 01:22:52.093028 env[1474]: time="2025-09-06T01:22:52.092882351Z" level=info msg="StartContainer for \"3cfb56bd6771a2ce842ed1837b6bb87be66d305a3b6aa9516718f532573549d9\" returns successfully" Sep 6 01:22:52.101000 audit[4332]: AVC avc: denied { getattr } for pid=4332 comm="coredns" path="cgroup:[4026532658]" dev="nsfs" ino=4026532658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c750 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 6 01:22:52.101000 audit[4332]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056798 a2=400014e578 a3=0 items=0 ppid=4280 pid=4332 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c750 key=(null) Sep 6 01:22:52.101000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 6 01:22:52.205335 systemd-networkd[1625]: cali43012f3c65f: Gained IPv6LL Sep 6 01:22:52.535355 env[1474]: time="2025-09-06T01:22:52.535245568Z" level=info msg="StopPodSandbox for \"210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287\"" Sep 6 01:22:52.623517 env[1474]: 2025-09-06 01:22:52.583 [INFO][4360] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" Sep 6 01:22:52.623517 env[1474]: 2025-09-06 01:22:52.584 [INFO][4360] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" iface="eth0" netns="/var/run/netns/cni-6623530c-bd82-b822-9d41-52879799d5f8" Sep 6 01:22:52.623517 env[1474]: 2025-09-06 01:22:52.585 [INFO][4360] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" iface="eth0" netns="/var/run/netns/cni-6623530c-bd82-b822-9d41-52879799d5f8" Sep 6 01:22:52.623517 env[1474]: 2025-09-06 01:22:52.587 [INFO][4360] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" iface="eth0" netns="/var/run/netns/cni-6623530c-bd82-b822-9d41-52879799d5f8" Sep 6 01:22:52.623517 env[1474]: 2025-09-06 01:22:52.588 [INFO][4360] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" Sep 6 01:22:52.623517 env[1474]: 2025-09-06 01:22:52.588 [INFO][4360] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" Sep 6 01:22:52.623517 env[1474]: 2025-09-06 01:22:52.609 [INFO][4367] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" HandleID="k8s-pod-network.210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--sjx99-eth0" Sep 6 01:22:52.623517 env[1474]: 2025-09-06 01:22:52.610 [INFO][4367] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:52.623517 env[1474]: 2025-09-06 01:22:52.610 [INFO][4367] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:52.623517 env[1474]: 2025-09-06 01:22:52.619 [WARNING][4367] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" HandleID="k8s-pod-network.210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--sjx99-eth0" Sep 6 01:22:52.623517 env[1474]: 2025-09-06 01:22:52.619 [INFO][4367] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" HandleID="k8s-pod-network.210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--sjx99-eth0" Sep 6 01:22:52.623517 env[1474]: 2025-09-06 01:22:52.620 [INFO][4367] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:52.623517 env[1474]: 2025-09-06 01:22:52.622 [INFO][4360] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" Sep 6 01:22:52.624099 env[1474]: time="2025-09-06T01:22:52.624064084Z" level=info msg="TearDown network for sandbox \"210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287\" successfully" Sep 6 01:22:52.624212 env[1474]: time="2025-09-06T01:22:52.624194684Z" level=info msg="StopPodSandbox for \"210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287\" returns successfully" Sep 6 01:22:52.624992 env[1474]: time="2025-09-06T01:22:52.624959045Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64697d84fd-sjx99,Uid:37035637-3da4-419c-9970-0103d9f2a7f3,Namespace:calico-apiserver,Attempt:1,}" Sep 6 01:22:52.691233 systemd[1]: run-containerd-runc-k8s.io-935e4e94c9b35726b22c2cc65bf570802b65e4fbf2d4cebe6af0e4d7e0ba5fa1-runc.uIjkkE.mount: Deactivated successfully. Sep 6 01:22:52.691326 systemd[1]: run-netns-cni\x2d6623530c\x2dbd82\x2db822\x2d9d41\x2d52879799d5f8.mount: Deactivated successfully. Sep 6 01:22:52.790230 kubelet[2507]: I0906 01:22:52.787992 2507 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-dk7np" podStartSLOduration=42.787975338 podStartE2EDuration="42.787975338s" podCreationTimestamp="2025-09-06 01:22:10 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 01:22:52.787584177 +0000 UTC m=+47.367108379" watchObservedRunningTime="2025-09-06 01:22:52.787975338 +0000 UTC m=+47.367499540" Sep 6 01:22:52.823000 audit[4392]: NETFILTER_CFG table=filter:115 family=2 entries=20 op=nft_register_rule pid=4392 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:52.823000 audit[4392]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffd56798d0 a2=0 a3=1 items=0 ppid=2649 pid=4392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:52.823000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:52.828000 audit[4392]: NETFILTER_CFG table=nat:116 family=2 entries=14 op=nft_register_rule pid=4392 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:52.828000 audit[4392]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffd56798d0 a2=0 a3=1 items=0 ppid=2649 pid=4392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:52.828000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:52.842000 audit[4396]: NETFILTER_CFG table=filter:117 family=2 entries=17 op=nft_register_rule pid=4396 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:52.842000 audit[4396]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffc2aa97a0 a2=0 a3=1 items=0 ppid=2649 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:52.844541 systemd-networkd[1625]: cali82439d7b06d: Link UP Sep 6 01:22:52.842000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:52.860185 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 6 01:22:52.860307 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali82439d7b06d: link becomes ready Sep 6 01:22:52.860999 systemd-networkd[1625]: cali82439d7b06d: Gained carrier Sep 6 01:22:52.861000 audit[4396]: NETFILTER_CFG table=nat:118 family=2 entries=35 op=nft_register_chain pid=4396 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:52.861000 audit[4396]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=ffffc2aa97a0 a2=0 a3=1 items=0 ppid=2649 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:52.861000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:52.886087 env[1474]: 2025-09-06 01:22:52.730 [INFO][4373] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--sjx99-eth0 calico-apiserver-64697d84fd- calico-apiserver 37035637-3da4-419c-9970-0103d9f2a7f3 964 0 2025-09-06 01:22:23 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:64697d84fd projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.8-n-b5f8f4c6c5 calico-apiserver-64697d84fd-sjx99 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali82439d7b06d [] [] }} ContainerID="8f546e4b1578e310de5fdd458a831a9bc13b0d407d668f3925e423ab56b423fc" Namespace="calico-apiserver" Pod="calico-apiserver-64697d84fd-sjx99" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--sjx99-" Sep 6 01:22:52.886087 env[1474]: 2025-09-06 01:22:52.730 [INFO][4373] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8f546e4b1578e310de5fdd458a831a9bc13b0d407d668f3925e423ab56b423fc" Namespace="calico-apiserver" Pod="calico-apiserver-64697d84fd-sjx99" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--sjx99-eth0" Sep 6 01:22:52.886087 env[1474]: 2025-09-06 01:22:52.755 [INFO][4385] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8f546e4b1578e310de5fdd458a831a9bc13b0d407d668f3925e423ab56b423fc" HandleID="k8s-pod-network.8f546e4b1578e310de5fdd458a831a9bc13b0d407d668f3925e423ab56b423fc" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--sjx99-eth0" Sep 6 01:22:52.886087 env[1474]: 2025-09-06 01:22:52.755 [INFO][4385] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="8f546e4b1578e310de5fdd458a831a9bc13b0d407d668f3925e423ab56b423fc" HandleID="k8s-pod-network.8f546e4b1578e310de5fdd458a831a9bc13b0d407d668f3925e423ab56b423fc" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--sjx99-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002c3250), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.8-n-b5f8f4c6c5", "pod":"calico-apiserver-64697d84fd-sjx99", "timestamp":"2025-09-06 01:22:52.755090855 +0000 UTC"}, Hostname:"ci-3510.3.8-n-b5f8f4c6c5", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 01:22:52.886087 env[1474]: 2025-09-06 01:22:52.755 [INFO][4385] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:52.886087 env[1474]: 2025-09-06 01:22:52.755 [INFO][4385] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:52.886087 env[1474]: 2025-09-06 01:22:52.755 [INFO][4385] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-b5f8f4c6c5' Sep 6 01:22:52.886087 env[1474]: 2025-09-06 01:22:52.765 [INFO][4385] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8f546e4b1578e310de5fdd458a831a9bc13b0d407d668f3925e423ab56b423fc" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:52.886087 env[1474]: 2025-09-06 01:22:52.779 [INFO][4385] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:52.886087 env[1474]: 2025-09-06 01:22:52.792 [INFO][4385] ipam/ipam.go 511: Trying affinity for 192.168.37.192/26 host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:52.886087 env[1474]: 2025-09-06 01:22:52.800 [INFO][4385] ipam/ipam.go 158: Attempting to load block cidr=192.168.37.192/26 host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:52.886087 env[1474]: 2025-09-06 01:22:52.803 [INFO][4385] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.37.192/26 host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:52.886087 env[1474]: 2025-09-06 01:22:52.803 [INFO][4385] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.37.192/26 handle="k8s-pod-network.8f546e4b1578e310de5fdd458a831a9bc13b0d407d668f3925e423ab56b423fc" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:52.886087 env[1474]: 2025-09-06 01:22:52.810 [INFO][4385] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.8f546e4b1578e310de5fdd458a831a9bc13b0d407d668f3925e423ab56b423fc Sep 6 01:22:52.886087 env[1474]: 2025-09-06 01:22:52.818 [INFO][4385] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.37.192/26 handle="k8s-pod-network.8f546e4b1578e310de5fdd458a831a9bc13b0d407d668f3925e423ab56b423fc" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:52.886087 env[1474]: 2025-09-06 01:22:52.833 [INFO][4385] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.37.196/26] block=192.168.37.192/26 handle="k8s-pod-network.8f546e4b1578e310de5fdd458a831a9bc13b0d407d668f3925e423ab56b423fc" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:52.886087 env[1474]: 2025-09-06 01:22:52.833 [INFO][4385] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.37.196/26] handle="k8s-pod-network.8f546e4b1578e310de5fdd458a831a9bc13b0d407d668f3925e423ab56b423fc" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:52.886087 env[1474]: 2025-09-06 01:22:52.833 [INFO][4385] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:52.886087 env[1474]: 2025-09-06 01:22:52.833 [INFO][4385] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.37.196/26] IPv6=[] ContainerID="8f546e4b1578e310de5fdd458a831a9bc13b0d407d668f3925e423ab56b423fc" HandleID="k8s-pod-network.8f546e4b1578e310de5fdd458a831a9bc13b0d407d668f3925e423ab56b423fc" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--sjx99-eth0" Sep 6 01:22:52.886905 env[1474]: 2025-09-06 01:22:52.835 [INFO][4373] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8f546e4b1578e310de5fdd458a831a9bc13b0d407d668f3925e423ab56b423fc" Namespace="calico-apiserver" Pod="calico-apiserver-64697d84fd-sjx99" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--sjx99-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--sjx99-eth0", GenerateName:"calico-apiserver-64697d84fd-", Namespace:"calico-apiserver", SelfLink:"", UID:"37035637-3da4-419c-9970-0103d9f2a7f3", ResourceVersion:"964", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 23, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64697d84fd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-b5f8f4c6c5", ContainerID:"", Pod:"calico-apiserver-64697d84fd-sjx99", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.37.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali82439d7b06d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:52.886905 env[1474]: 2025-09-06 01:22:52.835 [INFO][4373] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.37.196/32] ContainerID="8f546e4b1578e310de5fdd458a831a9bc13b0d407d668f3925e423ab56b423fc" Namespace="calico-apiserver" Pod="calico-apiserver-64697d84fd-sjx99" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--sjx99-eth0" Sep 6 01:22:52.886905 env[1474]: 2025-09-06 01:22:52.835 [INFO][4373] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali82439d7b06d ContainerID="8f546e4b1578e310de5fdd458a831a9bc13b0d407d668f3925e423ab56b423fc" Namespace="calico-apiserver" Pod="calico-apiserver-64697d84fd-sjx99" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--sjx99-eth0" Sep 6 01:22:52.886905 env[1474]: 2025-09-06 01:22:52.862 [INFO][4373] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8f546e4b1578e310de5fdd458a831a9bc13b0d407d668f3925e423ab56b423fc" Namespace="calico-apiserver" Pod="calico-apiserver-64697d84fd-sjx99" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--sjx99-eth0" Sep 6 01:22:52.886905 env[1474]: 2025-09-06 01:22:52.862 [INFO][4373] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8f546e4b1578e310de5fdd458a831a9bc13b0d407d668f3925e423ab56b423fc" Namespace="calico-apiserver" Pod="calico-apiserver-64697d84fd-sjx99" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--sjx99-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--sjx99-eth0", GenerateName:"calico-apiserver-64697d84fd-", Namespace:"calico-apiserver", SelfLink:"", UID:"37035637-3da4-419c-9970-0103d9f2a7f3", ResourceVersion:"964", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 23, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64697d84fd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-b5f8f4c6c5", ContainerID:"8f546e4b1578e310de5fdd458a831a9bc13b0d407d668f3925e423ab56b423fc", Pod:"calico-apiserver-64697d84fd-sjx99", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.37.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali82439d7b06d", MAC:"d6:2f:f7:41:d0:aa", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:52.886905 env[1474]: 2025-09-06 01:22:52.884 [INFO][4373] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8f546e4b1578e310de5fdd458a831a9bc13b0d407d668f3925e423ab56b423fc" Namespace="calico-apiserver" Pod="calico-apiserver-64697d84fd-sjx99" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--sjx99-eth0" Sep 6 01:22:52.896000 audit[4404]: NETFILTER_CFG table=filter:119 family=2 entries=54 op=nft_register_chain pid=4404 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 01:22:52.896000 audit[4404]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=29380 a0=3 a1=ffffee0f85b0 a2=0 a3=ffff8b574fa8 items=0 ppid=3845 pid=4404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:52.896000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 01:22:52.905906 env[1474]: time="2025-09-06T01:22:52.905847771Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:22:52.906228 env[1474]: time="2025-09-06T01:22:52.906198452Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:22:52.906415 env[1474]: time="2025-09-06T01:22:52.906388732Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:22:52.906655 env[1474]: time="2025-09-06T01:22:52.906629212Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8f546e4b1578e310de5fdd458a831a9bc13b0d407d668f3925e423ab56b423fc pid=4411 runtime=io.containerd.runc.v2 Sep 6 01:22:52.911635 systemd-networkd[1625]: caliae2d72ab7f9: Gained IPv6LL Sep 6 01:22:52.928896 systemd[1]: Started cri-containerd-8f546e4b1578e310de5fdd458a831a9bc13b0d407d668f3925e423ab56b423fc.scope. Sep 6 01:22:52.940204 systemd[1]: run-containerd-runc-k8s.io-8f546e4b1578e310de5fdd458a831a9bc13b0d407d668f3925e423ab56b423fc-runc.jgpJvp.mount: Deactivated successfully. Sep 6 01:22:52.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.956000 audit: BPF prog-id=186 op=LOAD Sep 6 01:22:52.956000 audit[4420]: AVC avc: denied { bpf } for pid=4420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.956000 audit[4420]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4411 pid=4420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:52.956000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866353436653462313537386533313064653566646434353861383331 Sep 6 01:22:52.956000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.956000 audit[4420]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4411 pid=4420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:52.956000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866353436653462313537386533313064653566646434353861383331 Sep 6 01:22:52.957000 audit[4420]: AVC avc: denied { bpf } for pid=4420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.957000 audit[4420]: AVC avc: denied { bpf } for pid=4420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.957000 audit[4420]: AVC avc: denied { bpf } for pid=4420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.957000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.957000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.957000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.957000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.957000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.957000 audit[4420]: AVC avc: denied { bpf } for pid=4420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.957000 audit[4420]: AVC avc: denied { bpf } for pid=4420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.957000 audit: BPF prog-id=187 op=LOAD Sep 6 01:22:52.957000 audit[4420]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4411 pid=4420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:52.957000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866353436653462313537386533313064653566646434353861383331 Sep 6 01:22:52.958000 audit[4420]: AVC avc: denied { bpf } for pid=4420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.958000 audit[4420]: AVC avc: denied { bpf } for pid=4420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.958000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.958000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.958000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.958000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.958000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.958000 audit[4420]: AVC avc: denied { bpf } for pid=4420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.958000 audit[4420]: AVC avc: denied { bpf } for pid=4420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.958000 audit: BPF prog-id=188 op=LOAD Sep 6 01:22:52.958000 audit[4420]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4411 pid=4420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:52.958000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866353436653462313537386533313064653566646434353861383331 Sep 6 01:22:52.958000 audit: BPF prog-id=188 op=UNLOAD Sep 6 01:22:52.959000 audit: BPF prog-id=187 op=UNLOAD Sep 6 01:22:52.959000 audit[4420]: AVC avc: denied { bpf } for pid=4420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.959000 audit[4420]: AVC avc: denied { bpf } for pid=4420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.959000 audit[4420]: AVC avc: denied { bpf } for pid=4420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.959000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.959000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.959000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.959000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.959000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.959000 audit[4420]: AVC avc: denied { bpf } for pid=4420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.959000 audit[4420]: AVC avc: denied { bpf } for pid=4420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:52.959000 audit: BPF prog-id=189 op=LOAD Sep 6 01:22:52.959000 audit[4420]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4411 pid=4420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:52.959000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866353436653462313537386533313064653566646434353861383331 Sep 6 01:22:52.982287 env[1474]: time="2025-09-06T01:22:52.982243991Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64697d84fd-sjx99,Uid:37035637-3da4-419c-9970-0103d9f2a7f3,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"8f546e4b1578e310de5fdd458a831a9bc13b0d407d668f3925e423ab56b423fc\"" Sep 6 01:22:53.537428 env[1474]: time="2025-09-06T01:22:53.537370067Z" level=info msg="StopPodSandbox for \"ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959\"" Sep 6 01:22:53.550050 env[1474]: time="2025-09-06T01:22:53.550008803Z" level=info msg="StopPodSandbox for \"49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655\"" Sep 6 01:22:53.550595 env[1474]: time="2025-09-06T01:22:53.550185604Z" level=info msg="StopPodSandbox for \"9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7\"" Sep 6 01:22:53.551037 env[1474]: time="2025-09-06T01:22:53.550229644Z" level=info msg="StopPodSandbox for \"d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98\"" Sep 6 01:22:53.756285 env[1474]: 2025-09-06 01:22:53.676 [INFO][4497] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" Sep 6 01:22:53.756285 env[1474]: 2025-09-06 01:22:53.676 [INFO][4497] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" iface="eth0" netns="/var/run/netns/cni-3c4dc88d-8433-5243-328e-863afc01bcc7" Sep 6 01:22:53.756285 env[1474]: 2025-09-06 01:22:53.677 [INFO][4497] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" iface="eth0" netns="/var/run/netns/cni-3c4dc88d-8433-5243-328e-863afc01bcc7" Sep 6 01:22:53.756285 env[1474]: 2025-09-06 01:22:53.677 [INFO][4497] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" iface="eth0" netns="/var/run/netns/cni-3c4dc88d-8433-5243-328e-863afc01bcc7" Sep 6 01:22:53.756285 env[1474]: 2025-09-06 01:22:53.677 [INFO][4497] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" Sep 6 01:22:53.756285 env[1474]: 2025-09-06 01:22:53.677 [INFO][4497] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" Sep 6 01:22:53.756285 env[1474]: 2025-09-06 01:22:53.739 [INFO][4528] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" HandleID="k8s-pod-network.d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-csi--node--driver--m9tfk-eth0" Sep 6 01:22:53.756285 env[1474]: 2025-09-06 01:22:53.739 [INFO][4528] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:53.756285 env[1474]: 2025-09-06 01:22:53.739 [INFO][4528] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:53.756285 env[1474]: 2025-09-06 01:22:53.751 [WARNING][4528] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" HandleID="k8s-pod-network.d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-csi--node--driver--m9tfk-eth0" Sep 6 01:22:53.756285 env[1474]: 2025-09-06 01:22:53.751 [INFO][4528] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" HandleID="k8s-pod-network.d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-csi--node--driver--m9tfk-eth0" Sep 6 01:22:53.756285 env[1474]: 2025-09-06 01:22:53.753 [INFO][4528] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:53.756285 env[1474]: 2025-09-06 01:22:53.755 [INFO][4497] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" Sep 6 01:22:53.761198 systemd[1]: run-netns-cni\x2d3c4dc88d\x2d8433\x2d5243\x2d328e\x2d863afc01bcc7.mount: Deactivated successfully. Sep 6 01:22:53.762272 env[1474]: time="2025-09-06T01:22:53.761884437Z" level=info msg="TearDown network for sandbox \"d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98\" successfully" Sep 6 01:22:53.762272 env[1474]: time="2025-09-06T01:22:53.761927917Z" level=info msg="StopPodSandbox for \"d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98\" returns successfully" Sep 6 01:22:53.762737 env[1474]: time="2025-09-06T01:22:53.762711878Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-m9tfk,Uid:04a7e183-4c51-4aa6-b31d-7efe6ca81746,Namespace:calico-system,Attempt:1,}" Sep 6 01:22:53.797425 env[1474]: 2025-09-06 01:22:53.635 [INFO][4487] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" Sep 6 01:22:53.797425 env[1474]: 2025-09-06 01:22:53.635 [INFO][4487] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" iface="eth0" netns="/var/run/netns/cni-2dc40017-fa6d-3f83-a179-c1bfd089c42b" Sep 6 01:22:53.797425 env[1474]: 2025-09-06 01:22:53.636 [INFO][4487] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" iface="eth0" netns="/var/run/netns/cni-2dc40017-fa6d-3f83-a179-c1bfd089c42b" Sep 6 01:22:53.797425 env[1474]: 2025-09-06 01:22:53.636 [INFO][4487] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" iface="eth0" netns="/var/run/netns/cni-2dc40017-fa6d-3f83-a179-c1bfd089c42b" Sep 6 01:22:53.797425 env[1474]: 2025-09-06 01:22:53.636 [INFO][4487] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" Sep 6 01:22:53.797425 env[1474]: 2025-09-06 01:22:53.636 [INFO][4487] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" Sep 6 01:22:53.797425 env[1474]: 2025-09-06 01:22:53.765 [INFO][4522] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" HandleID="k8s-pod-network.ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-goldmane--7988f88666--xjt8j-eth0" Sep 6 01:22:53.797425 env[1474]: 2025-09-06 01:22:53.765 [INFO][4522] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:53.797425 env[1474]: 2025-09-06 01:22:53.766 [INFO][4522] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:53.797425 env[1474]: 2025-09-06 01:22:53.779 [WARNING][4522] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" HandleID="k8s-pod-network.ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-goldmane--7988f88666--xjt8j-eth0" Sep 6 01:22:53.797425 env[1474]: 2025-09-06 01:22:53.779 [INFO][4522] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" HandleID="k8s-pod-network.ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-goldmane--7988f88666--xjt8j-eth0" Sep 6 01:22:53.797425 env[1474]: 2025-09-06 01:22:53.783 [INFO][4522] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:53.797425 env[1474]: 2025-09-06 01:22:53.789 [INFO][4487] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" Sep 6 01:22:53.802206 systemd[1]: run-netns-cni\x2d2dc40017\x2dfa6d\x2d3f83\x2da179\x2dc1bfd089c42b.mount: Deactivated successfully. Sep 6 01:22:53.803715 env[1474]: time="2025-09-06T01:22:53.802908690Z" level=info msg="TearDown network for sandbox \"ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959\" successfully" Sep 6 01:22:53.803715 env[1474]: time="2025-09-06T01:22:53.802952330Z" level=info msg="StopPodSandbox for \"ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959\" returns successfully" Sep 6 01:22:53.804427 env[1474]: time="2025-09-06T01:22:53.803872691Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-7988f88666-xjt8j,Uid:173204e3-49e1-4a48-a5e0-d8016e50ca28,Namespace:calico-system,Attempt:1,}" Sep 6 01:22:53.828925 env[1474]: 2025-09-06 01:22:53.729 [INFO][4512] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" Sep 6 01:22:53.828925 env[1474]: 2025-09-06 01:22:53.730 [INFO][4512] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" iface="eth0" netns="/var/run/netns/cni-82a83fd2-5ba0-c320-38e7-9886a0f76554" Sep 6 01:22:53.828925 env[1474]: 2025-09-06 01:22:53.730 [INFO][4512] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" iface="eth0" netns="/var/run/netns/cni-82a83fd2-5ba0-c320-38e7-9886a0f76554" Sep 6 01:22:53.828925 env[1474]: 2025-09-06 01:22:53.730 [INFO][4512] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" iface="eth0" netns="/var/run/netns/cni-82a83fd2-5ba0-c320-38e7-9886a0f76554" Sep 6 01:22:53.828925 env[1474]: 2025-09-06 01:22:53.730 [INFO][4512] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" Sep 6 01:22:53.828925 env[1474]: 2025-09-06 01:22:53.730 [INFO][4512] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" Sep 6 01:22:53.828925 env[1474]: 2025-09-06 01:22:53.788 [INFO][4541] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" HandleID="k8s-pod-network.49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--zsbc4-eth0" Sep 6 01:22:53.828925 env[1474]: 2025-09-06 01:22:53.789 [INFO][4541] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:53.828925 env[1474]: 2025-09-06 01:22:53.789 [INFO][4541] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:53.828925 env[1474]: 2025-09-06 01:22:53.804 [WARNING][4541] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" HandleID="k8s-pod-network.49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--zsbc4-eth0" Sep 6 01:22:53.828925 env[1474]: 2025-09-06 01:22:53.805 [INFO][4541] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" HandleID="k8s-pod-network.49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--zsbc4-eth0" Sep 6 01:22:53.828925 env[1474]: 2025-09-06 01:22:53.806 [INFO][4541] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:53.828925 env[1474]: 2025-09-06 01:22:53.808 [INFO][4512] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" Sep 6 01:22:53.829726 env[1474]: time="2025-09-06T01:22:53.829687764Z" level=info msg="TearDown network for sandbox \"49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655\" successfully" Sep 6 01:22:53.829820 env[1474]: time="2025-09-06T01:22:53.829804404Z" level=info msg="StopPodSandbox for \"49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655\" returns successfully" Sep 6 01:22:53.830567 env[1474]: time="2025-09-06T01:22:53.830537765Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-zsbc4,Uid:4639beed-680f-4604-a20a-d9cafa08e5ea,Namespace:kube-system,Attempt:1,}" Sep 6 01:22:53.840049 env[1474]: 2025-09-06 01:22:53.695 [INFO][4501] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" Sep 6 01:22:53.840049 env[1474]: 2025-09-06 01:22:53.695 [INFO][4501] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" iface="eth0" netns="/var/run/netns/cni-3c824e17-638e-7e39-3fab-214daad0920b" Sep 6 01:22:53.840049 env[1474]: 2025-09-06 01:22:53.698 [INFO][4501] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" iface="eth0" netns="/var/run/netns/cni-3c824e17-638e-7e39-3fab-214daad0920b" Sep 6 01:22:53.840049 env[1474]: 2025-09-06 01:22:53.702 [INFO][4501] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" iface="eth0" netns="/var/run/netns/cni-3c824e17-638e-7e39-3fab-214daad0920b" Sep 6 01:22:53.840049 env[1474]: 2025-09-06 01:22:53.702 [INFO][4501] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" Sep 6 01:22:53.840049 env[1474]: 2025-09-06 01:22:53.702 [INFO][4501] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" Sep 6 01:22:53.840049 env[1474]: 2025-09-06 01:22:53.810 [INFO][4534] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" HandleID="k8s-pod-network.9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--9hmdg-eth0" Sep 6 01:22:53.840049 env[1474]: 2025-09-06 01:22:53.810 [INFO][4534] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:53.840049 env[1474]: 2025-09-06 01:22:53.811 [INFO][4534] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:53.840049 env[1474]: 2025-09-06 01:22:53.833 [WARNING][4534] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" HandleID="k8s-pod-network.9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--9hmdg-eth0" Sep 6 01:22:53.840049 env[1474]: 2025-09-06 01:22:53.833 [INFO][4534] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" HandleID="k8s-pod-network.9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--9hmdg-eth0" Sep 6 01:22:53.840049 env[1474]: 2025-09-06 01:22:53.836 [INFO][4534] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:53.840049 env[1474]: 2025-09-06 01:22:53.837 [INFO][4501] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" Sep 6 01:22:53.840487 env[1474]: time="2025-09-06T01:22:53.840183378Z" level=info msg="TearDown network for sandbox \"9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7\" successfully" Sep 6 01:22:53.840487 env[1474]: time="2025-09-06T01:22:53.840215658Z" level=info msg="StopPodSandbox for \"9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7\" returns successfully" Sep 6 01:22:53.841253 env[1474]: time="2025-09-06T01:22:53.841080779Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64697d84fd-9hmdg,Uid:d17efce8-fa93-4bdb-81af-efc70b288052,Namespace:calico-apiserver,Attempt:1,}" Sep 6 01:22:54.004293 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 6 01:22:54.004424 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali1ff5741151e: link becomes ready Sep 6 01:22:54.009638 systemd-networkd[1625]: cali1ff5741151e: Link UP Sep 6 01:22:54.009892 systemd-networkd[1625]: cali1ff5741151e: Gained carrier Sep 6 01:22:54.042632 env[1474]: 2025-09-06 01:22:53.878 [INFO][4551] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--b5f8f4c6c5-k8s-csi--node--driver--m9tfk-eth0 csi-node-driver- calico-system 04a7e183-4c51-4aa6-b31d-7efe6ca81746 985 0 2025-09-06 01:22:29 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:856c6b598f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s ci-3510.3.8-n-b5f8f4c6c5 csi-node-driver-m9tfk eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali1ff5741151e [] [] }} ContainerID="6826830f58a59d20430b78300cbd495455821fdb8fcea4ffe3a1f3984d726c54" Namespace="calico-system" Pod="csi-node-driver-m9tfk" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-csi--node--driver--m9tfk-" Sep 6 01:22:54.042632 env[1474]: 2025-09-06 01:22:53.878 [INFO][4551] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="6826830f58a59d20430b78300cbd495455821fdb8fcea4ffe3a1f3984d726c54" Namespace="calico-system" Pod="csi-node-driver-m9tfk" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-csi--node--driver--m9tfk-eth0" Sep 6 01:22:54.042632 env[1474]: 2025-09-06 01:22:53.924 [INFO][4563] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="6826830f58a59d20430b78300cbd495455821fdb8fcea4ffe3a1f3984d726c54" HandleID="k8s-pod-network.6826830f58a59d20430b78300cbd495455821fdb8fcea4ffe3a1f3984d726c54" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-csi--node--driver--m9tfk-eth0" Sep 6 01:22:54.042632 env[1474]: 2025-09-06 01:22:53.924 [INFO][4563] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="6826830f58a59d20430b78300cbd495455821fdb8fcea4ffe3a1f3984d726c54" HandleID="k8s-pod-network.6826830f58a59d20430b78300cbd495455821fdb8fcea4ffe3a1f3984d726c54" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-csi--node--driver--m9tfk-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d2ff0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-b5f8f4c6c5", "pod":"csi-node-driver-m9tfk", "timestamp":"2025-09-06 01:22:53.924527766 +0000 UTC"}, Hostname:"ci-3510.3.8-n-b5f8f4c6c5", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 01:22:54.042632 env[1474]: 2025-09-06 01:22:53.924 [INFO][4563] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:54.042632 env[1474]: 2025-09-06 01:22:53.924 [INFO][4563] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:54.042632 env[1474]: 2025-09-06 01:22:53.925 [INFO][4563] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-b5f8f4c6c5' Sep 6 01:22:54.042632 env[1474]: 2025-09-06 01:22:53.941 [INFO][4563] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.6826830f58a59d20430b78300cbd495455821fdb8fcea4ffe3a1f3984d726c54" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.042632 env[1474]: 2025-09-06 01:22:53.945 [INFO][4563] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.042632 env[1474]: 2025-09-06 01:22:53.950 [INFO][4563] ipam/ipam.go 511: Trying affinity for 192.168.37.192/26 host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.042632 env[1474]: 2025-09-06 01:22:53.952 [INFO][4563] ipam/ipam.go 158: Attempting to load block cidr=192.168.37.192/26 host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.042632 env[1474]: 2025-09-06 01:22:53.955 [INFO][4563] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.37.192/26 host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.042632 env[1474]: 2025-09-06 01:22:53.955 [INFO][4563] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.37.192/26 handle="k8s-pod-network.6826830f58a59d20430b78300cbd495455821fdb8fcea4ffe3a1f3984d726c54" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.042632 env[1474]: 2025-09-06 01:22:53.957 [INFO][4563] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.6826830f58a59d20430b78300cbd495455821fdb8fcea4ffe3a1f3984d726c54 Sep 6 01:22:54.042632 env[1474]: 2025-09-06 01:22:53.964 [INFO][4563] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.37.192/26 handle="k8s-pod-network.6826830f58a59d20430b78300cbd495455821fdb8fcea4ffe3a1f3984d726c54" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.042632 env[1474]: 2025-09-06 01:22:53.978 [INFO][4563] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.37.197/26] block=192.168.37.192/26 handle="k8s-pod-network.6826830f58a59d20430b78300cbd495455821fdb8fcea4ffe3a1f3984d726c54" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.042632 env[1474]: 2025-09-06 01:22:53.978 [INFO][4563] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.37.197/26] handle="k8s-pod-network.6826830f58a59d20430b78300cbd495455821fdb8fcea4ffe3a1f3984d726c54" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.042632 env[1474]: 2025-09-06 01:22:53.978 [INFO][4563] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:54.042632 env[1474]: 2025-09-06 01:22:53.978 [INFO][4563] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.37.197/26] IPv6=[] ContainerID="6826830f58a59d20430b78300cbd495455821fdb8fcea4ffe3a1f3984d726c54" HandleID="k8s-pod-network.6826830f58a59d20430b78300cbd495455821fdb8fcea4ffe3a1f3984d726c54" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-csi--node--driver--m9tfk-eth0" Sep 6 01:22:54.043431 env[1474]: 2025-09-06 01:22:53.980 [INFO][4551] cni-plugin/k8s.go 418: Populated endpoint ContainerID="6826830f58a59d20430b78300cbd495455821fdb8fcea4ffe3a1f3984d726c54" Namespace="calico-system" Pod="csi-node-driver-m9tfk" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-csi--node--driver--m9tfk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--b5f8f4c6c5-k8s-csi--node--driver--m9tfk-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"04a7e183-4c51-4aa6-b31d-7efe6ca81746", ResourceVersion:"985", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"856c6b598f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-b5f8f4c6c5", ContainerID:"", Pod:"csi-node-driver-m9tfk", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.37.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali1ff5741151e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:54.043431 env[1474]: 2025-09-06 01:22:53.981 [INFO][4551] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.37.197/32] ContainerID="6826830f58a59d20430b78300cbd495455821fdb8fcea4ffe3a1f3984d726c54" Namespace="calico-system" Pod="csi-node-driver-m9tfk" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-csi--node--driver--m9tfk-eth0" Sep 6 01:22:54.043431 env[1474]: 2025-09-06 01:22:53.981 [INFO][4551] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali1ff5741151e ContainerID="6826830f58a59d20430b78300cbd495455821fdb8fcea4ffe3a1f3984d726c54" Namespace="calico-system" Pod="csi-node-driver-m9tfk" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-csi--node--driver--m9tfk-eth0" Sep 6 01:22:54.043431 env[1474]: 2025-09-06 01:22:54.009 [INFO][4551] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="6826830f58a59d20430b78300cbd495455821fdb8fcea4ffe3a1f3984d726c54" Namespace="calico-system" Pod="csi-node-driver-m9tfk" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-csi--node--driver--m9tfk-eth0" Sep 6 01:22:54.043431 env[1474]: 2025-09-06 01:22:54.015 [INFO][4551] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="6826830f58a59d20430b78300cbd495455821fdb8fcea4ffe3a1f3984d726c54" Namespace="calico-system" Pod="csi-node-driver-m9tfk" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-csi--node--driver--m9tfk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--b5f8f4c6c5-k8s-csi--node--driver--m9tfk-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"04a7e183-4c51-4aa6-b31d-7efe6ca81746", ResourceVersion:"985", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"856c6b598f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-b5f8f4c6c5", ContainerID:"6826830f58a59d20430b78300cbd495455821fdb8fcea4ffe3a1f3984d726c54", Pod:"csi-node-driver-m9tfk", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.37.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali1ff5741151e", MAC:"5e:b5:1a:6e:bd:d5", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:54.043431 env[1474]: 2025-09-06 01:22:54.039 [INFO][4551] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="6826830f58a59d20430b78300cbd495455821fdb8fcea4ffe3a1f3984d726c54" Namespace="calico-system" Pod="csi-node-driver-m9tfk" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-csi--node--driver--m9tfk-eth0" Sep 6 01:22:54.095000 audit[4602]: NETFILTER_CFG table=filter:120 family=2 entries=44 op=nft_register_chain pid=4602 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 01:22:54.095000 audit[4602]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=21936 a0=3 a1=ffffdfeb6980 a2=0 a3=ffff8366dfa8 items=0 ppid=3845 pid=4602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.095000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 01:22:54.126355 systemd-networkd[1625]: cali82439d7b06d: Gained IPv6LL Sep 6 01:22:54.172177 env[1474]: time="2025-09-06T01:22:54.172096683Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:22:54.172390 env[1474]: time="2025-09-06T01:22:54.172364364Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:22:54.172478 env[1474]: time="2025-09-06T01:22:54.172457324Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:22:54.173608 env[1474]: time="2025-09-06T01:22:54.173564685Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6826830f58a59d20430b78300cbd495455821fdb8fcea4ffe3a1f3984d726c54 pid=4620 runtime=io.containerd.runc.v2 Sep 6 01:22:54.218836 systemd[1]: Started cri-containerd-6826830f58a59d20430b78300cbd495455821fdb8fcea4ffe3a1f3984d726c54.scope. Sep 6 01:22:54.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.406000 audit: BPF prog-id=190 op=LOAD Sep 6 01:22:54.407000 audit[4640]: AVC avc: denied { bpf } for pid=4640 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.407000 audit[4640]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4620 pid=4640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638323638333066353861353964323034333062373833303063626434 Sep 6 01:22:54.407000 audit[4640]: AVC avc: denied { perfmon } for pid=4640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.407000 audit[4640]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4620 pid=4640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638323638333066353861353964323034333062373833303063626434 Sep 6 01:22:54.407000 audit[4640]: AVC avc: denied { bpf } for pid=4640 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.407000 audit[4640]: AVC avc: denied { bpf } for pid=4640 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.407000 audit[4640]: AVC avc: denied { bpf } for pid=4640 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.407000 audit[4640]: AVC avc: denied { perfmon } for pid=4640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.407000 audit[4640]: AVC avc: denied { perfmon } for pid=4640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.407000 audit[4640]: AVC avc: denied { perfmon } for pid=4640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.407000 audit[4640]: AVC avc: denied { perfmon } for pid=4640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.407000 audit[4640]: AVC avc: denied { perfmon } for pid=4640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.407000 audit[4640]: AVC avc: denied { bpf } for pid=4640 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.407000 audit[4640]: AVC avc: denied { bpf } for pid=4640 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.407000 audit: BPF prog-id=191 op=LOAD Sep 6 01:22:54.407000 audit[4640]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4620 pid=4640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638323638333066353861353964323034333062373833303063626434 Sep 6 01:22:54.407000 audit[4640]: AVC avc: denied { bpf } for pid=4640 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.407000 audit[4640]: AVC avc: denied { bpf } for pid=4640 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.407000 audit[4640]: AVC avc: denied { perfmon } for pid=4640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.407000 audit[4640]: AVC avc: denied { perfmon } for pid=4640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.407000 audit[4640]: AVC avc: denied { perfmon } for pid=4640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.407000 audit[4640]: AVC avc: denied { perfmon } for pid=4640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.407000 audit[4640]: AVC avc: denied { perfmon } for pid=4640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.407000 audit[4640]: AVC avc: denied { bpf } for pid=4640 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.407000 audit[4640]: AVC avc: denied { bpf } for pid=4640 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.407000 audit: BPF prog-id=192 op=LOAD Sep 6 01:22:54.407000 audit[4640]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4620 pid=4640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638323638333066353861353964323034333062373833303063626434 Sep 6 01:22:54.407000 audit: BPF prog-id=192 op=UNLOAD Sep 6 01:22:54.407000 audit: BPF prog-id=191 op=UNLOAD Sep 6 01:22:54.407000 audit[4640]: AVC avc: denied { bpf } for pid=4640 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.407000 audit[4640]: AVC avc: denied { bpf } for pid=4640 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.407000 audit[4640]: AVC avc: denied { bpf } for pid=4640 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.407000 audit[4640]: AVC avc: denied { perfmon } for pid=4640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.407000 audit[4640]: AVC avc: denied { perfmon } for pid=4640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.407000 audit[4640]: AVC avc: denied { perfmon } for pid=4640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.407000 audit[4640]: AVC avc: denied { perfmon } for pid=4640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.407000 audit[4640]: AVC avc: denied { perfmon } for pid=4640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.407000 audit[4640]: AVC avc: denied { bpf } for pid=4640 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.407000 audit[4640]: AVC avc: denied { bpf } for pid=4640 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.407000 audit: BPF prog-id=193 op=LOAD Sep 6 01:22:54.407000 audit[4640]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4620 pid=4640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638323638333066353861353964323034333062373833303063626434 Sep 6 01:22:54.419946 systemd-networkd[1625]: calic7236724690: Link UP Sep 6 01:22:54.430376 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic7236724690: link becomes ready Sep 6 01:22:54.430412 systemd-networkd[1625]: calic7236724690: Gained carrier Sep 6 01:22:54.454508 env[1474]: 2025-09-06 01:22:54.133 [INFO][4573] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--b5f8f4c6c5-k8s-goldmane--7988f88666--xjt8j-eth0 goldmane-7988f88666- calico-system 173204e3-49e1-4a48-a5e0-d8016e50ca28 984 0 2025-09-06 01:22:29 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:7988f88666 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s ci-3510.3.8-n-b5f8f4c6c5 goldmane-7988f88666-xjt8j eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] calic7236724690 [] [] }} ContainerID="985e765694a63153bf88adeb25ade6b5106a73b49c4951fb0eb15c58b7195b96" Namespace="calico-system" Pod="goldmane-7988f88666-xjt8j" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-goldmane--7988f88666--xjt8j-" Sep 6 01:22:54.454508 env[1474]: 2025-09-06 01:22:54.133 [INFO][4573] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="985e765694a63153bf88adeb25ade6b5106a73b49c4951fb0eb15c58b7195b96" Namespace="calico-system" Pod="goldmane-7988f88666-xjt8j" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-goldmane--7988f88666--xjt8j-eth0" Sep 6 01:22:54.454508 env[1474]: 2025-09-06 01:22:54.278 [INFO][4624] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="985e765694a63153bf88adeb25ade6b5106a73b49c4951fb0eb15c58b7195b96" HandleID="k8s-pod-network.985e765694a63153bf88adeb25ade6b5106a73b49c4951fb0eb15c58b7195b96" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-goldmane--7988f88666--xjt8j-eth0" Sep 6 01:22:54.454508 env[1474]: 2025-09-06 01:22:54.289 [INFO][4624] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="985e765694a63153bf88adeb25ade6b5106a73b49c4951fb0eb15c58b7195b96" HandleID="k8s-pod-network.985e765694a63153bf88adeb25ade6b5106a73b49c4951fb0eb15c58b7195b96" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-goldmane--7988f88666--xjt8j-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400024b790), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-b5f8f4c6c5", "pod":"goldmane-7988f88666-xjt8j", "timestamp":"2025-09-06 01:22:54.275128895 +0000 UTC"}, Hostname:"ci-3510.3.8-n-b5f8f4c6c5", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 01:22:54.454508 env[1474]: 2025-09-06 01:22:54.289 [INFO][4624] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:54.454508 env[1474]: 2025-09-06 01:22:54.289 [INFO][4624] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:54.454508 env[1474]: 2025-09-06 01:22:54.290 [INFO][4624] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-b5f8f4c6c5' Sep 6 01:22:54.454508 env[1474]: 2025-09-06 01:22:54.326 [INFO][4624] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.985e765694a63153bf88adeb25ade6b5106a73b49c4951fb0eb15c58b7195b96" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.454508 env[1474]: 2025-09-06 01:22:54.335 [INFO][4624] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.454508 env[1474]: 2025-09-06 01:22:54.365 [INFO][4624] ipam/ipam.go 511: Trying affinity for 192.168.37.192/26 host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.454508 env[1474]: 2025-09-06 01:22:54.375 [INFO][4624] ipam/ipam.go 158: Attempting to load block cidr=192.168.37.192/26 host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.454508 env[1474]: 2025-09-06 01:22:54.390 [INFO][4624] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.37.192/26 host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.454508 env[1474]: 2025-09-06 01:22:54.390 [INFO][4624] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.37.192/26 handle="k8s-pod-network.985e765694a63153bf88adeb25ade6b5106a73b49c4951fb0eb15c58b7195b96" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.454508 env[1474]: 2025-09-06 01:22:54.394 [INFO][4624] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.985e765694a63153bf88adeb25ade6b5106a73b49c4951fb0eb15c58b7195b96 Sep 6 01:22:54.454508 env[1474]: 2025-09-06 01:22:54.399 [INFO][4624] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.37.192/26 handle="k8s-pod-network.985e765694a63153bf88adeb25ade6b5106a73b49c4951fb0eb15c58b7195b96" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.454508 env[1474]: 2025-09-06 01:22:54.411 [INFO][4624] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.37.198/26] block=192.168.37.192/26 handle="k8s-pod-network.985e765694a63153bf88adeb25ade6b5106a73b49c4951fb0eb15c58b7195b96" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.454508 env[1474]: 2025-09-06 01:22:54.411 [INFO][4624] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.37.198/26] handle="k8s-pod-network.985e765694a63153bf88adeb25ade6b5106a73b49c4951fb0eb15c58b7195b96" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.454508 env[1474]: 2025-09-06 01:22:54.411 [INFO][4624] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:54.454508 env[1474]: 2025-09-06 01:22:54.411 [INFO][4624] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.37.198/26] IPv6=[] ContainerID="985e765694a63153bf88adeb25ade6b5106a73b49c4951fb0eb15c58b7195b96" HandleID="k8s-pod-network.985e765694a63153bf88adeb25ade6b5106a73b49c4951fb0eb15c58b7195b96" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-goldmane--7988f88666--xjt8j-eth0" Sep 6 01:22:54.455191 env[1474]: 2025-09-06 01:22:54.413 [INFO][4573] cni-plugin/k8s.go 418: Populated endpoint ContainerID="985e765694a63153bf88adeb25ade6b5106a73b49c4951fb0eb15c58b7195b96" Namespace="calico-system" Pod="goldmane-7988f88666-xjt8j" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-goldmane--7988f88666--xjt8j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--b5f8f4c6c5-k8s-goldmane--7988f88666--xjt8j-eth0", GenerateName:"goldmane-7988f88666-", Namespace:"calico-system", SelfLink:"", UID:"173204e3-49e1-4a48-a5e0-d8016e50ca28", ResourceVersion:"984", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"7988f88666", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-b5f8f4c6c5", ContainerID:"", Pod:"goldmane-7988f88666-xjt8j", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.37.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic7236724690", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:54.455191 env[1474]: 2025-09-06 01:22:54.413 [INFO][4573] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.37.198/32] ContainerID="985e765694a63153bf88adeb25ade6b5106a73b49c4951fb0eb15c58b7195b96" Namespace="calico-system" Pod="goldmane-7988f88666-xjt8j" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-goldmane--7988f88666--xjt8j-eth0" Sep 6 01:22:54.455191 env[1474]: 2025-09-06 01:22:54.413 [INFO][4573] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic7236724690 ContainerID="985e765694a63153bf88adeb25ade6b5106a73b49c4951fb0eb15c58b7195b96" Namespace="calico-system" Pod="goldmane-7988f88666-xjt8j" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-goldmane--7988f88666--xjt8j-eth0" Sep 6 01:22:54.455191 env[1474]: 2025-09-06 01:22:54.432 [INFO][4573] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="985e765694a63153bf88adeb25ade6b5106a73b49c4951fb0eb15c58b7195b96" Namespace="calico-system" Pod="goldmane-7988f88666-xjt8j" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-goldmane--7988f88666--xjt8j-eth0" Sep 6 01:22:54.455191 env[1474]: 2025-09-06 01:22:54.434 [INFO][4573] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="985e765694a63153bf88adeb25ade6b5106a73b49c4951fb0eb15c58b7195b96" Namespace="calico-system" Pod="goldmane-7988f88666-xjt8j" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-goldmane--7988f88666--xjt8j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--b5f8f4c6c5-k8s-goldmane--7988f88666--xjt8j-eth0", GenerateName:"goldmane-7988f88666-", Namespace:"calico-system", SelfLink:"", UID:"173204e3-49e1-4a48-a5e0-d8016e50ca28", ResourceVersion:"984", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"7988f88666", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-b5f8f4c6c5", ContainerID:"985e765694a63153bf88adeb25ade6b5106a73b49c4951fb0eb15c58b7195b96", Pod:"goldmane-7988f88666-xjt8j", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.37.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic7236724690", MAC:"66:c3:2a:03:c8:57", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:54.455191 env[1474]: 2025-09-06 01:22:54.451 [INFO][4573] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="985e765694a63153bf88adeb25ade6b5106a73b49c4951fb0eb15c58b7195b96" Namespace="calico-system" Pod="goldmane-7988f88666-xjt8j" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-goldmane--7988f88666--xjt8j-eth0" Sep 6 01:22:54.460636 env[1474]: time="2025-09-06T01:22:54.460277971Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-m9tfk,Uid:04a7e183-4c51-4aa6-b31d-7efe6ca81746,Namespace:calico-system,Attempt:1,} returns sandbox id \"6826830f58a59d20430b78300cbd495455821fdb8fcea4ffe3a1f3984d726c54\"" Sep 6 01:22:54.496000 audit[4685]: NETFILTER_CFG table=filter:121 family=2 entries=56 op=nft_register_chain pid=4685 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 01:22:54.496000 audit[4685]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=28728 a0=3 a1=ffffd5d428c0 a2=0 a3=ffffa0badfa8 items=0 ppid=3845 pid=4685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.496000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 01:22:54.510320 systemd-networkd[1625]: cali92408de5bd4: Link UP Sep 6 01:22:54.522202 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali92408de5bd4: link becomes ready Sep 6 01:22:54.522692 systemd-networkd[1625]: cali92408de5bd4: Gained carrier Sep 6 01:22:54.540817 env[1474]: 2025-09-06 01:22:54.138 [INFO][4583] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--zsbc4-eth0 coredns-7c65d6cfc9- kube-system 4639beed-680f-4604-a20a-d9cafa08e5ea 987 0 2025-09-06 01:22:10 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.8-n-b5f8f4c6c5 coredns-7c65d6cfc9-zsbc4 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali92408de5bd4 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="27653604c4dc25661efad2f744852521531e7a6355854ce9109334d3c31b1475" Namespace="kube-system" Pod="coredns-7c65d6cfc9-zsbc4" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--zsbc4-" Sep 6 01:22:54.540817 env[1474]: 2025-09-06 01:22:54.139 [INFO][4583] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="27653604c4dc25661efad2f744852521531e7a6355854ce9109334d3c31b1475" Namespace="kube-system" Pod="coredns-7c65d6cfc9-zsbc4" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--zsbc4-eth0" Sep 6 01:22:54.540817 env[1474]: 2025-09-06 01:22:54.272 [INFO][4629] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="27653604c4dc25661efad2f744852521531e7a6355854ce9109334d3c31b1475" HandleID="k8s-pod-network.27653604c4dc25661efad2f744852521531e7a6355854ce9109334d3c31b1475" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--zsbc4-eth0" Sep 6 01:22:54.540817 env[1474]: 2025-09-06 01:22:54.289 [INFO][4629] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="27653604c4dc25661efad2f744852521531e7a6355854ce9109334d3c31b1475" HandleID="k8s-pod-network.27653604c4dc25661efad2f744852521531e7a6355854ce9109334d3c31b1475" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--zsbc4-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d3600), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.8-n-b5f8f4c6c5", "pod":"coredns-7c65d6cfc9-zsbc4", "timestamp":"2025-09-06 01:22:54.272639332 +0000 UTC"}, Hostname:"ci-3510.3.8-n-b5f8f4c6c5", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 01:22:54.540817 env[1474]: 2025-09-06 01:22:54.289 [INFO][4629] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:54.540817 env[1474]: 2025-09-06 01:22:54.411 [INFO][4629] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:54.540817 env[1474]: 2025-09-06 01:22:54.411 [INFO][4629] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-b5f8f4c6c5' Sep 6 01:22:54.540817 env[1474]: 2025-09-06 01:22:54.442 [INFO][4629] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.27653604c4dc25661efad2f744852521531e7a6355854ce9109334d3c31b1475" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.540817 env[1474]: 2025-09-06 01:22:54.458 [INFO][4629] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.540817 env[1474]: 2025-09-06 01:22:54.465 [INFO][4629] ipam/ipam.go 511: Trying affinity for 192.168.37.192/26 host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.540817 env[1474]: 2025-09-06 01:22:54.468 [INFO][4629] ipam/ipam.go 158: Attempting to load block cidr=192.168.37.192/26 host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.540817 env[1474]: 2025-09-06 01:22:54.472 [INFO][4629] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.37.192/26 host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.540817 env[1474]: 2025-09-06 01:22:54.472 [INFO][4629] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.37.192/26 handle="k8s-pod-network.27653604c4dc25661efad2f744852521531e7a6355854ce9109334d3c31b1475" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.540817 env[1474]: 2025-09-06 01:22:54.478 [INFO][4629] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.27653604c4dc25661efad2f744852521531e7a6355854ce9109334d3c31b1475 Sep 6 01:22:54.540817 env[1474]: 2025-09-06 01:22:54.488 [INFO][4629] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.37.192/26 handle="k8s-pod-network.27653604c4dc25661efad2f744852521531e7a6355854ce9109334d3c31b1475" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.540817 env[1474]: 2025-09-06 01:22:54.501 [INFO][4629] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.37.199/26] block=192.168.37.192/26 handle="k8s-pod-network.27653604c4dc25661efad2f744852521531e7a6355854ce9109334d3c31b1475" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.540817 env[1474]: 2025-09-06 01:22:54.501 [INFO][4629] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.37.199/26] handle="k8s-pod-network.27653604c4dc25661efad2f744852521531e7a6355854ce9109334d3c31b1475" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.540817 env[1474]: 2025-09-06 01:22:54.502 [INFO][4629] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:54.540817 env[1474]: 2025-09-06 01:22:54.502 [INFO][4629] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.37.199/26] IPv6=[] ContainerID="27653604c4dc25661efad2f744852521531e7a6355854ce9109334d3c31b1475" HandleID="k8s-pod-network.27653604c4dc25661efad2f744852521531e7a6355854ce9109334d3c31b1475" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--zsbc4-eth0" Sep 6 01:22:54.541498 env[1474]: 2025-09-06 01:22:54.503 [INFO][4583] cni-plugin/k8s.go 418: Populated endpoint ContainerID="27653604c4dc25661efad2f744852521531e7a6355854ce9109334d3c31b1475" Namespace="kube-system" Pod="coredns-7c65d6cfc9-zsbc4" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--zsbc4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--zsbc4-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"4639beed-680f-4604-a20a-d9cafa08e5ea", ResourceVersion:"987", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-b5f8f4c6c5", ContainerID:"", Pod:"coredns-7c65d6cfc9-zsbc4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.37.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali92408de5bd4", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:54.541498 env[1474]: 2025-09-06 01:22:54.505 [INFO][4583] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.37.199/32] ContainerID="27653604c4dc25661efad2f744852521531e7a6355854ce9109334d3c31b1475" Namespace="kube-system" Pod="coredns-7c65d6cfc9-zsbc4" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--zsbc4-eth0" Sep 6 01:22:54.541498 env[1474]: 2025-09-06 01:22:54.505 [INFO][4583] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali92408de5bd4 ContainerID="27653604c4dc25661efad2f744852521531e7a6355854ce9109334d3c31b1475" Namespace="kube-system" Pod="coredns-7c65d6cfc9-zsbc4" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--zsbc4-eth0" Sep 6 01:22:54.541498 env[1474]: 2025-09-06 01:22:54.523 [INFO][4583] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="27653604c4dc25661efad2f744852521531e7a6355854ce9109334d3c31b1475" Namespace="kube-system" Pod="coredns-7c65d6cfc9-zsbc4" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--zsbc4-eth0" Sep 6 01:22:54.541498 env[1474]: 2025-09-06 01:22:54.523 [INFO][4583] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="27653604c4dc25661efad2f744852521531e7a6355854ce9109334d3c31b1475" Namespace="kube-system" Pod="coredns-7c65d6cfc9-zsbc4" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--zsbc4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--zsbc4-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"4639beed-680f-4604-a20a-d9cafa08e5ea", ResourceVersion:"987", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-b5f8f4c6c5", ContainerID:"27653604c4dc25661efad2f744852521531e7a6355854ce9109334d3c31b1475", Pod:"coredns-7c65d6cfc9-zsbc4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.37.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali92408de5bd4", MAC:"86:2c:45:1e:29:c6", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:54.541498 env[1474]: 2025-09-06 01:22:54.538 [INFO][4583] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="27653604c4dc25661efad2f744852521531e7a6355854ce9109334d3c31b1475" Namespace="kube-system" Pod="coredns-7c65d6cfc9-zsbc4" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--zsbc4-eth0" Sep 6 01:22:54.553803 env[1474]: time="2025-09-06T01:22:54.553719730Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:22:54.553803 env[1474]: time="2025-09-06T01:22:54.553760810Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:22:54.553803 env[1474]: time="2025-09-06T01:22:54.553770730Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:22:54.555243 env[1474]: time="2025-09-06T01:22:54.553970690Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/985e765694a63153bf88adeb25ade6b5106a73b49c4951fb0eb15c58b7195b96 pid=4701 runtime=io.containerd.runc.v2 Sep 6 01:22:54.577369 systemd[1]: Started cri-containerd-985e765694a63153bf88adeb25ade6b5106a73b49c4951fb0eb15c58b7195b96.scope. Sep 6 01:22:54.593749 env[1474]: time="2025-09-06T01:22:54.593664981Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:22:54.593749 env[1474]: time="2025-09-06T01:22:54.593713461Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:22:54.593941 env[1474]: time="2025-09-06T01:22:54.593724501Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:22:54.593941 env[1474]: time="2025-09-06T01:22:54.593841861Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/27653604c4dc25661efad2f744852521531e7a6355854ce9109334d3c31b1475 pid=4736 runtime=io.containerd.runc.v2 Sep 6 01:22:54.608222 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic4e36c4174d: link becomes ready Sep 6 01:22:54.608721 systemd-networkd[1625]: calic4e36c4174d: Link UP Sep 6 01:22:54.609073 systemd-networkd[1625]: calic4e36c4174d: Gained carrier Sep 6 01:22:54.610000 audit[4732]: NETFILTER_CFG table=filter:122 family=2 entries=48 op=nft_register_chain pid=4732 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 01:22:54.610000 audit[4732]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=22704 a0=3 a1=ffffd3ff1d60 a2=0 a3=ffffac034fa8 items=0 ppid=3845 pid=4732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.610000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 01:22:54.632608 systemd[1]: Started cri-containerd-27653604c4dc25661efad2f744852521531e7a6355854ce9109334d3c31b1475.scope. Sep 6 01:22:54.637061 env[1474]: time="2025-09-06T01:22:54.637013876Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:54.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.637000 audit: BPF prog-id=194 op=LOAD Sep 6 01:22:54.639815 env[1474]: 2025-09-06 01:22:54.197 [INFO][4597] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--9hmdg-eth0 calico-apiserver-64697d84fd- calico-apiserver d17efce8-fa93-4bdb-81af-efc70b288052 986 0 2025-09-06 01:22:23 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:64697d84fd projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.8-n-b5f8f4c6c5 calico-apiserver-64697d84fd-9hmdg eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calic4e36c4174d [] [] }} ContainerID="a95b15e4d73e8039744828997b15f4cbd038d29f2d08d1128e78893a1414a197" Namespace="calico-apiserver" Pod="calico-apiserver-64697d84fd-9hmdg" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--9hmdg-" Sep 6 01:22:54.639815 env[1474]: 2025-09-06 01:22:54.197 [INFO][4597] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="a95b15e4d73e8039744828997b15f4cbd038d29f2d08d1128e78893a1414a197" Namespace="calico-apiserver" Pod="calico-apiserver-64697d84fd-9hmdg" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--9hmdg-eth0" Sep 6 01:22:54.639815 env[1474]: 2025-09-06 01:22:54.319 [INFO][4653] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a95b15e4d73e8039744828997b15f4cbd038d29f2d08d1128e78893a1414a197" HandleID="k8s-pod-network.a95b15e4d73e8039744828997b15f4cbd038d29f2d08d1128e78893a1414a197" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--9hmdg-eth0" Sep 6 01:22:54.639815 env[1474]: 2025-09-06 01:22:54.319 [INFO][4653] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="a95b15e4d73e8039744828997b15f4cbd038d29f2d08d1128e78893a1414a197" HandleID="k8s-pod-network.a95b15e4d73e8039744828997b15f4cbd038d29f2d08d1128e78893a1414a197" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--9hmdg-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400024aff0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.8-n-b5f8f4c6c5", "pod":"calico-apiserver-64697d84fd-9hmdg", "timestamp":"2025-09-06 01:22:54.319318431 +0000 UTC"}, Hostname:"ci-3510.3.8-n-b5f8f4c6c5", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 01:22:54.639815 env[1474]: 2025-09-06 01:22:54.322 [INFO][4653] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:54.639815 env[1474]: 2025-09-06 01:22:54.501 [INFO][4653] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:54.639815 env[1474]: 2025-09-06 01:22:54.501 [INFO][4653] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-b5f8f4c6c5' Sep 6 01:22:54.639815 env[1474]: 2025-09-06 01:22:54.536 [INFO][4653] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.a95b15e4d73e8039744828997b15f4cbd038d29f2d08d1128e78893a1414a197" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.639815 env[1474]: 2025-09-06 01:22:54.559 [INFO][4653] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.639815 env[1474]: 2025-09-06 01:22:54.563 [INFO][4653] ipam/ipam.go 511: Trying affinity for 192.168.37.192/26 host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.639815 env[1474]: 2025-09-06 01:22:54.565 [INFO][4653] ipam/ipam.go 158: Attempting to load block cidr=192.168.37.192/26 host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.639815 env[1474]: 2025-09-06 01:22:54.569 [INFO][4653] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.37.192/26 host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.639815 env[1474]: 2025-09-06 01:22:54.573 [INFO][4653] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.37.192/26 handle="k8s-pod-network.a95b15e4d73e8039744828997b15f4cbd038d29f2d08d1128e78893a1414a197" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.639815 env[1474]: 2025-09-06 01:22:54.578 [INFO][4653] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.a95b15e4d73e8039744828997b15f4cbd038d29f2d08d1128e78893a1414a197 Sep 6 01:22:54.639815 env[1474]: 2025-09-06 01:22:54.585 [INFO][4653] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.37.192/26 handle="k8s-pod-network.a95b15e4d73e8039744828997b15f4cbd038d29f2d08d1128e78893a1414a197" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.639815 env[1474]: 2025-09-06 01:22:54.597 [INFO][4653] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.37.200/26] block=192.168.37.192/26 handle="k8s-pod-network.a95b15e4d73e8039744828997b15f4cbd038d29f2d08d1128e78893a1414a197" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.639815 env[1474]: 2025-09-06 01:22:54.597 [INFO][4653] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.37.200/26] handle="k8s-pod-network.a95b15e4d73e8039744828997b15f4cbd038d29f2d08d1128e78893a1414a197" host="ci-3510.3.8-n-b5f8f4c6c5" Sep 6 01:22:54.639815 env[1474]: 2025-09-06 01:22:54.597 [INFO][4653] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:54.639815 env[1474]: 2025-09-06 01:22:54.597 [INFO][4653] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.37.200/26] IPv6=[] ContainerID="a95b15e4d73e8039744828997b15f4cbd038d29f2d08d1128e78893a1414a197" HandleID="k8s-pod-network.a95b15e4d73e8039744828997b15f4cbd038d29f2d08d1128e78893a1414a197" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--9hmdg-eth0" Sep 6 01:22:54.640390 env[1474]: 2025-09-06 01:22:54.599 [INFO][4597] cni-plugin/k8s.go 418: Populated endpoint ContainerID="a95b15e4d73e8039744828997b15f4cbd038d29f2d08d1128e78893a1414a197" Namespace="calico-apiserver" Pod="calico-apiserver-64697d84fd-9hmdg" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--9hmdg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--9hmdg-eth0", GenerateName:"calico-apiserver-64697d84fd-", Namespace:"calico-apiserver", SelfLink:"", UID:"d17efce8-fa93-4bdb-81af-efc70b288052", ResourceVersion:"986", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 23, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64697d84fd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-b5f8f4c6c5", ContainerID:"", Pod:"calico-apiserver-64697d84fd-9hmdg", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.37.200/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic4e36c4174d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:54.640390 env[1474]: 2025-09-06 01:22:54.599 [INFO][4597] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.37.200/32] ContainerID="a95b15e4d73e8039744828997b15f4cbd038d29f2d08d1128e78893a1414a197" Namespace="calico-apiserver" Pod="calico-apiserver-64697d84fd-9hmdg" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--9hmdg-eth0" Sep 6 01:22:54.640390 env[1474]: 2025-09-06 01:22:54.599 [INFO][4597] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic4e36c4174d ContainerID="a95b15e4d73e8039744828997b15f4cbd038d29f2d08d1128e78893a1414a197" Namespace="calico-apiserver" Pod="calico-apiserver-64697d84fd-9hmdg" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--9hmdg-eth0" Sep 6 01:22:54.640390 env[1474]: 2025-09-06 01:22:54.613 [INFO][4597] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="a95b15e4d73e8039744828997b15f4cbd038d29f2d08d1128e78893a1414a197" Namespace="calico-apiserver" Pod="calico-apiserver-64697d84fd-9hmdg" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--9hmdg-eth0" Sep 6 01:22:54.640390 env[1474]: 2025-09-06 01:22:54.614 [INFO][4597] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="a95b15e4d73e8039744828997b15f4cbd038d29f2d08d1128e78893a1414a197" Namespace="calico-apiserver" Pod="calico-apiserver-64697d84fd-9hmdg" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--9hmdg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--9hmdg-eth0", GenerateName:"calico-apiserver-64697d84fd-", Namespace:"calico-apiserver", SelfLink:"", UID:"d17efce8-fa93-4bdb-81af-efc70b288052", ResourceVersion:"986", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 23, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64697d84fd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-b5f8f4c6c5", ContainerID:"a95b15e4d73e8039744828997b15f4cbd038d29f2d08d1128e78893a1414a197", Pod:"calico-apiserver-64697d84fd-9hmdg", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.37.200/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic4e36c4174d", MAC:"32:dc:35:32:be:79", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:54.640390 env[1474]: 2025-09-06 01:22:54.634 [INFO][4597] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="a95b15e4d73e8039744828997b15f4cbd038d29f2d08d1128e78893a1414a197" Namespace="calico-apiserver" Pod="calico-apiserver-64697d84fd-9hmdg" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--9hmdg-eth0" Sep 6 01:22:54.639000 audit[4712]: AVC avc: denied { bpf } for pid=4712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.639000 audit[4712]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4701 pid=4712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.639000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938356537363536393461363331353362663838616465623235616465 Sep 6 01:22:54.639000 audit[4712]: AVC avc: denied { perfmon } for pid=4712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.639000 audit[4712]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4701 pid=4712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.639000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938356537363536393461363331353362663838616465623235616465 Sep 6 01:22:54.640000 audit[4712]: AVC avc: denied { bpf } for pid=4712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.640000 audit[4712]: AVC avc: denied { bpf } for pid=4712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.640000 audit[4712]: AVC avc: denied { bpf } for pid=4712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.640000 audit[4712]: AVC avc: denied { perfmon } for pid=4712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.640000 audit[4712]: AVC avc: denied { perfmon } for pid=4712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.640000 audit[4712]: AVC avc: denied { perfmon } for pid=4712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.640000 audit[4712]: AVC avc: denied { perfmon } for pid=4712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.640000 audit[4712]: AVC avc: denied { perfmon } for pid=4712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.640000 audit[4712]: AVC avc: denied { bpf } for pid=4712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.640000 audit[4712]: AVC avc: denied { bpf } for pid=4712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.640000 audit: BPF prog-id=195 op=LOAD Sep 6 01:22:54.640000 audit[4712]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4701 pid=4712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.640000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938356537363536393461363331353362663838616465623235616465 Sep 6 01:22:54.640000 audit[4712]: AVC avc: denied { bpf } for pid=4712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.640000 audit[4712]: AVC avc: denied { bpf } for pid=4712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.640000 audit[4712]: AVC avc: denied { perfmon } for pid=4712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.640000 audit[4712]: AVC avc: denied { perfmon } for pid=4712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.640000 audit[4712]: AVC avc: denied { perfmon } for pid=4712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.640000 audit[4712]: AVC avc: denied { perfmon } for pid=4712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.640000 audit[4712]: AVC avc: denied { perfmon } for pid=4712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.640000 audit[4712]: AVC avc: denied { bpf } for pid=4712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.640000 audit[4712]: AVC avc: denied { bpf } for pid=4712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.640000 audit: BPF prog-id=196 op=LOAD Sep 6 01:22:54.640000 audit[4712]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4701 pid=4712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.640000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938356537363536393461363331353362663838616465623235616465 Sep 6 01:22:54.646000 audit: BPF prog-id=196 op=UNLOAD Sep 6 01:22:54.646000 audit: BPF prog-id=195 op=UNLOAD Sep 6 01:22:54.646000 audit[4712]: AVC avc: denied { bpf } for pid=4712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.646000 audit[4712]: AVC avc: denied { bpf } for pid=4712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.646000 audit[4712]: AVC avc: denied { bpf } for pid=4712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.646000 audit[4712]: AVC avc: denied { perfmon } for pid=4712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.646000 audit[4712]: AVC avc: denied { perfmon } for pid=4712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.646000 audit[4712]: AVC avc: denied { perfmon } for pid=4712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.646000 audit[4712]: AVC avc: denied { perfmon } for pid=4712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.646000 audit[4712]: AVC avc: denied { perfmon } for pid=4712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.646000 audit[4712]: AVC avc: denied { bpf } for pid=4712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.646000 audit[4712]: AVC avc: denied { bpf } for pid=4712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.646000 audit: BPF prog-id=197 op=LOAD Sep 6 01:22:54.646000 audit[4712]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4701 pid=4712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.646000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938356537363536393461363331353362663838616465623235616465 Sep 6 01:22:54.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.657000 audit: BPF prog-id=198 op=LOAD Sep 6 01:22:54.660000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.660000 audit[4748]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4736 pid=4748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.660000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237363533363034633464633235363631656661643266373434383532 Sep 6 01:22:54.660000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.660000 audit[4748]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4736 pid=4748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.660000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237363533363034633464633235363631656661643266373434383532 Sep 6 01:22:54.661000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.661000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.661000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.661000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.661000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.661000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.661000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.661000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.661000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.661000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.661000 audit: BPF prog-id=199 op=LOAD Sep 6 01:22:54.661000 audit[4748]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4736 pid=4748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.661000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237363533363034633464633235363631656661643266373434383532 Sep 6 01:22:54.665000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.665000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.665000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.665000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.665000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.665000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.665000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.665000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.665000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.665000 audit: BPF prog-id=200 op=LOAD Sep 6 01:22:54.665000 audit[4748]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4736 pid=4748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237363533363034633464633235363631656661643266373434383532 Sep 6 01:22:54.666000 audit: BPF prog-id=200 op=UNLOAD Sep 6 01:22:54.667800 env[1474]: time="2025-09-06T01:22:54.667765596Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e210e86234bc99f018431b30477c5ca2ad6f7ecf67ef011498f7beb48fb0b21f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:54.667000 audit: BPF prog-id=199 op=UNLOAD Sep 6 01:22:54.667000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.667000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.667000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.667000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.667000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.667000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.667000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.667000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.667000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.667000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.667000 audit: BPF prog-id=201 op=LOAD Sep 6 01:22:54.667000 audit[4748]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4736 pid=4748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.667000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237363533363034633464633235363631656661643266373434383532 Sep 6 01:22:54.680205 env[1474]: time="2025-09-06T01:22:54.680160971Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:54.682000 audit[4781]: NETFILTER_CFG table=filter:123 family=2 entries=63 op=nft_register_chain pid=4781 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 01:22:54.682000 audit[4781]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=30664 a0=3 a1=ffffdc408610 a2=0 a3=ffffa934afa8 items=0 ppid=3845 pid=4781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.682000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 01:22:54.693137 env[1474]: time="2025-09-06T01:22:54.690912065Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:22:54.693137 env[1474]: time="2025-09-06T01:22:54.691004865Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:22:54.693137 env[1474]: time="2025-09-06T01:22:54.691031825Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:22:54.693137 env[1474]: time="2025-09-06T01:22:54.691187985Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a95b15e4d73e8039744828997b15f4cbd038d29f2d08d1128e78893a1414a197 pid=4789 runtime=io.containerd.runc.v2 Sep 6 01:22:54.693827 env[1474]: time="2025-09-06T01:22:54.693673349Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:29becebc47401da9997a2a30f4c25c511a5f379d17275680b048224829af71a5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:54.694459 env[1474]: time="2025-09-06T01:22:54.694428030Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\" returns image reference \"sha256:e210e86234bc99f018431b30477c5ca2ad6f7ecf67ef011498f7beb48fb0b21f\"" Sep 6 01:22:54.700797 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount689024165.mount: Deactivated successfully. Sep 6 01:22:54.700898 systemd[1]: run-netns-cni\x2d3c824e17\x2d638e\x2d7e39\x2d3fab\x2d214daad0920b.mount: Deactivated successfully. Sep 6 01:22:54.700942 systemd[1]: run-netns-cni\x2d82a83fd2\x2d5ba0\x2dc320\x2d38e7\x2d9886a0f76554.mount: Deactivated successfully. Sep 6 01:22:54.715239 env[1474]: time="2025-09-06T01:22:54.715180576Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\"" Sep 6 01:22:54.720072 env[1474]: time="2025-09-06T01:22:54.720029662Z" level=info msg="CreateContainer within sandbox \"955a1f7cfd0a1c9696c6b262d97ab525318386eb1a3547f4c6f6fedf01558780\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Sep 6 01:22:54.738447 env[1474]: time="2025-09-06T01:22:54.738391566Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-zsbc4,Uid:4639beed-680f-4604-a20a-d9cafa08e5ea,Namespace:kube-system,Attempt:1,} returns sandbox id \"27653604c4dc25661efad2f744852521531e7a6355854ce9109334d3c31b1475\"" Sep 6 01:22:54.738759 env[1474]: time="2025-09-06T01:22:54.738710846Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-7988f88666-xjt8j,Uid:173204e3-49e1-4a48-a5e0-d8016e50ca28,Namespace:calico-system,Attempt:1,} returns sandbox id \"985e765694a63153bf88adeb25ade6b5106a73b49c4951fb0eb15c58b7195b96\"" Sep 6 01:22:54.744032 env[1474]: time="2025-09-06T01:22:54.743977813Z" level=info msg="CreateContainer within sandbox \"27653604c4dc25661efad2f744852521531e7a6355854ce9109334d3c31b1475\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 6 01:22:54.771218 systemd[1]: Started cri-containerd-a95b15e4d73e8039744828997b15f4cbd038d29f2d08d1128e78893a1414a197.scope. Sep 6 01:22:54.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.785000 audit: BPF prog-id=202 op=LOAD Sep 6 01:22:54.787000 audit[4812]: AVC avc: denied { bpf } for pid=4812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.787000 audit[4812]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4789 pid=4812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139356231356534643733653830333937343438323839393762313566 Sep 6 01:22:54.787000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.787000 audit[4812]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4789 pid=4812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139356231356534643733653830333937343438323839393762313566 Sep 6 01:22:54.788000 audit[4812]: AVC avc: denied { bpf } for pid=4812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.788000 audit[4812]: AVC avc: denied { bpf } for pid=4812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.788000 audit[4812]: AVC avc: denied { bpf } for pid=4812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.788000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.788000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.788000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.788000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.788000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.788000 audit[4812]: AVC avc: denied { bpf } for pid=4812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.788000 audit[4812]: AVC avc: denied { bpf } for pid=4812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.788000 audit: BPF prog-id=203 op=LOAD Sep 6 01:22:54.788000 audit[4812]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4789 pid=4812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.788000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139356231356534643733653830333937343438323839393762313566 Sep 6 01:22:54.788000 audit[4812]: AVC avc: denied { bpf } for pid=4812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.788000 audit[4812]: AVC avc: denied { bpf } for pid=4812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.788000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.788000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.788000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.788000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.788000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.788000 audit[4812]: AVC avc: denied { bpf } for pid=4812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.788000 audit[4812]: AVC avc: denied { bpf } for pid=4812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.788000 audit: BPF prog-id=204 op=LOAD Sep 6 01:22:54.788000 audit[4812]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4789 pid=4812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.788000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139356231356534643733653830333937343438323839393762313566 Sep 6 01:22:54.788000 audit: BPF prog-id=204 op=UNLOAD Sep 6 01:22:54.788000 audit: BPF prog-id=203 op=UNLOAD Sep 6 01:22:54.788000 audit[4812]: AVC avc: denied { bpf } for pid=4812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.788000 audit[4812]: AVC avc: denied { bpf } for pid=4812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.788000 audit[4812]: AVC avc: denied { bpf } for pid=4812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.788000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.788000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.788000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.788000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.788000 audit[4812]: AVC avc: denied { perfmon } for pid=4812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.788000 audit[4812]: AVC avc: denied { bpf } for pid=4812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.788000 audit[4812]: AVC avc: denied { bpf } for pid=4812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.788000 audit: BPF prog-id=205 op=LOAD Sep 6 01:22:54.788000 audit[4812]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4789 pid=4812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.788000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139356231356534643733653830333937343438323839393762313566 Sep 6 01:22:54.813174 env[1474]: time="2025-09-06T01:22:54.813073701Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64697d84fd-9hmdg,Uid:d17efce8-fa93-4bdb-81af-efc70b288052,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"a95b15e4d73e8039744828997b15f4cbd038d29f2d08d1128e78893a1414a197\"" Sep 6 01:22:54.818367 env[1474]: time="2025-09-06T01:22:54.818309828Z" level=info msg="CreateContainer within sandbox \"955a1f7cfd0a1c9696c6b262d97ab525318386eb1a3547f4c6f6fedf01558780\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"c5de48c34fb892e232fb5ba7650f65dc474583625c83064c48d65f518d6411b6\"" Sep 6 01:22:54.819059 env[1474]: time="2025-09-06T01:22:54.819028949Z" level=info msg="StartContainer for \"c5de48c34fb892e232fb5ba7650f65dc474583625c83064c48d65f518d6411b6\"" Sep 6 01:22:54.833516 env[1474]: time="2025-09-06T01:22:54.833457087Z" level=info msg="CreateContainer within sandbox \"27653604c4dc25661efad2f744852521531e7a6355854ce9109334d3c31b1475\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"d7adf6199e8ecc423c3c6445193d5309e98c6242e9521a52e34c3ed8d8ea6c81\"" Sep 6 01:22:54.837559 env[1474]: time="2025-09-06T01:22:54.837498452Z" level=info msg="StartContainer for \"d7adf6199e8ecc423c3c6445193d5309e98c6242e9521a52e34c3ed8d8ea6c81\"" Sep 6 01:22:54.841443 systemd[1]: Started cri-containerd-c5de48c34fb892e232fb5ba7650f65dc474583625c83064c48d65f518d6411b6.scope. Sep 6 01:22:54.858000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.858000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.858000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.858000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.858000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.858000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.858000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.858000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.858000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.858000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.858000 audit: BPF prog-id=206 op=LOAD Sep 6 01:22:54.858000 audit[4844]: AVC avc: denied { bpf } for pid=4844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.858000 audit[4844]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4013 pid=4844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335646534386333346662383932653233326662356261373635306636 Sep 6 01:22:54.858000 audit[4844]: AVC avc: denied { perfmon } for pid=4844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.858000 audit[4844]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4013 pid=4844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335646534386333346662383932653233326662356261373635306636 Sep 6 01:22:54.858000 audit[4844]: AVC avc: denied { bpf } for pid=4844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.858000 audit[4844]: AVC avc: denied { bpf } for pid=4844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.858000 audit[4844]: AVC avc: denied { bpf } for pid=4844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.858000 audit[4844]: AVC avc: denied { perfmon } for pid=4844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.858000 audit[4844]: AVC avc: denied { perfmon } for pid=4844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.858000 audit[4844]: AVC avc: denied { perfmon } for pid=4844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.858000 audit[4844]: AVC avc: denied { perfmon } for pid=4844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.858000 audit[4844]: AVC avc: denied { perfmon } for pid=4844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.858000 audit[4844]: AVC avc: denied { bpf } for pid=4844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.858000 audit[4844]: AVC avc: denied { bpf } for pid=4844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.858000 audit: BPF prog-id=207 op=LOAD Sep 6 01:22:54.858000 audit[4844]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4013 pid=4844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335646534386333346662383932653233326662356261373635306636 Sep 6 01:22:54.859000 audit[4844]: AVC avc: denied { bpf } for pid=4844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.859000 audit[4844]: AVC avc: denied { bpf } for pid=4844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.859000 audit[4844]: AVC avc: denied { perfmon } for pid=4844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.859000 audit[4844]: AVC avc: denied { perfmon } for pid=4844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.859000 audit[4844]: AVC avc: denied { perfmon } for pid=4844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.859000 audit[4844]: AVC avc: denied { perfmon } for pid=4844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.859000 audit[4844]: AVC avc: denied { perfmon } for pid=4844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.859000 audit[4844]: AVC avc: denied { bpf } for pid=4844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.859000 audit[4844]: AVC avc: denied { bpf } for pid=4844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.859000 audit: BPF prog-id=208 op=LOAD Sep 6 01:22:54.859000 audit[4844]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4013 pid=4844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.859000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335646534386333346662383932653233326662356261373635306636 Sep 6 01:22:54.859000 audit: BPF prog-id=208 op=UNLOAD Sep 6 01:22:54.859000 audit: BPF prog-id=207 op=UNLOAD Sep 6 01:22:54.859000 audit[4844]: AVC avc: denied { bpf } for pid=4844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.859000 audit[4844]: AVC avc: denied { bpf } for pid=4844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.859000 audit[4844]: AVC avc: denied { bpf } for pid=4844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.859000 audit[4844]: AVC avc: denied { perfmon } for pid=4844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.859000 audit[4844]: AVC avc: denied { perfmon } for pid=4844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.859000 audit[4844]: AVC avc: denied { perfmon } for pid=4844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.859000 audit[4844]: AVC avc: denied { perfmon } for pid=4844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.859000 audit[4844]: AVC avc: denied { perfmon } for pid=4844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.859000 audit[4844]: AVC avc: denied { bpf } for pid=4844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.859000 audit[4844]: AVC avc: denied { bpf } for pid=4844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.859000 audit: BPF prog-id=209 op=LOAD Sep 6 01:22:54.859000 audit[4844]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4013 pid=4844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.859000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335646534386333346662383932653233326662356261373635306636 Sep 6 01:22:54.861361 systemd[1]: Started cri-containerd-d7adf6199e8ecc423c3c6445193d5309e98c6242e9521a52e34c3ed8d8ea6c81.scope. Sep 6 01:22:54.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.874000 audit: BPF prog-id=210 op=LOAD Sep 6 01:22:54.875000 audit[4863]: AVC avc: denied { bpf } for pid=4863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.875000 audit[4863]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4736 pid=4863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.875000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437616466363139396538656363343233633363363434353139336435 Sep 6 01:22:54.875000 audit[4863]: AVC avc: denied { perfmon } for pid=4863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.875000 audit[4863]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4736 pid=4863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.875000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437616466363139396538656363343233633363363434353139336435 Sep 6 01:22:54.875000 audit[4863]: AVC avc: denied { bpf } for pid=4863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.875000 audit[4863]: AVC avc: denied { bpf } for pid=4863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.875000 audit[4863]: AVC avc: denied { bpf } for pid=4863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.875000 audit[4863]: AVC avc: denied { perfmon } for pid=4863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.875000 audit[4863]: AVC avc: denied { perfmon } for pid=4863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.875000 audit[4863]: AVC avc: denied { perfmon } for pid=4863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.875000 audit[4863]: AVC avc: denied { perfmon } for pid=4863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.875000 audit[4863]: AVC avc: denied { perfmon } for pid=4863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.875000 audit[4863]: AVC avc: denied { bpf } for pid=4863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.875000 audit[4863]: AVC avc: denied { bpf } for pid=4863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.875000 audit: BPF prog-id=211 op=LOAD Sep 6 01:22:54.875000 audit[4863]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4736 pid=4863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.875000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437616466363139396538656363343233633363363434353139336435 Sep 6 01:22:54.876000 audit[4863]: AVC avc: denied { bpf } for pid=4863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.876000 audit[4863]: AVC avc: denied { bpf } for pid=4863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.876000 audit[4863]: AVC avc: denied { perfmon } for pid=4863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.876000 audit[4863]: AVC avc: denied { perfmon } for pid=4863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.876000 audit[4863]: AVC avc: denied { perfmon } for pid=4863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.876000 audit[4863]: AVC avc: denied { perfmon } for pid=4863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.876000 audit[4863]: AVC avc: denied { perfmon } for pid=4863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.876000 audit[4863]: AVC avc: denied { bpf } for pid=4863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.876000 audit[4863]: AVC avc: denied { bpf } for pid=4863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.876000 audit: BPF prog-id=212 op=LOAD Sep 6 01:22:54.876000 audit[4863]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4736 pid=4863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.876000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437616466363139396538656363343233633363363434353139336435 Sep 6 01:22:54.876000 audit: BPF prog-id=212 op=UNLOAD Sep 6 01:22:54.876000 audit: BPF prog-id=211 op=UNLOAD Sep 6 01:22:54.876000 audit[4863]: AVC avc: denied { bpf } for pid=4863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.876000 audit[4863]: AVC avc: denied { bpf } for pid=4863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.876000 audit[4863]: AVC avc: denied { bpf } for pid=4863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.876000 audit[4863]: AVC avc: denied { perfmon } for pid=4863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.876000 audit[4863]: AVC avc: denied { perfmon } for pid=4863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.876000 audit[4863]: AVC avc: denied { perfmon } for pid=4863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.876000 audit[4863]: AVC avc: denied { perfmon } for pid=4863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.876000 audit[4863]: AVC avc: denied { perfmon } for pid=4863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.876000 audit[4863]: AVC avc: denied { bpf } for pid=4863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.876000 audit[4863]: AVC avc: denied { bpf } for pid=4863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:54.876000 audit: BPF prog-id=213 op=LOAD Sep 6 01:22:54.876000 audit[4863]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4736 pid=4863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:54.876000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437616466363139396538656363343233633363363434353139336435 Sep 6 01:22:54.903450 env[1474]: time="2025-09-06T01:22:54.903400336Z" level=info msg="StartContainer for \"d7adf6199e8ecc423c3c6445193d5309e98c6242e9521a52e34c3ed8d8ea6c81\" returns successfully" Sep 6 01:22:54.902000 audit[4880]: AVC avc: denied { getattr } for pid=4880 comm="coredns" path="cgroup:[4026532694]" dev="nsfs" ino=4026532694 scontext=system_u:system_r:svirt_lxc_net_t:s0:c36,c745 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 6 01:22:54.902000 audit[4880]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056828 a2=400014c578 a3=0 items=0 ppid=4736 pid=4880 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c36,c745 key=(null) Sep 6 01:22:54.902000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 6 01:22:54.905032 env[1474]: time="2025-09-06T01:22:54.904991578Z" level=info msg="StartContainer for \"c5de48c34fb892e232fb5ba7650f65dc474583625c83064c48d65f518d6411b6\" returns successfully" Sep 6 01:22:55.405262 systemd-networkd[1625]: cali1ff5741151e: Gained IPv6LL Sep 6 01:22:55.821355 kubelet[2507]: I0906 01:22:55.821231 2507 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-zsbc4" podStartSLOduration=45.821211776 podStartE2EDuration="45.821211776s" podCreationTimestamp="2025-09-06 01:22:10 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 01:22:55.821154176 +0000 UTC m=+50.400678378" watchObservedRunningTime="2025-09-06 01:22:55.821211776 +0000 UTC m=+50.400735978" Sep 6 01:22:55.856000 audit[4914]: NETFILTER_CFG table=filter:124 family=2 entries=14 op=nft_register_rule pid=4914 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:55.856000 audit[4914]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffe596d7b0 a2=0 a3=1 items=0 ppid=2649 pid=4914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:55.856000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:55.859000 audit[4914]: NETFILTER_CFG table=nat:125 family=2 entries=44 op=nft_register_rule pid=4914 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:55.859000 audit[4914]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=ffffe596d7b0 a2=0 a3=1 items=0 ppid=2649 pid=4914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:55.859000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:55.923000 audit[4916]: NETFILTER_CFG table=filter:126 family=2 entries=14 op=nft_register_rule pid=4916 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:55.930480 kernel: kauditd_printk_skb: 605 callbacks suppressed Sep 6 01:22:55.930550 kernel: audit: type=1325 audit(1757121775.923:1400): table=filter:126 family=2 entries=14 op=nft_register_rule pid=4916 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:55.923000 audit[4916]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffe3219190 a2=0 a3=1 items=0 ppid=2649 pid=4916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:55.973834 kernel: audit: type=1300 audit(1757121775.923:1400): arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffe3219190 a2=0 a3=1 items=0 ppid=2649 pid=4916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:55.923000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:55.987499 kernel: audit: type=1327 audit(1757121775.923:1400): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:55.995000 audit[4916]: NETFILTER_CFG table=nat:127 family=2 entries=56 op=nft_register_chain pid=4916 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:55.995000 audit[4916]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19860 a0=3 a1=ffffe3219190 a2=0 a3=1 items=0 ppid=2649 pid=4916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:56.042904 kernel: audit: type=1325 audit(1757121775.995:1401): table=nat:127 family=2 entries=56 op=nft_register_chain pid=4916 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:56.043010 kernel: audit: type=1300 audit(1757121775.995:1401): arch=c00000b7 syscall=211 success=yes exit=19860 a0=3 a1=ffffe3219190 a2=0 a3=1 items=0 ppid=2649 pid=4916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:55.995000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:56.059372 kernel: audit: type=1327 audit(1757121775.995:1401): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:56.111693 systemd-networkd[1625]: calic7236724690: Gained IPv6LL Sep 6 01:22:56.237271 systemd-networkd[1625]: cali92408de5bd4: Gained IPv6LL Sep 6 01:22:56.557239 systemd-networkd[1625]: calic4e36c4174d: Gained IPv6LL Sep 6 01:22:57.083000 audit[4919]: NETFILTER_CFG table=filter:128 family=2 entries=13 op=nft_register_rule pid=4919 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:57.083000 audit[4919]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd3401430 a2=0 a3=1 items=0 ppid=2649 pid=4919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:57.127899 kernel: audit: type=1325 audit(1757121777.083:1402): table=filter:128 family=2 entries=13 op=nft_register_rule pid=4919 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:57.128032 kernel: audit: type=1300 audit(1757121777.083:1402): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd3401430 a2=0 a3=1 items=0 ppid=2649 pid=4919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:57.083000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:57.145404 kernel: audit: type=1327 audit(1757121777.083:1402): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:57.145000 audit[4919]: NETFILTER_CFG table=nat:129 family=2 entries=27 op=nft_register_chain pid=4919 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:57.165618 kernel: audit: type=1325 audit(1757121777.145:1403): table=nat:129 family=2 entries=27 op=nft_register_chain pid=4919 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:57.145000 audit[4919]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=9348 a0=3 a1=ffffd3401430 a2=0 a3=1 items=0 ppid=2649 pid=4919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:57.145000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:57.375498 env[1474]: time="2025-09-06T01:22:57.375386235Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:57.385715 env[1474]: time="2025-09-06T01:22:57.385652608Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:34117caf92350e1565610f2254377d7455b11e36666b5ce11b4a13670720432a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:57.393356 env[1474]: time="2025-09-06T01:22:57.393314858Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:57.399351 env[1474]: time="2025-09-06T01:22:57.399311825Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:27c4187717f08f0a5727019d8beb7597665eb47e69eaa1d7d091a7e28913e577,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:57.399897 env[1474]: time="2025-09-06T01:22:57.399867386Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\" returns image reference \"sha256:34117caf92350e1565610f2254377d7455b11e36666b5ce11b4a13670720432a\"" Sep 6 01:22:57.401550 env[1474]: time="2025-09-06T01:22:57.401040227Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 6 01:22:57.418098 env[1474]: time="2025-09-06T01:22:57.418055008Z" level=info msg="CreateContainer within sandbox \"f304f062fc956576ba39004fa94179c3cc72fa5519f5a954b303271cc3b687d7\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Sep 6 01:22:57.467777 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2295422442.mount: Deactivated successfully. Sep 6 01:22:57.500696 env[1474]: time="2025-09-06T01:22:57.500647110Z" level=info msg="CreateContainer within sandbox \"f304f062fc956576ba39004fa94179c3cc72fa5519f5a954b303271cc3b687d7\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"049a9751ea2b61f19d5654b91a108f306c59a568c3775a0fba835d1d081a0111\"" Sep 6 01:22:57.501442 env[1474]: time="2025-09-06T01:22:57.501417751Z" level=info msg="StartContainer for \"049a9751ea2b61f19d5654b91a108f306c59a568c3775a0fba835d1d081a0111\"" Sep 6 01:22:57.525834 systemd[1]: Started cri-containerd-049a9751ea2b61f19d5654b91a108f306c59a568c3775a0fba835d1d081a0111.scope. Sep 6 01:22:57.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.545000 audit: BPF prog-id=214 op=LOAD Sep 6 01:22:57.546000 audit[4930]: AVC avc: denied { bpf } for pid=4930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.546000 audit[4930]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4186 pid=4930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:57.546000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034396139373531656132623631663139643536353462393161313038 Sep 6 01:22:57.547000 audit[4930]: AVC avc: denied { perfmon } for pid=4930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.547000 audit[4930]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4186 pid=4930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:57.547000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034396139373531656132623631663139643536353462393161313038 Sep 6 01:22:57.547000 audit[4930]: AVC avc: denied { bpf } for pid=4930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.547000 audit[4930]: AVC avc: denied { bpf } for pid=4930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.547000 audit[4930]: AVC avc: denied { bpf } for pid=4930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.547000 audit[4930]: AVC avc: denied { perfmon } for pid=4930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.547000 audit[4930]: AVC avc: denied { perfmon } for pid=4930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.547000 audit[4930]: AVC avc: denied { perfmon } for pid=4930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.547000 audit[4930]: AVC avc: denied { perfmon } for pid=4930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.547000 audit[4930]: AVC avc: denied { perfmon } for pid=4930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.547000 audit[4930]: AVC avc: denied { bpf } for pid=4930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.547000 audit[4930]: AVC avc: denied { bpf } for pid=4930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.547000 audit: BPF prog-id=215 op=LOAD Sep 6 01:22:57.547000 audit[4930]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4186 pid=4930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:57.547000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034396139373531656132623631663139643536353462393161313038 Sep 6 01:22:57.547000 audit[4930]: AVC avc: denied { bpf } for pid=4930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.547000 audit[4930]: AVC avc: denied { bpf } for pid=4930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.547000 audit[4930]: AVC avc: denied { perfmon } for pid=4930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.547000 audit[4930]: AVC avc: denied { perfmon } for pid=4930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.547000 audit[4930]: AVC avc: denied { perfmon } for pid=4930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.547000 audit[4930]: AVC avc: denied { perfmon } for pid=4930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.547000 audit[4930]: AVC avc: denied { perfmon } for pid=4930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.547000 audit[4930]: AVC avc: denied { bpf } for pid=4930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.547000 audit[4930]: AVC avc: denied { bpf } for pid=4930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.547000 audit: BPF prog-id=216 op=LOAD Sep 6 01:22:57.547000 audit[4930]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4186 pid=4930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:57.547000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034396139373531656132623631663139643536353462393161313038 Sep 6 01:22:57.548000 audit: BPF prog-id=216 op=UNLOAD Sep 6 01:22:57.548000 audit: BPF prog-id=215 op=UNLOAD Sep 6 01:22:57.549000 audit[4930]: AVC avc: denied { bpf } for pid=4930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.549000 audit[4930]: AVC avc: denied { bpf } for pid=4930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.549000 audit[4930]: AVC avc: denied { bpf } for pid=4930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.549000 audit[4930]: AVC avc: denied { perfmon } for pid=4930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.549000 audit[4930]: AVC avc: denied { perfmon } for pid=4930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.549000 audit[4930]: AVC avc: denied { perfmon } for pid=4930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.549000 audit[4930]: AVC avc: denied { perfmon } for pid=4930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.549000 audit[4930]: AVC avc: denied { perfmon } for pid=4930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.549000 audit[4930]: AVC avc: denied { bpf } for pid=4930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.549000 audit[4930]: AVC avc: denied { bpf } for pid=4930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:57.549000 audit: BPF prog-id=217 op=LOAD Sep 6 01:22:57.549000 audit[4930]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4186 pid=4930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:57.549000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034396139373531656132623631663139643536353462393161313038 Sep 6 01:22:57.573253 env[1474]: time="2025-09-06T01:22:57.573190600Z" level=info msg="StartContainer for \"049a9751ea2b61f19d5654b91a108f306c59a568c3775a0fba835d1d081a0111\" returns successfully" Sep 6 01:22:57.841204 kubelet[2507]: I0906 01:22:57.840488 2507 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-7748ff464c-46pw5" podStartSLOduration=22.614302166 podStartE2EDuration="28.840467731s" podCreationTimestamp="2025-09-06 01:22:29 +0000 UTC" firstStartedPulling="2025-09-06 01:22:51.174735502 +0000 UTC m=+45.754259704" lastFinishedPulling="2025-09-06 01:22:57.400901067 +0000 UTC m=+51.980425269" observedRunningTime="2025-09-06 01:22:57.84023121 +0000 UTC m=+52.419755412" watchObservedRunningTime="2025-09-06 01:22:57.840467731 +0000 UTC m=+52.419991933" Sep 6 01:22:57.841204 kubelet[2507]: I0906 01:22:57.840621 2507 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-689b5f669b-rt8b6" podStartSLOduration=5.17803585 podStartE2EDuration="11.840613771s" podCreationTimestamp="2025-09-06 01:22:46 +0000 UTC" firstStartedPulling="2025-09-06 01:22:48.050012772 +0000 UTC m=+42.629536974" lastFinishedPulling="2025-09-06 01:22:54.712590693 +0000 UTC m=+49.292114895" observedRunningTime="2025-09-06 01:22:55.866924794 +0000 UTC m=+50.446448996" watchObservedRunningTime="2025-09-06 01:22:57.840613771 +0000 UTC m=+52.420137973" Sep 6 01:22:59.909175 env[1474]: time="2025-09-06T01:22:59.909100375Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:59.925779 env[1474]: time="2025-09-06T01:22:59.925728115Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:59.938466 env[1474]: time="2025-09-06T01:22:59.938410251Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:59.945939 env[1474]: time="2025-09-06T01:22:59.945899060Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:59.946492 env[1474]: time="2025-09-06T01:22:59.946416180Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08\"" Sep 6 01:22:59.948804 env[1474]: time="2025-09-06T01:22:59.948757543Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\"" Sep 6 01:22:59.950240 env[1474]: time="2025-09-06T01:22:59.950196225Z" level=info msg="CreateContainer within sandbox \"8f546e4b1578e310de5fdd458a831a9bc13b0d407d668f3925e423ab56b423fc\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 6 01:22:59.994540 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1296016797.mount: Deactivated successfully. Sep 6 01:23:00.068273 env[1474]: time="2025-09-06T01:23:00.067992527Z" level=info msg="CreateContainer within sandbox \"8f546e4b1578e310de5fdd458a831a9bc13b0d407d668f3925e423ab56b423fc\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"7fa8fee668bbcab6d86fdff37029b7660b08e37b1f6439c85ede659de7a06a8e\"" Sep 6 01:23:00.069095 env[1474]: time="2025-09-06T01:23:00.069058688Z" level=info msg="StartContainer for \"7fa8fee668bbcab6d86fdff37029b7660b08e37b1f6439c85ede659de7a06a8e\"" Sep 6 01:23:00.095837 systemd[1]: run-containerd-runc-k8s.io-7fa8fee668bbcab6d86fdff37029b7660b08e37b1f6439c85ede659de7a06a8e-runc.Ut5MvE.mount: Deactivated successfully. Sep 6 01:23:00.102025 systemd[1]: Started cri-containerd-7fa8fee668bbcab6d86fdff37029b7660b08e37b1f6439c85ede659de7a06a8e.scope. Sep 6 01:23:00.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.117000 audit: BPF prog-id=218 op=LOAD Sep 6 01:23:00.117000 audit[5004]: AVC avc: denied { bpf } for pid=5004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.117000 audit[5004]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4411 pid=5004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:00.117000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766613866656536363862626361623664383666646666333730323962 Sep 6 01:23:00.118000 audit[5004]: AVC avc: denied { perfmon } for pid=5004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.118000 audit[5004]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4411 pid=5004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:00.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766613866656536363862626361623664383666646666333730323962 Sep 6 01:23:00.119000 audit[5004]: AVC avc: denied { bpf } for pid=5004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.119000 audit[5004]: AVC avc: denied { bpf } for pid=5004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.119000 audit[5004]: AVC avc: denied { bpf } for pid=5004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.119000 audit[5004]: AVC avc: denied { perfmon } for pid=5004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.119000 audit[5004]: AVC avc: denied { perfmon } for pid=5004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.119000 audit[5004]: AVC avc: denied { perfmon } for pid=5004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.119000 audit[5004]: AVC avc: denied { perfmon } for pid=5004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.119000 audit[5004]: AVC avc: denied { perfmon } for pid=5004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.119000 audit[5004]: AVC avc: denied { bpf } for pid=5004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.119000 audit[5004]: AVC avc: denied { bpf } for pid=5004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.119000 audit: BPF prog-id=219 op=LOAD Sep 6 01:23:00.119000 audit[5004]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4411 pid=5004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:00.119000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766613866656536363862626361623664383666646666333730323962 Sep 6 01:23:00.119000 audit[5004]: AVC avc: denied { bpf } for pid=5004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.119000 audit[5004]: AVC avc: denied { bpf } for pid=5004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.119000 audit[5004]: AVC avc: denied { perfmon } for pid=5004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.119000 audit[5004]: AVC avc: denied { perfmon } for pid=5004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.119000 audit[5004]: AVC avc: denied { perfmon } for pid=5004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.119000 audit[5004]: AVC avc: denied { perfmon } for pid=5004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.119000 audit[5004]: AVC avc: denied { perfmon } for pid=5004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.119000 audit[5004]: AVC avc: denied { bpf } for pid=5004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.119000 audit[5004]: AVC avc: denied { bpf } for pid=5004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.119000 audit: BPF prog-id=220 op=LOAD Sep 6 01:23:00.119000 audit[5004]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4411 pid=5004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:00.119000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766613866656536363862626361623664383666646666333730323962 Sep 6 01:23:00.121000 audit: BPF prog-id=220 op=UNLOAD Sep 6 01:23:00.121000 audit: BPF prog-id=219 op=UNLOAD Sep 6 01:23:00.121000 audit[5004]: AVC avc: denied { bpf } for pid=5004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.121000 audit[5004]: AVC avc: denied { bpf } for pid=5004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.121000 audit[5004]: AVC avc: denied { bpf } for pid=5004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.121000 audit[5004]: AVC avc: denied { perfmon } for pid=5004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.121000 audit[5004]: AVC avc: denied { perfmon } for pid=5004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.121000 audit[5004]: AVC avc: denied { perfmon } for pid=5004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.121000 audit[5004]: AVC avc: denied { perfmon } for pid=5004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.121000 audit[5004]: AVC avc: denied { perfmon } for pid=5004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.121000 audit[5004]: AVC avc: denied { bpf } for pid=5004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.121000 audit[5004]: AVC avc: denied { bpf } for pid=5004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:00.121000 audit: BPF prog-id=221 op=LOAD Sep 6 01:23:00.121000 audit[5004]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4411 pid=5004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:00.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766613866656536363862626361623664383666646666333730323962 Sep 6 01:23:00.151350 env[1474]: time="2025-09-06T01:23:00.151300347Z" level=info msg="StartContainer for \"7fa8fee668bbcab6d86fdff37029b7660b08e37b1f6439c85ede659de7a06a8e\" returns successfully" Sep 6 01:23:00.879000 audit[5035]: NETFILTER_CFG table=filter:130 family=2 entries=12 op=nft_register_rule pid=5035 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:23:00.879000 audit[5035]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffe0f89f60 a2=0 a3=1 items=0 ppid=2649 pid=5035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:00.879000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:23:00.886000 audit[5035]: NETFILTER_CFG table=nat:131 family=2 entries=22 op=nft_register_rule pid=5035 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:23:00.886000 audit[5035]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffe0f89f60 a2=0 a3=1 items=0 ppid=2649 pid=5035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:00.886000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:23:01.417608 env[1474]: time="2025-09-06T01:23:01.417561304Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:23:01.440104 env[1474]: time="2025-09-06T01:23:01.440058411Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5e2b30128ce4b607acd97d3edef62ce1a90be0259903090a51c360adbe4a8f3b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:23:01.455862 env[1474]: time="2025-09-06T01:23:01.455817550Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:23:01.461519 env[1474]: time="2025-09-06T01:23:01.461481396Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:f22c88018d8b58c4ef0052f594b216a13bd6852166ac131a538c5ab2fba23bb2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:23:01.461774 env[1474]: time="2025-09-06T01:23:01.461742197Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\" returns image reference \"sha256:5e2b30128ce4b607acd97d3edef62ce1a90be0259903090a51c360adbe4a8f3b\"" Sep 6 01:23:01.466059 env[1474]: time="2025-09-06T01:23:01.466006402Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\"" Sep 6 01:23:01.467199 env[1474]: time="2025-09-06T01:23:01.467162483Z" level=info msg="CreateContainer within sandbox \"6826830f58a59d20430b78300cbd495455821fdb8fcea4ffe3a1f3984d726c54\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Sep 6 01:23:01.530758 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3567355954.mount: Deactivated successfully. Sep 6 01:23:01.560965 env[1474]: time="2025-09-06T01:23:01.560892595Z" level=info msg="CreateContainer within sandbox \"6826830f58a59d20430b78300cbd495455821fdb8fcea4ffe3a1f3984d726c54\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"d73d7941feeabb86d4cbc75075afd0e0fb81e7196d9461278c74f1e3587a5a1c\"" Sep 6 01:23:01.563784 env[1474]: time="2025-09-06T01:23:01.563740278Z" level=info msg="StartContainer for \"d73d7941feeabb86d4cbc75075afd0e0fb81e7196d9461278c74f1e3587a5a1c\"" Sep 6 01:23:01.587712 systemd[1]: Started cri-containerd-d73d7941feeabb86d4cbc75075afd0e0fb81e7196d9461278c74f1e3587a5a1c.scope. Sep 6 01:23:01.613000 audit[5043]: AVC avc: denied { perfmon } for pid=5043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.619775 kernel: kauditd_printk_skb: 122 callbacks suppressed Sep 6 01:23:01.619923 kernel: audit: type=1400 audit(1757121781.613:1442): avc: denied { perfmon } for pid=5043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.613000 audit[5043]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4620 pid=5043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:01.666365 kernel: audit: type=1300 audit(1757121781.613:1442): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4620 pid=5043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:01.667188 kernel: audit: type=1327 audit(1757121781.613:1442): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437336437393431666565616262383664346362633735303735616664 Sep 6 01:23:01.613000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437336437393431666565616262383664346362633735303735616664 Sep 6 01:23:01.613000 audit[5043]: AVC avc: denied { bpf } for pid=5043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.711305 kernel: audit: type=1400 audit(1757121781.613:1443): avc: denied { bpf } for pid=5043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.613000 audit[5043]: AVC avc: denied { bpf } for pid=5043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.732635 kernel: audit: type=1400 audit(1757121781.613:1443): avc: denied { bpf } for pid=5043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.613000 audit[5043]: AVC avc: denied { bpf } for pid=5043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.752200 kernel: audit: type=1400 audit(1757121781.613:1443): avc: denied { bpf } for pid=5043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.613000 audit[5043]: AVC avc: denied { perfmon } for pid=5043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.770507 kernel: audit: type=1400 audit(1757121781.613:1443): avc: denied { perfmon } for pid=5043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.613000 audit[5043]: AVC avc: denied { perfmon } for pid=5043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.788910 kernel: audit: type=1400 audit(1757121781.613:1443): avc: denied { perfmon } for pid=5043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.789072 kernel: audit: type=1400 audit(1757121781.613:1443): avc: denied { perfmon } for pid=5043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.613000 audit[5043]: AVC avc: denied { perfmon } for pid=5043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.613000 audit[5043]: AVC avc: denied { perfmon } for pid=5043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.824787 kernel: audit: type=1400 audit(1757121781.613:1443): avc: denied { perfmon } for pid=5043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.825776 env[1474]: time="2025-09-06T01:23:01.825724590Z" level=info msg="StartContainer for \"d73d7941feeabb86d4cbc75075afd0e0fb81e7196d9461278c74f1e3587a5a1c\" returns successfully" Sep 6 01:23:01.613000 audit[5043]: AVC avc: denied { perfmon } for pid=5043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.613000 audit[5043]: AVC avc: denied { bpf } for pid=5043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.613000 audit[5043]: AVC avc: denied { bpf } for pid=5043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.613000 audit: BPF prog-id=222 op=LOAD Sep 6 01:23:01.613000 audit[5043]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4620 pid=5043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:01.613000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437336437393431666565616262383664346362633735303735616664 Sep 6 01:23:01.613000 audit[5043]: AVC avc: denied { bpf } for pid=5043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.613000 audit[5043]: AVC avc: denied { bpf } for pid=5043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.613000 audit[5043]: AVC avc: denied { perfmon } for pid=5043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.613000 audit[5043]: AVC avc: denied { perfmon } for pid=5043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.613000 audit[5043]: AVC avc: denied { perfmon } for pid=5043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.613000 audit[5043]: AVC avc: denied { perfmon } for pid=5043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.613000 audit[5043]: AVC avc: denied { perfmon } for pid=5043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.613000 audit[5043]: AVC avc: denied { bpf } for pid=5043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.613000 audit[5043]: AVC avc: denied { bpf } for pid=5043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.613000 audit: BPF prog-id=223 op=LOAD Sep 6 01:23:01.613000 audit[5043]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4620 pid=5043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:01.613000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437336437393431666565616262383664346362633735303735616664 Sep 6 01:23:01.613000 audit: BPF prog-id=223 op=UNLOAD Sep 6 01:23:01.613000 audit: BPF prog-id=222 op=UNLOAD Sep 6 01:23:01.613000 audit[5043]: AVC avc: denied { bpf } for pid=5043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.613000 audit[5043]: AVC avc: denied { bpf } for pid=5043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.613000 audit[5043]: AVC avc: denied { bpf } for pid=5043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.613000 audit[5043]: AVC avc: denied { perfmon } for pid=5043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.613000 audit[5043]: AVC avc: denied { perfmon } for pid=5043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.613000 audit[5043]: AVC avc: denied { perfmon } for pid=5043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.613000 audit[5043]: AVC avc: denied { perfmon } for pid=5043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.613000 audit[5043]: AVC avc: denied { perfmon } for pid=5043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.613000 audit[5043]: AVC avc: denied { bpf } for pid=5043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.613000 audit[5043]: AVC avc: denied { bpf } for pid=5043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:01.613000 audit: BPF prog-id=224 op=LOAD Sep 6 01:23:01.613000 audit[5043]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4620 pid=5043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:01.613000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437336437393431666565616262383664346362633735303735616664 Sep 6 01:23:02.023628 kubelet[2507]: I0906 01:23:02.023480 2507 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-64697d84fd-sjx99" podStartSLOduration=32.059481396 podStartE2EDuration="39.023462705s" podCreationTimestamp="2025-09-06 01:22:23 +0000 UTC" firstStartedPulling="2025-09-06 01:22:52.983821033 +0000 UTC m=+47.563345235" lastFinishedPulling="2025-09-06 01:22:59.947802262 +0000 UTC m=+54.527326544" observedRunningTime="2025-09-06 01:23:00.855646113 +0000 UTC m=+55.435170315" watchObservedRunningTime="2025-09-06 01:23:02.023462705 +0000 UTC m=+56.602986907" Sep 6 01:23:02.214000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:23:02.214000 audit[2330]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=400f3d51c0 a2=fc6 a3=0 items=0 ppid=2195 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 key=(null) Sep 6 01:23:02.214000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3236002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:23:02.214000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=522495 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:23:02.214000 audit[2330]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=400fdae300 a2=fc6 a3=0 items=0 ppid=2195 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 key=(null) Sep 6 01:23:02.214000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3236002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:23:02.215000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522499 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:23:02.215000 audit[2330]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=400fdae390 a2=fc6 a3=0 items=0 ppid=2195 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 key=(null) Sep 6 01:23:02.215000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3236002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:23:02.226000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=522501 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:23:02.226000 audit[2330]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=400fdae690 a2=fc6 a3=0 items=0 ppid=2195 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 key=(null) Sep 6 01:23:02.226000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3236002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:23:02.228000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522499 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:23:02.228000 audit[2330]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=400ff82060 a2=fc6 a3=0 items=0 ppid=2195 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 key=(null) Sep 6 01:23:02.228000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3236002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:23:02.228000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:23:02.228000 audit[2330]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=400f7daa00 a2=fc6 a3=0 items=0 ppid=2195 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 key=(null) Sep 6 01:23:02.228000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3236002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:23:02.377000 audit[5015]: AVC avc: denied { watch } for pid=5015 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_01_22_38.920819102/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c119,c1003 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c119,c1003 tclass=file permissive=0 Sep 6 01:23:02.377000 audit[5015]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40003c49c0 a2=fc6 a3=0 items=0 ppid=4411 pid=5015 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c119,c1003 key=(null) Sep 6 01:23:02.377000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 01:23:02.434000 audit[5089]: NETFILTER_CFG table=filter:132 family=2 entries=11 op=nft_register_rule pid=5089 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:23:02.434000 audit[5089]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffed7a0a60 a2=0 a3=1 items=0 ppid=2649 pid=5089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:02.434000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:23:02.440000 audit[5089]: NETFILTER_CFG table=nat:133 family=2 entries=29 op=nft_register_chain pid=5089 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:23:02.440000 audit[5089]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffed7a0a60 a2=0 a3=1 items=0 ppid=2649 pid=5089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:02.440000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:23:02.525828 systemd[1]: run-containerd-runc-k8s.io-6497e70858216fbc735ce77a474bc3b4d95448ef2a62bba112ec29db7e0d52f0-runc.ryLzLu.mount: Deactivated successfully. Sep 6 01:23:02.623000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:23:02.623000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40032910c0 a2=fc6 a3=0 items=0 ppid=2245 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 key=(null) Sep 6 01:23:02.623000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:23:02.623000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522499 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:23:02.623000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4003059ce0 a2=fc6 a3=0 items=0 ppid=2245 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 key=(null) Sep 6 01:23:02.623000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:23:04.987581 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2044429940.mount: Deactivated successfully. Sep 6 01:23:05.089000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:23:05.089000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40032911c0 a2=fc6 a3=0 items=0 ppid=2245 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 key=(null) Sep 6 01:23:05.089000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:23:05.089000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:23:05.089000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002324180 a2=fc6 a3=0 items=0 ppid=2245 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 key=(null) Sep 6 01:23:05.089000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:23:05.089000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:23:05.089000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40032911e0 a2=fc6 a3=0 items=0 ppid=2245 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 key=(null) Sep 6 01:23:05.089000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:23:05.089000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:23:05.089000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40023244a0 a2=fc6 a3=0 items=0 ppid=2245 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 key=(null) Sep 6 01:23:05.089000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:23:05.555061 env[1474]: time="2025-09-06T01:23:05.555024463Z" level=info msg="StopPodSandbox for \"7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6\"" Sep 6 01:23:05.735207 env[1474]: 2025-09-06 01:23:05.676 [WARNING][5104] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-whisker--5dfb6f899c--9sb29-eth0" Sep 6 01:23:05.735207 env[1474]: 2025-09-06 01:23:05.676 [INFO][5104] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" Sep 6 01:23:05.735207 env[1474]: 2025-09-06 01:23:05.676 [INFO][5104] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" iface="eth0" netns="" Sep 6 01:23:05.735207 env[1474]: 2025-09-06 01:23:05.676 [INFO][5104] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" Sep 6 01:23:05.735207 env[1474]: 2025-09-06 01:23:05.676 [INFO][5104] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" Sep 6 01:23:05.735207 env[1474]: 2025-09-06 01:23:05.717 [INFO][5111] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" HandleID="k8s-pod-network.7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-whisker--5dfb6f899c--9sb29-eth0" Sep 6 01:23:05.735207 env[1474]: 2025-09-06 01:23:05.718 [INFO][5111] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:23:05.735207 env[1474]: 2025-09-06 01:23:05.718 [INFO][5111] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:23:05.735207 env[1474]: 2025-09-06 01:23:05.730 [WARNING][5111] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" HandleID="k8s-pod-network.7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-whisker--5dfb6f899c--9sb29-eth0" Sep 6 01:23:05.735207 env[1474]: 2025-09-06 01:23:05.731 [INFO][5111] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" HandleID="k8s-pod-network.7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-whisker--5dfb6f899c--9sb29-eth0" Sep 6 01:23:05.735207 env[1474]: 2025-09-06 01:23:05.732 [INFO][5111] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:23:05.735207 env[1474]: 2025-09-06 01:23:05.733 [INFO][5104] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" Sep 6 01:23:05.735619 env[1474]: time="2025-09-06T01:23:05.735237751Z" level=info msg="TearDown network for sandbox \"7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6\" successfully" Sep 6 01:23:05.735619 env[1474]: time="2025-09-06T01:23:05.735270311Z" level=info msg="StopPodSandbox for \"7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6\" returns successfully" Sep 6 01:23:05.735879 env[1474]: time="2025-09-06T01:23:05.735848191Z" level=info msg="RemovePodSandbox for \"7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6\"" Sep 6 01:23:05.735937 env[1474]: time="2025-09-06T01:23:05.735887071Z" level=info msg="Forcibly stopping sandbox \"7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6\"" Sep 6 01:23:05.826582 env[1474]: time="2025-09-06T01:23:05.826461015Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:23:05.845987 env[1474]: time="2025-09-06T01:23:05.843588235Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:14088376331a0622b7f6a2fbc2f2932806a6eafdd7b602f6139d3b985bf1e685,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:23:05.859450 env[1474]: 2025-09-06 01:23:05.812 [WARNING][5125] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" WorkloadEndpoint="ci--3510.3.8--n--b5f8f4c6c5-k8s-whisker--5dfb6f899c--9sb29-eth0" Sep 6 01:23:05.859450 env[1474]: 2025-09-06 01:23:05.813 [INFO][5125] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" Sep 6 01:23:05.859450 env[1474]: 2025-09-06 01:23:05.813 [INFO][5125] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" iface="eth0" netns="" Sep 6 01:23:05.859450 env[1474]: 2025-09-06 01:23:05.813 [INFO][5125] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" Sep 6 01:23:05.859450 env[1474]: 2025-09-06 01:23:05.813 [INFO][5125] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" Sep 6 01:23:05.859450 env[1474]: 2025-09-06 01:23:05.841 [INFO][5132] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" HandleID="k8s-pod-network.7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-whisker--5dfb6f899c--9sb29-eth0" Sep 6 01:23:05.859450 env[1474]: 2025-09-06 01:23:05.841 [INFO][5132] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:23:05.859450 env[1474]: 2025-09-06 01:23:05.841 [INFO][5132] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:23:05.859450 env[1474]: 2025-09-06 01:23:05.855 [WARNING][5132] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" HandleID="k8s-pod-network.7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-whisker--5dfb6f899c--9sb29-eth0" Sep 6 01:23:05.859450 env[1474]: 2025-09-06 01:23:05.855 [INFO][5132] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" HandleID="k8s-pod-network.7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-whisker--5dfb6f899c--9sb29-eth0" Sep 6 01:23:05.859450 env[1474]: 2025-09-06 01:23:05.856 [INFO][5132] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:23:05.859450 env[1474]: 2025-09-06 01:23:05.858 [INFO][5125] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6" Sep 6 01:23:05.859839 env[1474]: time="2025-09-06T01:23:05.859478653Z" level=info msg="TearDown network for sandbox \"7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6\" successfully" Sep 6 01:23:05.863558 env[1474]: time="2025-09-06T01:23:05.863509018Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:23:05.885614 env[1474]: time="2025-09-06T01:23:05.885561203Z" level=info msg="RemovePodSandbox \"7f5a7de3df28d1add47092f77d54b2cfda0746f1c631831cf5ab16c4888795d6\" returns successfully" Sep 6 01:23:05.886215 env[1474]: time="2025-09-06T01:23:05.886184964Z" level=info msg="StopPodSandbox for \"9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7\"" Sep 6 01:23:05.892473 env[1474]: time="2025-09-06T01:23:05.892421651Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:46297703ab3739331a00a58f0d6a5498c8d3b6523ad947eed68592ee0f3e79f0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:23:05.892757 env[1474]: time="2025-09-06T01:23:05.892726812Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\" returns image reference \"sha256:14088376331a0622b7f6a2fbc2f2932806a6eafdd7b602f6139d3b985bf1e685\"" Sep 6 01:23:05.900151 env[1474]: time="2025-09-06T01:23:05.897051177Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 6 01:23:05.900151 env[1474]: time="2025-09-06T01:23:05.898035138Z" level=info msg="CreateContainer within sandbox \"985e765694a63153bf88adeb25ade6b5106a73b49c4951fb0eb15c58b7195b96\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Sep 6 01:23:05.971951 env[1474]: time="2025-09-06T01:23:05.971896023Z" level=info msg="CreateContainer within sandbox \"985e765694a63153bf88adeb25ade6b5106a73b49c4951fb0eb15c58b7195b96\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"40749c7d3756581aad1ed5c1a90a13a4fff5a333f197d55c45158a5a4cf4951a\"" Sep 6 01:23:05.972749 env[1474]: time="2025-09-06T01:23:05.972708384Z" level=info msg="StartContainer for \"40749c7d3756581aad1ed5c1a90a13a4fff5a333f197d55c45158a5a4cf4951a\"" Sep 6 01:23:06.010049 systemd[1]: Started cri-containerd-40749c7d3756581aad1ed5c1a90a13a4fff5a333f197d55c45158a5a4cf4951a.scope. Sep 6 01:23:06.016006 env[1474]: 2025-09-06 01:23:05.950 [WARNING][5146] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--9hmdg-eth0", GenerateName:"calico-apiserver-64697d84fd-", Namespace:"calico-apiserver", SelfLink:"", UID:"d17efce8-fa93-4bdb-81af-efc70b288052", ResourceVersion:"1002", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 23, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64697d84fd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-b5f8f4c6c5", ContainerID:"a95b15e4d73e8039744828997b15f4cbd038d29f2d08d1128e78893a1414a197", Pod:"calico-apiserver-64697d84fd-9hmdg", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.37.200/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic4e36c4174d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:23:06.016006 env[1474]: 2025-09-06 01:23:05.951 [INFO][5146] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" Sep 6 01:23:06.016006 env[1474]: 2025-09-06 01:23:05.951 [INFO][5146] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" iface="eth0" netns="" Sep 6 01:23:06.016006 env[1474]: 2025-09-06 01:23:05.951 [INFO][5146] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" Sep 6 01:23:06.016006 env[1474]: 2025-09-06 01:23:05.951 [INFO][5146] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" Sep 6 01:23:06.016006 env[1474]: 2025-09-06 01:23:05.989 [INFO][5153] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" HandleID="k8s-pod-network.9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--9hmdg-eth0" Sep 6 01:23:06.016006 env[1474]: 2025-09-06 01:23:05.990 [INFO][5153] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:23:06.016006 env[1474]: 2025-09-06 01:23:05.990 [INFO][5153] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:23:06.016006 env[1474]: 2025-09-06 01:23:06.004 [WARNING][5153] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" HandleID="k8s-pod-network.9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--9hmdg-eth0" Sep 6 01:23:06.016006 env[1474]: 2025-09-06 01:23:06.004 [INFO][5153] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" HandleID="k8s-pod-network.9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--9hmdg-eth0" Sep 6 01:23:06.016006 env[1474]: 2025-09-06 01:23:06.012 [INFO][5153] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:23:06.016006 env[1474]: 2025-09-06 01:23:06.014 [INFO][5146] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" Sep 6 01:23:06.016463 env[1474]: time="2025-09-06T01:23:06.016022753Z" level=info msg="TearDown network for sandbox \"9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7\" successfully" Sep 6 01:23:06.016463 env[1474]: time="2025-09-06T01:23:06.016049713Z" level=info msg="StopPodSandbox for \"9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7\" returns successfully" Sep 6 01:23:06.016510 env[1474]: time="2025-09-06T01:23:06.016478994Z" level=info msg="RemovePodSandbox for \"9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7\"" Sep 6 01:23:06.016534 env[1474]: time="2025-09-06T01:23:06.016506554Z" level=info msg="Forcibly stopping sandbox \"9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7\"" Sep 6 01:23:06.028993 systemd[1]: run-containerd-runc-k8s.io-40749c7d3756581aad1ed5c1a90a13a4fff5a333f197d55c45158a5a4cf4951a-runc.oqsnQs.mount: Deactivated successfully. Sep 6 01:23:06.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.055000 audit: BPF prog-id=225 op=LOAD Sep 6 01:23:06.056000 audit[5165]: AVC avc: denied { bpf } for pid=5165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.056000 audit[5165]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4701 pid=5165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:06.056000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430373439633764333735363538316161643165643563316139306131 Sep 6 01:23:06.056000 audit[5165]: AVC avc: denied { perfmon } for pid=5165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.056000 audit[5165]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4701 pid=5165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:06.056000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430373439633764333735363538316161643165643563316139306131 Sep 6 01:23:06.056000 audit[5165]: AVC avc: denied { bpf } for pid=5165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.056000 audit[5165]: AVC avc: denied { bpf } for pid=5165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.056000 audit[5165]: AVC avc: denied { bpf } for pid=5165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.056000 audit[5165]: AVC avc: denied { perfmon } for pid=5165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.056000 audit[5165]: AVC avc: denied { perfmon } for pid=5165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.056000 audit[5165]: AVC avc: denied { perfmon } for pid=5165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.056000 audit[5165]: AVC avc: denied { perfmon } for pid=5165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.056000 audit[5165]: AVC avc: denied { perfmon } for pid=5165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.056000 audit[5165]: AVC avc: denied { bpf } for pid=5165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.056000 audit[5165]: AVC avc: denied { bpf } for pid=5165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.056000 audit: BPF prog-id=226 op=LOAD Sep 6 01:23:06.056000 audit[5165]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4701 pid=5165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:06.056000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430373439633764333735363538316161643165643563316139306131 Sep 6 01:23:06.056000 audit[5165]: AVC avc: denied { bpf } for pid=5165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.056000 audit[5165]: AVC avc: denied { bpf } for pid=5165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.056000 audit[5165]: AVC avc: denied { perfmon } for pid=5165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.056000 audit[5165]: AVC avc: denied { perfmon } for pid=5165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.056000 audit[5165]: AVC avc: denied { perfmon } for pid=5165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.056000 audit[5165]: AVC avc: denied { perfmon } for pid=5165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.056000 audit[5165]: AVC avc: denied { perfmon } for pid=5165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.056000 audit[5165]: AVC avc: denied { bpf } for pid=5165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.056000 audit[5165]: AVC avc: denied { bpf } for pid=5165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.056000 audit: BPF prog-id=227 op=LOAD Sep 6 01:23:06.056000 audit[5165]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4701 pid=5165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:06.056000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430373439633764333735363538316161643165643563316139306131 Sep 6 01:23:06.056000 audit: BPF prog-id=227 op=UNLOAD Sep 6 01:23:06.056000 audit: BPF prog-id=226 op=UNLOAD Sep 6 01:23:06.056000 audit[5165]: AVC avc: denied { bpf } for pid=5165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.056000 audit[5165]: AVC avc: denied { bpf } for pid=5165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.056000 audit[5165]: AVC avc: denied { bpf } for pid=5165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.056000 audit[5165]: AVC avc: denied { perfmon } for pid=5165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.056000 audit[5165]: AVC avc: denied { perfmon } for pid=5165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.056000 audit[5165]: AVC avc: denied { perfmon } for pid=5165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.056000 audit[5165]: AVC avc: denied { perfmon } for pid=5165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.056000 audit[5165]: AVC avc: denied { perfmon } for pid=5165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.056000 audit[5165]: AVC avc: denied { bpf } for pid=5165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.056000 audit[5165]: AVC avc: denied { bpf } for pid=5165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.056000 audit: BPF prog-id=228 op=LOAD Sep 6 01:23:06.056000 audit[5165]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4701 pid=5165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:06.056000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430373439633764333735363538316161643165643563316139306131 Sep 6 01:23:06.112014 env[1474]: time="2025-09-06T01:23:06.111961023Z" level=info msg="StartContainer for \"40749c7d3756581aad1ed5c1a90a13a4fff5a333f197d55c45158a5a4cf4951a\" returns successfully" Sep 6 01:23:06.163874 env[1474]: 2025-09-06 01:23:06.097 [WARNING][5185] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--9hmdg-eth0", GenerateName:"calico-apiserver-64697d84fd-", Namespace:"calico-apiserver", SelfLink:"", UID:"d17efce8-fa93-4bdb-81af-efc70b288052", ResourceVersion:"1002", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 23, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64697d84fd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-b5f8f4c6c5", ContainerID:"a95b15e4d73e8039744828997b15f4cbd038d29f2d08d1128e78893a1414a197", Pod:"calico-apiserver-64697d84fd-9hmdg", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.37.200/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic4e36c4174d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:23:06.163874 env[1474]: 2025-09-06 01:23:06.097 [INFO][5185] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" Sep 6 01:23:06.163874 env[1474]: 2025-09-06 01:23:06.097 [INFO][5185] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" iface="eth0" netns="" Sep 6 01:23:06.163874 env[1474]: 2025-09-06 01:23:06.097 [INFO][5185] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" Sep 6 01:23:06.163874 env[1474]: 2025-09-06 01:23:06.097 [INFO][5185] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" Sep 6 01:23:06.163874 env[1474]: 2025-09-06 01:23:06.143 [INFO][5204] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" HandleID="k8s-pod-network.9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--9hmdg-eth0" Sep 6 01:23:06.163874 env[1474]: 2025-09-06 01:23:06.143 [INFO][5204] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:23:06.163874 env[1474]: 2025-09-06 01:23:06.143 [INFO][5204] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:23:06.163874 env[1474]: 2025-09-06 01:23:06.154 [WARNING][5204] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" HandleID="k8s-pod-network.9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--9hmdg-eth0" Sep 6 01:23:06.163874 env[1474]: 2025-09-06 01:23:06.154 [INFO][5204] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" HandleID="k8s-pod-network.9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--9hmdg-eth0" Sep 6 01:23:06.163874 env[1474]: 2025-09-06 01:23:06.161 [INFO][5204] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:23:06.163874 env[1474]: 2025-09-06 01:23:06.162 [INFO][5185] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7" Sep 6 01:23:06.164354 env[1474]: time="2025-09-06T01:23:06.163904322Z" level=info msg="TearDown network for sandbox \"9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7\" successfully" Sep 6 01:23:06.179950 env[1474]: time="2025-09-06T01:23:06.179895420Z" level=info msg="RemovePodSandbox \"9279617b592df95c4e1740d90c88777bdde6549f857c321ea04cc0d957a408b7\" returns successfully" Sep 6 01:23:06.180532 env[1474]: time="2025-09-06T01:23:06.180504821Z" level=info msg="StopPodSandbox for \"2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6\"" Sep 6 01:23:06.262461 env[1474]: time="2025-09-06T01:23:06.262415994Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:23:06.276344 env[1474]: time="2025-09-06T01:23:06.276298850Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:23:06.283424 env[1474]: time="2025-09-06T01:23:06.283384298Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:23:06.292640 env[1474]: time="2025-09-06T01:23:06.292599709Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:23:06.293053 env[1474]: time="2025-09-06T01:23:06.293026349Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08\"" Sep 6 01:23:06.295365 env[1474]: time="2025-09-06T01:23:06.295331832Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\"" Sep 6 01:23:06.296875 env[1474]: time="2025-09-06T01:23:06.296847233Z" level=info msg="CreateContainer within sandbox \"a95b15e4d73e8039744828997b15f4cbd038d29f2d08d1128e78893a1414a197\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 6 01:23:06.305309 env[1474]: 2025-09-06 01:23:06.243 [WARNING][5224] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--dk7np-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"e7b9d8f2-69b8-4c82-be6b-f97e78bfa002", ResourceVersion:"968", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-b5f8f4c6c5", ContainerID:"935e4e94c9b35726b22c2cc65bf570802b65e4fbf2d4cebe6af0e4d7e0ba5fa1", Pod:"coredns-7c65d6cfc9-dk7np", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.37.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliae2d72ab7f9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:23:06.305309 env[1474]: 2025-09-06 01:23:06.243 [INFO][5224] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" Sep 6 01:23:06.305309 env[1474]: 2025-09-06 01:23:06.243 [INFO][5224] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" iface="eth0" netns="" Sep 6 01:23:06.305309 env[1474]: 2025-09-06 01:23:06.243 [INFO][5224] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" Sep 6 01:23:06.305309 env[1474]: 2025-09-06 01:23:06.243 [INFO][5224] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" Sep 6 01:23:06.305309 env[1474]: 2025-09-06 01:23:06.279 [INFO][5231] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" HandleID="k8s-pod-network.2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--dk7np-eth0" Sep 6 01:23:06.305309 env[1474]: 2025-09-06 01:23:06.279 [INFO][5231] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:23:06.305309 env[1474]: 2025-09-06 01:23:06.279 [INFO][5231] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:23:06.305309 env[1474]: 2025-09-06 01:23:06.290 [WARNING][5231] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" HandleID="k8s-pod-network.2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--dk7np-eth0" Sep 6 01:23:06.305309 env[1474]: 2025-09-06 01:23:06.290 [INFO][5231] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" HandleID="k8s-pod-network.2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--dk7np-eth0" Sep 6 01:23:06.305309 env[1474]: 2025-09-06 01:23:06.297 [INFO][5231] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:23:06.305309 env[1474]: 2025-09-06 01:23:06.302 [INFO][5224] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" Sep 6 01:23:06.308237 env[1474]: time="2025-09-06T01:23:06.308193886Z" level=info msg="TearDown network for sandbox \"2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6\" successfully" Sep 6 01:23:06.308423 env[1474]: time="2025-09-06T01:23:06.308404127Z" level=info msg="StopPodSandbox for \"2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6\" returns successfully" Sep 6 01:23:06.309493 env[1474]: time="2025-09-06T01:23:06.309457368Z" level=info msg="RemovePodSandbox for \"2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6\"" Sep 6 01:23:06.309670 env[1474]: time="2025-09-06T01:23:06.309628168Z" level=info msg="Forcibly stopping sandbox \"2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6\"" Sep 6 01:23:06.392395 env[1474]: time="2025-09-06T01:23:06.392293662Z" level=info msg="CreateContainer within sandbox \"a95b15e4d73e8039744828997b15f4cbd038d29f2d08d1128e78893a1414a197\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"089eb75e23ec059ae5f7a4de4d4d96bd7d64d42cc1a6aee57c6aa213c03b0a35\"" Sep 6 01:23:06.393735 env[1474]: time="2025-09-06T01:23:06.393703584Z" level=info msg="StartContainer for \"089eb75e23ec059ae5f7a4de4d4d96bd7d64d42cc1a6aee57c6aa213c03b0a35\"" Sep 6 01:23:06.421418 systemd[1]: Started cri-containerd-089eb75e23ec059ae5f7a4de4d4d96bd7d64d42cc1a6aee57c6aa213c03b0a35.scope. Sep 6 01:23:06.423409 env[1474]: 2025-09-06 01:23:06.363 [WARNING][5246] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--dk7np-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"e7b9d8f2-69b8-4c82-be6b-f97e78bfa002", ResourceVersion:"968", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-b5f8f4c6c5", ContainerID:"935e4e94c9b35726b22c2cc65bf570802b65e4fbf2d4cebe6af0e4d7e0ba5fa1", Pod:"coredns-7c65d6cfc9-dk7np", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.37.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliae2d72ab7f9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:23:06.423409 env[1474]: 2025-09-06 01:23:06.363 [INFO][5246] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" Sep 6 01:23:06.423409 env[1474]: 2025-09-06 01:23:06.363 [INFO][5246] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" iface="eth0" netns="" Sep 6 01:23:06.423409 env[1474]: 2025-09-06 01:23:06.363 [INFO][5246] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" Sep 6 01:23:06.423409 env[1474]: 2025-09-06 01:23:06.363 [INFO][5246] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" Sep 6 01:23:06.423409 env[1474]: 2025-09-06 01:23:06.405 [INFO][5253] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" HandleID="k8s-pod-network.2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--dk7np-eth0" Sep 6 01:23:06.423409 env[1474]: 2025-09-06 01:23:06.405 [INFO][5253] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:23:06.423409 env[1474]: 2025-09-06 01:23:06.405 [INFO][5253] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:23:06.423409 env[1474]: 2025-09-06 01:23:06.414 [WARNING][5253] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" HandleID="k8s-pod-network.2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--dk7np-eth0" Sep 6 01:23:06.423409 env[1474]: 2025-09-06 01:23:06.414 [INFO][5253] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" HandleID="k8s-pod-network.2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--dk7np-eth0" Sep 6 01:23:06.423409 env[1474]: 2025-09-06 01:23:06.416 [INFO][5253] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:23:06.423409 env[1474]: 2025-09-06 01:23:06.418 [INFO][5246] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6" Sep 6 01:23:06.423834 env[1474]: time="2025-09-06T01:23:06.423439778Z" level=info msg="TearDown network for sandbox \"2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6\" successfully" Sep 6 01:23:06.446501 env[1474]: time="2025-09-06T01:23:06.446437604Z" level=info msg="RemovePodSandbox \"2c071a6b7613d676b2bb63ad0d14c41d7e70489e12f934ef02d15d30409c9ae6\" returns successfully" Sep 6 01:23:06.447157 env[1474]: time="2025-09-06T01:23:06.447053525Z" level=info msg="StopPodSandbox for \"49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655\"" Sep 6 01:23:06.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.471000 audit: BPF prog-id=229 op=LOAD Sep 6 01:23:06.472000 audit[5267]: AVC avc: denied { bpf } for pid=5267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.472000 audit[5267]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4789 pid=5267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:06.472000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038396562373565323365633035396165356637613464653464346439 Sep 6 01:23:06.472000 audit[5267]: AVC avc: denied { perfmon } for pid=5267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.472000 audit[5267]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4789 pid=5267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:06.472000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038396562373565323365633035396165356637613464653464346439 Sep 6 01:23:06.473000 audit[5267]: AVC avc: denied { bpf } for pid=5267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.473000 audit[5267]: AVC avc: denied { bpf } for pid=5267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.473000 audit[5267]: AVC avc: denied { bpf } for pid=5267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.473000 audit[5267]: AVC avc: denied { perfmon } for pid=5267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.473000 audit[5267]: AVC avc: denied { perfmon } for pid=5267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.473000 audit[5267]: AVC avc: denied { perfmon } for pid=5267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.473000 audit[5267]: AVC avc: denied { perfmon } for pid=5267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.473000 audit[5267]: AVC avc: denied { perfmon } for pid=5267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.473000 audit[5267]: AVC avc: denied { bpf } for pid=5267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.473000 audit[5267]: AVC avc: denied { bpf } for pid=5267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.473000 audit: BPF prog-id=230 op=LOAD Sep 6 01:23:06.473000 audit[5267]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4789 pid=5267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:06.473000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038396562373565323365633035396165356637613464653464346439 Sep 6 01:23:06.473000 audit[5267]: AVC avc: denied { bpf } for pid=5267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.473000 audit[5267]: AVC avc: denied { bpf } for pid=5267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.473000 audit[5267]: AVC avc: denied { perfmon } for pid=5267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.473000 audit[5267]: AVC avc: denied { perfmon } for pid=5267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.473000 audit[5267]: AVC avc: denied { perfmon } for pid=5267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.473000 audit[5267]: AVC avc: denied { perfmon } for pid=5267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.473000 audit[5267]: AVC avc: denied { perfmon } for pid=5267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.473000 audit[5267]: AVC avc: denied { bpf } for pid=5267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.473000 audit[5267]: AVC avc: denied { bpf } for pid=5267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.473000 audit: BPF prog-id=231 op=LOAD Sep 6 01:23:06.473000 audit[5267]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4789 pid=5267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:06.473000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038396562373565323365633035396165356637613464653464346439 Sep 6 01:23:06.474000 audit: BPF prog-id=231 op=UNLOAD Sep 6 01:23:06.474000 audit: BPF prog-id=230 op=UNLOAD Sep 6 01:23:06.474000 audit[5267]: AVC avc: denied { bpf } for pid=5267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.474000 audit[5267]: AVC avc: denied { bpf } for pid=5267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.474000 audit[5267]: AVC avc: denied { bpf } for pid=5267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.474000 audit[5267]: AVC avc: denied { perfmon } for pid=5267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.474000 audit[5267]: AVC avc: denied { perfmon } for pid=5267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.474000 audit[5267]: AVC avc: denied { perfmon } for pid=5267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.474000 audit[5267]: AVC avc: denied { perfmon } for pid=5267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.474000 audit[5267]: AVC avc: denied { perfmon } for pid=5267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.474000 audit[5267]: AVC avc: denied { bpf } for pid=5267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.474000 audit[5267]: AVC avc: denied { bpf } for pid=5267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:06.474000 audit: BPF prog-id=232 op=LOAD Sep 6 01:23:06.474000 audit[5267]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4789 pid=5267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:06.474000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038396562373565323365633035396165356637613464653464346439 Sep 6 01:23:06.511684 env[1474]: time="2025-09-06T01:23:06.511637558Z" level=info msg="StartContainer for \"089eb75e23ec059ae5f7a4de4d4d96bd7d64d42cc1a6aee57c6aa213c03b0a35\" returns successfully" Sep 6 01:23:06.557323 env[1474]: 2025-09-06 01:23:06.510 [WARNING][5293] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--zsbc4-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"4639beed-680f-4604-a20a-d9cafa08e5ea", ResourceVersion:"1017", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-b5f8f4c6c5", ContainerID:"27653604c4dc25661efad2f744852521531e7a6355854ce9109334d3c31b1475", Pod:"coredns-7c65d6cfc9-zsbc4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.37.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali92408de5bd4", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:23:06.557323 env[1474]: 2025-09-06 01:23:06.511 [INFO][5293] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" Sep 6 01:23:06.557323 env[1474]: 2025-09-06 01:23:06.511 [INFO][5293] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" iface="eth0" netns="" Sep 6 01:23:06.557323 env[1474]: 2025-09-06 01:23:06.511 [INFO][5293] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" Sep 6 01:23:06.557323 env[1474]: 2025-09-06 01:23:06.511 [INFO][5293] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" Sep 6 01:23:06.557323 env[1474]: 2025-09-06 01:23:06.538 [INFO][5310] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" HandleID="k8s-pod-network.49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--zsbc4-eth0" Sep 6 01:23:06.557323 env[1474]: 2025-09-06 01:23:06.538 [INFO][5310] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:23:06.557323 env[1474]: 2025-09-06 01:23:06.538 [INFO][5310] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:23:06.557323 env[1474]: 2025-09-06 01:23:06.552 [WARNING][5310] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" HandleID="k8s-pod-network.49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--zsbc4-eth0" Sep 6 01:23:06.557323 env[1474]: 2025-09-06 01:23:06.552 [INFO][5310] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" HandleID="k8s-pod-network.49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--zsbc4-eth0" Sep 6 01:23:06.557323 env[1474]: 2025-09-06 01:23:06.554 [INFO][5310] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:23:06.557323 env[1474]: 2025-09-06 01:23:06.556 [INFO][5293] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" Sep 6 01:23:06.558062 env[1474]: time="2025-09-06T01:23:06.558027771Z" level=info msg="TearDown network for sandbox \"49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655\" successfully" Sep 6 01:23:06.558168 env[1474]: time="2025-09-06T01:23:06.558113131Z" level=info msg="StopPodSandbox for \"49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655\" returns successfully" Sep 6 01:23:06.558733 env[1474]: time="2025-09-06T01:23:06.558701812Z" level=info msg="RemovePodSandbox for \"49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655\"" Sep 6 01:23:06.558947 env[1474]: time="2025-09-06T01:23:06.558866612Z" level=info msg="Forcibly stopping sandbox \"49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655\"" Sep 6 01:23:06.663905 env[1474]: 2025-09-06 01:23:06.606 [WARNING][5324] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--zsbc4-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"4639beed-680f-4604-a20a-d9cafa08e5ea", ResourceVersion:"1017", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-b5f8f4c6c5", ContainerID:"27653604c4dc25661efad2f744852521531e7a6355854ce9109334d3c31b1475", Pod:"coredns-7c65d6cfc9-zsbc4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.37.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali92408de5bd4", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:23:06.663905 env[1474]: 2025-09-06 01:23:06.606 [INFO][5324] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" Sep 6 01:23:06.663905 env[1474]: 2025-09-06 01:23:06.607 [INFO][5324] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" iface="eth0" netns="" Sep 6 01:23:06.663905 env[1474]: 2025-09-06 01:23:06.607 [INFO][5324] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" Sep 6 01:23:06.663905 env[1474]: 2025-09-06 01:23:06.607 [INFO][5324] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" Sep 6 01:23:06.663905 env[1474]: 2025-09-06 01:23:06.638 [INFO][5332] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" HandleID="k8s-pod-network.49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--zsbc4-eth0" Sep 6 01:23:06.663905 env[1474]: 2025-09-06 01:23:06.638 [INFO][5332] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:23:06.663905 env[1474]: 2025-09-06 01:23:06.638 [INFO][5332] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:23:06.663905 env[1474]: 2025-09-06 01:23:06.653 [WARNING][5332] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" HandleID="k8s-pod-network.49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--zsbc4-eth0" Sep 6 01:23:06.663905 env[1474]: 2025-09-06 01:23:06.653 [INFO][5332] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" HandleID="k8s-pod-network.49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-coredns--7c65d6cfc9--zsbc4-eth0" Sep 6 01:23:06.663905 env[1474]: 2025-09-06 01:23:06.661 [INFO][5332] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:23:06.663905 env[1474]: 2025-09-06 01:23:06.662 [INFO][5324] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655" Sep 6 01:23:06.664776 env[1474]: time="2025-09-06T01:23:06.664739133Z" level=info msg="TearDown network for sandbox \"49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655\" successfully" Sep 6 01:23:06.683042 env[1474]: time="2025-09-06T01:23:06.682994994Z" level=info msg="RemovePodSandbox \"49f4a3dea96e041e7c20bd5955893ab88666ccaa3967372969c822910852f655\" returns successfully" Sep 6 01:23:06.683966 env[1474]: time="2025-09-06T01:23:06.683933795Z" level=info msg="StopPodSandbox for \"a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d\"" Sep 6 01:23:06.828949 env[1474]: 2025-09-06 01:23:06.753 [WARNING][5349] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--kube--controllers--7748ff464c--46pw5-eth0", GenerateName:"calico-kube-controllers-7748ff464c-", Namespace:"calico-system", SelfLink:"", UID:"124eeee7-5ce0-48f1-a731-7543dcb4a9e4", ResourceVersion:"1037", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7748ff464c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-b5f8f4c6c5", ContainerID:"f304f062fc956576ba39004fa94179c3cc72fa5519f5a954b303271cc3b687d7", Pod:"calico-kube-controllers-7748ff464c-46pw5", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.37.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali43012f3c65f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:23:06.828949 env[1474]: 2025-09-06 01:23:06.753 [INFO][5349] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" Sep 6 01:23:06.828949 env[1474]: 2025-09-06 01:23:06.753 [INFO][5349] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" iface="eth0" netns="" Sep 6 01:23:06.828949 env[1474]: 2025-09-06 01:23:06.753 [INFO][5349] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" Sep 6 01:23:06.828949 env[1474]: 2025-09-06 01:23:06.753 [INFO][5349] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" Sep 6 01:23:06.828949 env[1474]: 2025-09-06 01:23:06.802 [INFO][5360] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" HandleID="k8s-pod-network.a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--kube--controllers--7748ff464c--46pw5-eth0" Sep 6 01:23:06.828949 env[1474]: 2025-09-06 01:23:06.802 [INFO][5360] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:23:06.828949 env[1474]: 2025-09-06 01:23:06.802 [INFO][5360] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:23:06.828949 env[1474]: 2025-09-06 01:23:06.823 [WARNING][5360] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" HandleID="k8s-pod-network.a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--kube--controllers--7748ff464c--46pw5-eth0" Sep 6 01:23:06.828949 env[1474]: 2025-09-06 01:23:06.823 [INFO][5360] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" HandleID="k8s-pod-network.a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--kube--controllers--7748ff464c--46pw5-eth0" Sep 6 01:23:06.828949 env[1474]: 2025-09-06 01:23:06.826 [INFO][5360] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:23:06.828949 env[1474]: 2025-09-06 01:23:06.827 [INFO][5349] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" Sep 6 01:23:06.829523 env[1474]: time="2025-09-06T01:23:06.829489241Z" level=info msg="TearDown network for sandbox \"a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d\" successfully" Sep 6 01:23:06.829591 env[1474]: time="2025-09-06T01:23:06.829575281Z" level=info msg="StopPodSandbox for \"a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d\" returns successfully" Sep 6 01:23:06.830107 env[1474]: time="2025-09-06T01:23:06.830080081Z" level=info msg="RemovePodSandbox for \"a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d\"" Sep 6 01:23:06.830471 env[1474]: time="2025-09-06T01:23:06.830421162Z" level=info msg="Forcibly stopping sandbox \"a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d\"" Sep 6 01:23:06.883356 kubelet[2507]: I0906 01:23:06.883127 2507 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-7988f88666-xjt8j" podStartSLOduration=26.727753295 podStartE2EDuration="37.883097102s" podCreationTimestamp="2025-09-06 01:22:29 +0000 UTC" firstStartedPulling="2025-09-06 01:22:54.740547328 +0000 UTC m=+49.320071530" lastFinishedPulling="2025-09-06 01:23:05.895891135 +0000 UTC m=+60.475415337" observedRunningTime="2025-09-06 01:23:06.882446741 +0000 UTC m=+61.461970943" watchObservedRunningTime="2025-09-06 01:23:06.883097102 +0000 UTC m=+61.462621264" Sep 6 01:23:06.971682 env[1474]: 2025-09-06 01:23:06.905 [WARNING][5375] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--kube--controllers--7748ff464c--46pw5-eth0", GenerateName:"calico-kube-controllers-7748ff464c-", Namespace:"calico-system", SelfLink:"", UID:"124eeee7-5ce0-48f1-a731-7543dcb4a9e4", ResourceVersion:"1037", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7748ff464c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-b5f8f4c6c5", ContainerID:"f304f062fc956576ba39004fa94179c3cc72fa5519f5a954b303271cc3b687d7", Pod:"calico-kube-controllers-7748ff464c-46pw5", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.37.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali43012f3c65f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:23:06.971682 env[1474]: 2025-09-06 01:23:06.905 [INFO][5375] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" Sep 6 01:23:06.971682 env[1474]: 2025-09-06 01:23:06.905 [INFO][5375] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" iface="eth0" netns="" Sep 6 01:23:06.971682 env[1474]: 2025-09-06 01:23:06.905 [INFO][5375] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" Sep 6 01:23:06.971682 env[1474]: 2025-09-06 01:23:06.905 [INFO][5375] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" Sep 6 01:23:06.971682 env[1474]: 2025-09-06 01:23:06.935 [INFO][5398] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" HandleID="k8s-pod-network.a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--kube--controllers--7748ff464c--46pw5-eth0" Sep 6 01:23:06.971682 env[1474]: 2025-09-06 01:23:06.935 [INFO][5398] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:23:06.971682 env[1474]: 2025-09-06 01:23:06.936 [INFO][5398] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:23:06.971682 env[1474]: 2025-09-06 01:23:06.956 [WARNING][5398] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" HandleID="k8s-pod-network.a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--kube--controllers--7748ff464c--46pw5-eth0" Sep 6 01:23:06.971682 env[1474]: 2025-09-06 01:23:06.956 [INFO][5398] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" HandleID="k8s-pod-network.a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--kube--controllers--7748ff464c--46pw5-eth0" Sep 6 01:23:06.971682 env[1474]: 2025-09-06 01:23:06.969 [INFO][5398] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:23:06.971682 env[1474]: 2025-09-06 01:23:06.970 [INFO][5375] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d" Sep 6 01:23:06.972221 env[1474]: time="2025-09-06T01:23:06.972185643Z" level=info msg="TearDown network for sandbox \"a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d\" successfully" Sep 6 01:23:06.977000 audit[5404]: NETFILTER_CFG table=filter:134 family=2 entries=10 op=nft_register_rule pid=5404 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:23:06.984046 kernel: kauditd_printk_skb: 192 callbacks suppressed Sep 6 01:23:06.984190 kernel: audit: type=1325 audit(1757121786.977:1499): table=filter:134 family=2 entries=10 op=nft_register_rule pid=5404 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:23:06.977000 audit[5404]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffe0f63b00 a2=0 a3=1 items=0 ppid=2649 pid=5404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:07.033255 kernel: audit: type=1300 audit(1757121786.977:1499): arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffe0f63b00 a2=0 a3=1 items=0 ppid=2649 pid=5404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:06.977000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:23:07.048575 kernel: audit: type=1327 audit(1757121786.977:1499): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:23:07.003000 audit[5404]: NETFILTER_CFG table=nat:135 family=2 entries=24 op=nft_register_rule pid=5404 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:23:07.065393 kernel: audit: type=1325 audit(1757121787.003:1500): table=nat:135 family=2 entries=24 op=nft_register_rule pid=5404 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:23:07.003000 audit[5404]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffe0f63b00 a2=0 a3=1 items=0 ppid=2649 pid=5404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:07.094276 kernel: audit: type=1300 audit(1757121787.003:1500): arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffe0f63b00 a2=0 a3=1 items=0 ppid=2649 pid=5404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:07.100242 env[1474]: time="2025-09-06T01:23:07.100191908Z" level=info msg="RemovePodSandbox \"a6ca7c48ab0add73431bb5bc9f6b217c3845f5c9315ee1b097251551f731384d\" returns successfully" Sep 6 01:23:07.100972 env[1474]: time="2025-09-06T01:23:07.100946269Z" level=info msg="StopPodSandbox for \"ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959\"" Sep 6 01:23:07.003000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:23:07.119503 kernel: audit: type=1327 audit(1757121787.003:1500): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:23:07.153000 audit[5419]: NETFILTER_CFG table=filter:136 family=2 entries=10 op=nft_register_rule pid=5419 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:23:07.153000 audit[5419]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffc1c128c0 a2=0 a3=1 items=0 ppid=2649 pid=5419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:07.198528 kernel: audit: type=1325 audit(1757121787.153:1501): table=filter:136 family=2 entries=10 op=nft_register_rule pid=5419 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:23:07.198607 kernel: audit: type=1300 audit(1757121787.153:1501): arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffc1c128c0 a2=0 a3=1 items=0 ppid=2649 pid=5419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:07.198637 kernel: audit: type=1327 audit(1757121787.153:1501): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:23:07.153000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:23:07.221000 audit[5419]: NETFILTER_CFG table=nat:137 family=2 entries=32 op=nft_register_rule pid=5419 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:23:07.221000 audit[5419]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffc1c128c0 a2=0 a3=1 items=0 ppid=2649 pid=5419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:07.221000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:23:07.249174 kernel: audit: type=1325 audit(1757121787.221:1502): table=nat:137 family=2 entries=32 op=nft_register_rule pid=5419 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:23:07.276624 env[1474]: 2025-09-06 01:23:07.213 [WARNING][5415] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--b5f8f4c6c5-k8s-goldmane--7988f88666--xjt8j-eth0", GenerateName:"goldmane-7988f88666-", Namespace:"calico-system", SelfLink:"", UID:"173204e3-49e1-4a48-a5e0-d8016e50ca28", ResourceVersion:"1093", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"7988f88666", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-b5f8f4c6c5", ContainerID:"985e765694a63153bf88adeb25ade6b5106a73b49c4951fb0eb15c58b7195b96", Pod:"goldmane-7988f88666-xjt8j", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.37.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic7236724690", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:23:07.276624 env[1474]: 2025-09-06 01:23:07.214 [INFO][5415] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" Sep 6 01:23:07.276624 env[1474]: 2025-09-06 01:23:07.214 [INFO][5415] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" iface="eth0" netns="" Sep 6 01:23:07.276624 env[1474]: 2025-09-06 01:23:07.214 [INFO][5415] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" Sep 6 01:23:07.276624 env[1474]: 2025-09-06 01:23:07.214 [INFO][5415] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" Sep 6 01:23:07.276624 env[1474]: 2025-09-06 01:23:07.258 [INFO][5426] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" HandleID="k8s-pod-network.ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-goldmane--7988f88666--xjt8j-eth0" Sep 6 01:23:07.276624 env[1474]: 2025-09-06 01:23:07.260 [INFO][5426] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:23:07.276624 env[1474]: 2025-09-06 01:23:07.260 [INFO][5426] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:23:07.276624 env[1474]: 2025-09-06 01:23:07.272 [WARNING][5426] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" HandleID="k8s-pod-network.ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-goldmane--7988f88666--xjt8j-eth0" Sep 6 01:23:07.276624 env[1474]: 2025-09-06 01:23:07.272 [INFO][5426] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" HandleID="k8s-pod-network.ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-goldmane--7988f88666--xjt8j-eth0" Sep 6 01:23:07.276624 env[1474]: 2025-09-06 01:23:07.273 [INFO][5426] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:23:07.276624 env[1474]: 2025-09-06 01:23:07.274 [INFO][5415] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" Sep 6 01:23:07.277288 env[1474]: time="2025-09-06T01:23:07.277229549Z" level=info msg="TearDown network for sandbox \"ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959\" successfully" Sep 6 01:23:07.277396 env[1474]: time="2025-09-06T01:23:07.277378469Z" level=info msg="StopPodSandbox for \"ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959\" returns successfully" Sep 6 01:23:07.278214 env[1474]: time="2025-09-06T01:23:07.278176910Z" level=info msg="RemovePodSandbox for \"ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959\"" Sep 6 01:23:07.278397 env[1474]: time="2025-09-06T01:23:07.278349550Z" level=info msg="Forcibly stopping sandbox \"ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959\"" Sep 6 01:23:07.413594 env[1474]: 2025-09-06 01:23:07.333 [WARNING][5442] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--b5f8f4c6c5-k8s-goldmane--7988f88666--xjt8j-eth0", GenerateName:"goldmane-7988f88666-", Namespace:"calico-system", SelfLink:"", UID:"173204e3-49e1-4a48-a5e0-d8016e50ca28", ResourceVersion:"1093", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"7988f88666", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-b5f8f4c6c5", ContainerID:"985e765694a63153bf88adeb25ade6b5106a73b49c4951fb0eb15c58b7195b96", Pod:"goldmane-7988f88666-xjt8j", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.37.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic7236724690", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:23:07.413594 env[1474]: 2025-09-06 01:23:07.334 [INFO][5442] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" Sep 6 01:23:07.413594 env[1474]: 2025-09-06 01:23:07.334 [INFO][5442] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" iface="eth0" netns="" Sep 6 01:23:07.413594 env[1474]: 2025-09-06 01:23:07.334 [INFO][5442] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" Sep 6 01:23:07.413594 env[1474]: 2025-09-06 01:23:07.334 [INFO][5442] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" Sep 6 01:23:07.413594 env[1474]: 2025-09-06 01:23:07.395 [INFO][5449] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" HandleID="k8s-pod-network.ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-goldmane--7988f88666--xjt8j-eth0" Sep 6 01:23:07.413594 env[1474]: 2025-09-06 01:23:07.396 [INFO][5449] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:23:07.413594 env[1474]: 2025-09-06 01:23:07.396 [INFO][5449] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:23:07.413594 env[1474]: 2025-09-06 01:23:07.409 [WARNING][5449] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" HandleID="k8s-pod-network.ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-goldmane--7988f88666--xjt8j-eth0" Sep 6 01:23:07.413594 env[1474]: 2025-09-06 01:23:07.409 [INFO][5449] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" HandleID="k8s-pod-network.ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-goldmane--7988f88666--xjt8j-eth0" Sep 6 01:23:07.413594 env[1474]: 2025-09-06 01:23:07.410 [INFO][5449] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:23:07.413594 env[1474]: 2025-09-06 01:23:07.412 [INFO][5442] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959" Sep 6 01:23:07.414156 env[1474]: time="2025-09-06T01:23:07.414091863Z" level=info msg="TearDown network for sandbox \"ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959\" successfully" Sep 6 01:23:07.435175 env[1474]: time="2025-09-06T01:23:07.435066647Z" level=info msg="RemovePodSandbox \"ba1b2e7603d0272ec7d8adfbf85f814d7d80bd0150cc778ba7fddd5a121ec959\" returns successfully" Sep 6 01:23:07.435906 env[1474]: time="2025-09-06T01:23:07.435878768Z" level=info msg="StopPodSandbox for \"d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98\"" Sep 6 01:23:07.567380 env[1474]: 2025-09-06 01:23:07.490 [WARNING][5465] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--b5f8f4c6c5-k8s-csi--node--driver--m9tfk-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"04a7e183-4c51-4aa6-b31d-7efe6ca81746", ResourceVersion:"991", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"856c6b598f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-b5f8f4c6c5", ContainerID:"6826830f58a59d20430b78300cbd495455821fdb8fcea4ffe3a1f3984d726c54", Pod:"csi-node-driver-m9tfk", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.37.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali1ff5741151e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:23:07.567380 env[1474]: 2025-09-06 01:23:07.490 [INFO][5465] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" Sep 6 01:23:07.567380 env[1474]: 2025-09-06 01:23:07.490 [INFO][5465] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" iface="eth0" netns="" Sep 6 01:23:07.567380 env[1474]: 2025-09-06 01:23:07.490 [INFO][5465] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" Sep 6 01:23:07.567380 env[1474]: 2025-09-06 01:23:07.490 [INFO][5465] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" Sep 6 01:23:07.567380 env[1474]: 2025-09-06 01:23:07.527 [INFO][5472] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" HandleID="k8s-pod-network.d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-csi--node--driver--m9tfk-eth0" Sep 6 01:23:07.567380 env[1474]: 2025-09-06 01:23:07.527 [INFO][5472] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:23:07.567380 env[1474]: 2025-09-06 01:23:07.531 [INFO][5472] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:23:07.567380 env[1474]: 2025-09-06 01:23:07.562 [WARNING][5472] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" HandleID="k8s-pod-network.d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-csi--node--driver--m9tfk-eth0" Sep 6 01:23:07.567380 env[1474]: 2025-09-06 01:23:07.562 [INFO][5472] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" HandleID="k8s-pod-network.d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-csi--node--driver--m9tfk-eth0" Sep 6 01:23:07.567380 env[1474]: 2025-09-06 01:23:07.564 [INFO][5472] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:23:07.567380 env[1474]: 2025-09-06 01:23:07.565 [INFO][5465] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" Sep 6 01:23:07.568109 env[1474]: time="2025-09-06T01:23:07.568069717Z" level=info msg="TearDown network for sandbox \"d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98\" successfully" Sep 6 01:23:07.568220 env[1474]: time="2025-09-06T01:23:07.568201838Z" level=info msg="StopPodSandbox for \"d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98\" returns successfully" Sep 6 01:23:07.568812 env[1474]: time="2025-09-06T01:23:07.568781838Z" level=info msg="RemovePodSandbox for \"d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98\"" Sep 6 01:23:07.569135 env[1474]: time="2025-09-06T01:23:07.569076599Z" level=info msg="Forcibly stopping sandbox \"d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98\"" Sep 6 01:23:07.712718 env[1474]: 2025-09-06 01:23:07.672 [WARNING][5486] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--b5f8f4c6c5-k8s-csi--node--driver--m9tfk-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"04a7e183-4c51-4aa6-b31d-7efe6ca81746", ResourceVersion:"991", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"856c6b598f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-b5f8f4c6c5", ContainerID:"6826830f58a59d20430b78300cbd495455821fdb8fcea4ffe3a1f3984d726c54", Pod:"csi-node-driver-m9tfk", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.37.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali1ff5741151e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:23:07.712718 env[1474]: 2025-09-06 01:23:07.672 [INFO][5486] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" Sep 6 01:23:07.712718 env[1474]: 2025-09-06 01:23:07.672 [INFO][5486] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" iface="eth0" netns="" Sep 6 01:23:07.712718 env[1474]: 2025-09-06 01:23:07.672 [INFO][5486] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" Sep 6 01:23:07.712718 env[1474]: 2025-09-06 01:23:07.672 [INFO][5486] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" Sep 6 01:23:07.712718 env[1474]: 2025-09-06 01:23:07.697 [INFO][5493] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" HandleID="k8s-pod-network.d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-csi--node--driver--m9tfk-eth0" Sep 6 01:23:07.712718 env[1474]: 2025-09-06 01:23:07.697 [INFO][5493] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:23:07.712718 env[1474]: 2025-09-06 01:23:07.697 [INFO][5493] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:23:07.712718 env[1474]: 2025-09-06 01:23:07.708 [WARNING][5493] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" HandleID="k8s-pod-network.d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-csi--node--driver--m9tfk-eth0" Sep 6 01:23:07.712718 env[1474]: 2025-09-06 01:23:07.708 [INFO][5493] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" HandleID="k8s-pod-network.d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-csi--node--driver--m9tfk-eth0" Sep 6 01:23:07.712718 env[1474]: 2025-09-06 01:23:07.710 [INFO][5493] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:23:07.712718 env[1474]: 2025-09-06 01:23:07.711 [INFO][5486] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98" Sep 6 01:23:07.713345 env[1474]: time="2025-09-06T01:23:07.713300482Z" level=info msg="TearDown network for sandbox \"d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98\" successfully" Sep 6 01:23:07.754525 env[1474]: time="2025-09-06T01:23:07.754475488Z" level=info msg="RemovePodSandbox \"d3a09c7759d129d6b82c7f136bd22832bda248b1505f7d763b2151c518bffe98\" returns successfully" Sep 6 01:23:07.757670 env[1474]: time="2025-09-06T01:23:07.757631412Z" level=info msg="StopPodSandbox for \"210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287\"" Sep 6 01:23:07.960211 env[1474]: 2025-09-06 01:23:07.874 [WARNING][5507] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--sjx99-eth0", GenerateName:"calico-apiserver-64697d84fd-", Namespace:"calico-apiserver", SelfLink:"", UID:"37035637-3da4-419c-9970-0103d9f2a7f3", ResourceVersion:"1062", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 23, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64697d84fd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-b5f8f4c6c5", ContainerID:"8f546e4b1578e310de5fdd458a831a9bc13b0d407d668f3925e423ab56b423fc", Pod:"calico-apiserver-64697d84fd-sjx99", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.37.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali82439d7b06d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:23:07.960211 env[1474]: 2025-09-06 01:23:07.875 [INFO][5507] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" Sep 6 01:23:07.960211 env[1474]: 2025-09-06 01:23:07.875 [INFO][5507] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" iface="eth0" netns="" Sep 6 01:23:07.960211 env[1474]: 2025-09-06 01:23:07.875 [INFO][5507] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" Sep 6 01:23:07.960211 env[1474]: 2025-09-06 01:23:07.875 [INFO][5507] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" Sep 6 01:23:07.960211 env[1474]: 2025-09-06 01:23:07.914 [INFO][5514] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" HandleID="k8s-pod-network.210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--sjx99-eth0" Sep 6 01:23:07.960211 env[1474]: 2025-09-06 01:23:07.914 [INFO][5514] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:23:07.960211 env[1474]: 2025-09-06 01:23:07.916 [INFO][5514] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:23:07.960211 env[1474]: 2025-09-06 01:23:07.932 [WARNING][5514] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" HandleID="k8s-pod-network.210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--sjx99-eth0" Sep 6 01:23:07.960211 env[1474]: 2025-09-06 01:23:07.933 [INFO][5514] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" HandleID="k8s-pod-network.210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--sjx99-eth0" Sep 6 01:23:07.960211 env[1474]: 2025-09-06 01:23:07.936 [INFO][5514] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:23:07.960211 env[1474]: 2025-09-06 01:23:07.938 [INFO][5507] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" Sep 6 01:23:07.964107 systemd[1]: run-containerd-runc-k8s.io-40749c7d3756581aad1ed5c1a90a13a4fff5a333f197d55c45158a5a4cf4951a-runc.AFjJCP.mount: Deactivated successfully. Sep 6 01:23:07.965735 env[1474]: time="2025-09-06T01:23:07.965671287Z" level=info msg="TearDown network for sandbox \"210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287\" successfully" Sep 6 01:23:07.970069 env[1474]: time="2025-09-06T01:23:07.970014172Z" level=info msg="StopPodSandbox for \"210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287\" returns successfully" Sep 6 01:23:07.985573 env[1474]: time="2025-09-06T01:23:07.985531550Z" level=info msg="RemovePodSandbox for \"210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287\"" Sep 6 01:23:07.985787 env[1474]: time="2025-09-06T01:23:07.985746630Z" level=info msg="Forcibly stopping sandbox \"210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287\"" Sep 6 01:23:08.192446 env[1474]: 2025-09-06 01:23:08.090 [WARNING][5546] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--sjx99-eth0", GenerateName:"calico-apiserver-64697d84fd-", Namespace:"calico-apiserver", SelfLink:"", UID:"37035637-3da4-419c-9970-0103d9f2a7f3", ResourceVersion:"1062", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 23, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64697d84fd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-b5f8f4c6c5", ContainerID:"8f546e4b1578e310de5fdd458a831a9bc13b0d407d668f3925e423ab56b423fc", Pod:"calico-apiserver-64697d84fd-sjx99", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.37.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali82439d7b06d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:23:08.192446 env[1474]: 2025-09-06 01:23:08.090 [INFO][5546] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" Sep 6 01:23:08.192446 env[1474]: 2025-09-06 01:23:08.090 [INFO][5546] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" iface="eth0" netns="" Sep 6 01:23:08.192446 env[1474]: 2025-09-06 01:23:08.090 [INFO][5546] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" Sep 6 01:23:08.192446 env[1474]: 2025-09-06 01:23:08.090 [INFO][5546] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" Sep 6 01:23:08.192446 env[1474]: 2025-09-06 01:23:08.164 [INFO][5553] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" HandleID="k8s-pod-network.210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--sjx99-eth0" Sep 6 01:23:08.192446 env[1474]: 2025-09-06 01:23:08.165 [INFO][5553] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:23:08.192446 env[1474]: 2025-09-06 01:23:08.165 [INFO][5553] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:23:08.192446 env[1474]: 2025-09-06 01:23:08.186 [WARNING][5553] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" HandleID="k8s-pod-network.210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--sjx99-eth0" Sep 6 01:23:08.192446 env[1474]: 2025-09-06 01:23:08.187 [INFO][5553] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" HandleID="k8s-pod-network.210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" Workload="ci--3510.3.8--n--b5f8f4c6c5-k8s-calico--apiserver--64697d84fd--sjx99-eth0" Sep 6 01:23:08.192446 env[1474]: 2025-09-06 01:23:08.189 [INFO][5553] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:23:08.192446 env[1474]: 2025-09-06 01:23:08.190 [INFO][5546] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287" Sep 6 01:23:08.193019 env[1474]: time="2025-09-06T01:23:08.192474062Z" level=info msg="TearDown network for sandbox \"210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287\" successfully" Sep 6 01:23:08.656053 env[1474]: time="2025-09-06T01:23:08.655982222Z" level=info msg="RemovePodSandbox \"210f901fd864d8c1d8844aac73f23b71d2863b88828bb5631e6bdad0213a0287\" returns successfully" Sep 6 01:23:08.662978 env[1474]: time="2025-09-06T01:23:08.662919470Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:23:08.688311 env[1474]: time="2025-09-06T01:23:08.684693734Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a319b5bdc1001e98875b68e2943279adb74bcb19d09f1db857bc27959a078a65,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:23:08.689358 systemd[1]: run-containerd-runc-k8s.io-049a9751ea2b61f19d5654b91a108f306c59a568c3775a0fba835d1d081a0111-runc.hqG3CY.mount: Deactivated successfully. Sep 6 01:23:08.693881 env[1474]: time="2025-09-06T01:23:08.693837104Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:23:08.704083 env[1474]: time="2025-09-06T01:23:08.704025836Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:731ab232ca708102ab332340b1274d5cd656aa896ecc5368ee95850b811df86f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:23:08.705012 env[1474]: time="2025-09-06T01:23:08.704966237Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\" returns image reference \"sha256:a319b5bdc1001e98875b68e2943279adb74bcb19d09f1db857bc27959a078a65\"" Sep 6 01:23:08.709497 env[1474]: time="2025-09-06T01:23:08.709455202Z" level=info msg="CreateContainer within sandbox \"6826830f58a59d20430b78300cbd495455821fdb8fcea4ffe3a1f3984d726c54\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Sep 6 01:23:08.766285 env[1474]: time="2025-09-06T01:23:08.766233906Z" level=info msg="CreateContainer within sandbox \"6826830f58a59d20430b78300cbd495455821fdb8fcea4ffe3a1f3984d726c54\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"2a216a327e5976708c2446f6b12a43555a383997eb5bbb0dabdd726908ae6f0a\"" Sep 6 01:23:08.767059 env[1474]: time="2025-09-06T01:23:08.767029827Z" level=info msg="StartContainer for \"2a216a327e5976708c2446f6b12a43555a383997eb5bbb0dabdd726908ae6f0a\"" Sep 6 01:23:08.809456 systemd[1]: Started cri-containerd-2a216a327e5976708c2446f6b12a43555a383997eb5bbb0dabdd726908ae6f0a.scope. Sep 6 01:23:08.835000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:08.835000 audit[5593]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bf5a0 a2=3c a3=0 items=0 ppid=4620 pid=5593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:08.835000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261323136613332376535393736373038633234343666366231326134 Sep 6 01:23:08.836000 audit[5593]: AVC avc: denied { bpf } for pid=5593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:08.836000 audit[5593]: AVC avc: denied { bpf } for pid=5593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:08.836000 audit[5593]: AVC avc: denied { bpf } for pid=5593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:08.836000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:08.836000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:08.836000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:08.836000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:08.836000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:08.836000 audit[5593]: AVC avc: denied { bpf } for pid=5593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:08.836000 audit[5593]: AVC avc: denied { bpf } for pid=5593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:08.836000 audit: BPF prog-id=233 op=LOAD Sep 6 01:23:08.836000 audit[5593]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bf8e0 a2=78 a3=0 items=0 ppid=4620 pid=5593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:08.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261323136613332376535393736373038633234343666366231326134 Sep 6 01:23:08.836000 audit[5593]: AVC avc: denied { bpf } for pid=5593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:08.836000 audit[5593]: AVC avc: denied { bpf } for pid=5593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:08.836000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:08.836000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:08.836000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:08.836000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:08.836000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:08.836000 audit[5593]: AVC avc: denied { bpf } for pid=5593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:08.836000 audit[5593]: AVC avc: denied { bpf } for pid=5593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:08.836000 audit: BPF prog-id=234 op=LOAD Sep 6 01:23:08.836000 audit[5593]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bf670 a2=78 a3=0 items=0 ppid=4620 pid=5593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:08.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261323136613332376535393736373038633234343666366231326134 Sep 6 01:23:08.837000 audit: BPF prog-id=234 op=UNLOAD Sep 6 01:23:08.837000 audit: BPF prog-id=233 op=UNLOAD Sep 6 01:23:08.837000 audit[5593]: AVC avc: denied { bpf } for pid=5593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:08.837000 audit[5593]: AVC avc: denied { bpf } for pid=5593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:08.837000 audit[5593]: AVC avc: denied { bpf } for pid=5593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:08.837000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:08.837000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:08.837000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:08.837000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:08.837000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:08.837000 audit[5593]: AVC avc: denied { bpf } for pid=5593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:08.837000 audit[5593]: AVC avc: denied { bpf } for pid=5593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:23:08.837000 audit: BPF prog-id=235 op=LOAD Sep 6 01:23:08.837000 audit[5593]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bfb40 a2=78 a3=0 items=0 ppid=4620 pid=5593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:08.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261323136613332376535393736373038633234343666366231326134 Sep 6 01:23:08.864725 env[1474]: time="2025-09-06T01:23:08.864662616Z" level=info msg="StartContainer for \"2a216a327e5976708c2446f6b12a43555a383997eb5bbb0dabdd726908ae6f0a\" returns successfully" Sep 6 01:23:08.946215 kubelet[2507]: I0906 01:23:08.946033 2507 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 6 01:23:08.967883 systemd[1]: run-containerd-runc-k8s.io-40749c7d3756581aad1ed5c1a90a13a4fff5a333f197d55c45158a5a4cf4951a-runc.ruu1Mm.mount: Deactivated successfully. Sep 6 01:23:08.989441 kubelet[2507]: I0906 01:23:08.988807 2507 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-m9tfk" podStartSLOduration=25.7523783 podStartE2EDuration="39.988788075s" podCreationTimestamp="2025-09-06 01:22:29 +0000 UTC" firstStartedPulling="2025-09-06 01:22:54.469472023 +0000 UTC m=+49.048996185" lastFinishedPulling="2025-09-06 01:23:08.705881758 +0000 UTC m=+63.285405960" observedRunningTime="2025-09-06 01:23:08.987289474 +0000 UTC m=+63.566813676" watchObservedRunningTime="2025-09-06 01:23:08.988788075 +0000 UTC m=+63.568312237" Sep 6 01:23:08.989441 kubelet[2507]: I0906 01:23:08.989288 2507 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-64697d84fd-9hmdg" podStartSLOduration=34.509345308 podStartE2EDuration="45.989272116s" podCreationTimestamp="2025-09-06 01:22:23 +0000 UTC" firstStartedPulling="2025-09-06 01:22:54.814662183 +0000 UTC m=+49.394186385" lastFinishedPulling="2025-09-06 01:23:06.294588991 +0000 UTC m=+60.874113193" observedRunningTime="2025-09-06 01:23:06.913025536 +0000 UTC m=+61.492549738" watchObservedRunningTime="2025-09-06 01:23:08.989272116 +0000 UTC m=+63.568796278" Sep 6 01:23:09.678097 kubelet[2507]: I0906 01:23:09.678040 2507 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Sep 6 01:23:09.679813 kubelet[2507]: I0906 01:23:09.679779 2507 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Sep 6 01:23:09.949463 systemd[1]: run-containerd-runc-k8s.io-40749c7d3756581aad1ed5c1a90a13a4fff5a333f197d55c45158a5a4cf4951a-runc.fdoMGT.mount: Deactivated successfully. Sep 6 01:23:10.671000 audit[5279]: AVC avc: denied { watch } for pid=5279 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_01_22_38.3197167713/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c535,c889 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c535,c889 tclass=file permissive=0 Sep 6 01:23:10.671000 audit[5279]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000dccfe0 a2=fc6 a3=0 items=0 ppid=4789 pid=5279 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c535,c889 key=(null) Sep 6 01:23:10.671000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 01:23:10.746000 audit[5668]: NETFILTER_CFG table=filter:138 family=2 entries=10 op=nft_register_rule pid=5668 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:23:10.746000 audit[5668]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffd6b740e0 a2=0 a3=1 items=0 ppid=2649 pid=5668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:10.746000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:23:10.754000 audit[5668]: NETFILTER_CFG table=nat:139 family=2 entries=36 op=nft_register_chain pid=5668 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:23:10.754000 audit[5668]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12004 a0=3 a1=ffffd6b740e0 a2=0 a3=1 items=0 ppid=2649 pid=5668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:10.754000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:23:14.397990 systemd[1]: run-containerd-runc-k8s.io-049a9751ea2b61f19d5654b91a108f306c59a568c3775a0fba835d1d081a0111-runc.Hm41Xz.mount: Deactivated successfully. Sep 6 01:23:30.718183 systemd[1]: run-containerd-runc-k8s.io-40749c7d3756581aad1ed5c1a90a13a4fff5a333f197d55c45158a5a4cf4951a-runc.CSFP6r.mount: Deactivated successfully. Sep 6 01:23:31.911778 systemd[1]: run-containerd-runc-k8s.io-6497e70858216fbc735ce77a474bc3b4d95448ef2a62bba112ec29db7e0d52f0-runc.3BnWaZ.mount: Deactivated successfully. Sep 6 01:23:38.674608 systemd[1]: run-containerd-runc-k8s.io-049a9751ea2b61f19d5654b91a108f306c59a568c3775a0fba835d1d081a0111-runc.Ij00VI.mount: Deactivated successfully. Sep 6 01:23:38.961167 systemd[1]: run-containerd-runc-k8s.io-40749c7d3756581aad1ed5c1a90a13a4fff5a333f197d55c45158a5a4cf4951a-runc.VcILaL.mount: Deactivated successfully. Sep 6 01:23:39.122000 audit[5786]: NETFILTER_CFG table=filter:140 family=2 entries=9 op=nft_register_rule pid=5786 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:23:39.129451 kernel: kauditd_printk_skb: 54 callbacks suppressed Sep 6 01:23:39.129599 kernel: audit: type=1325 audit(1757121819.122:1512): table=filter:140 family=2 entries=9 op=nft_register_rule pid=5786 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:23:39.122000 audit[5786]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffd73bd1b0 a2=0 a3=1 items=0 ppid=2649 pid=5786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:39.171410 kernel: audit: type=1300 audit(1757121819.122:1512): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffd73bd1b0 a2=0 a3=1 items=0 ppid=2649 pid=5786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:39.122000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:23:39.185465 kernel: audit: type=1327 audit(1757121819.122:1512): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:23:39.170000 audit[5786]: NETFILTER_CFG table=nat:141 family=2 entries=31 op=nft_register_chain pid=5786 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:23:39.202159 kernel: audit: type=1325 audit(1757121819.170:1513): table=nat:141 family=2 entries=31 op=nft_register_chain pid=5786 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:23:39.170000 audit[5786]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10884 a0=3 a1=ffffd73bd1b0 a2=0 a3=1 items=0 ppid=2649 pid=5786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:39.231501 kernel: audit: type=1300 audit(1757121819.170:1513): arch=c00000b7 syscall=211 success=yes exit=10884 a0=3 a1=ffffd73bd1b0 a2=0 a3=1 items=0 ppid=2649 pid=5786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:39.170000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:23:39.245976 kernel: audit: type=1327 audit(1757121819.170:1513): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:24:01.910972 systemd[1]: run-containerd-runc-k8s.io-6497e70858216fbc735ce77a474bc3b4d95448ef2a62bba112ec29db7e0d52f0-runc.Isn8Pg.mount: Deactivated successfully. Sep 6 01:24:02.215000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=522495 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:02.215000 audit[2330]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=75 a1=401198b0e0 a2=fc6 a3=0 items=0 ppid=2195 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 key=(null) Sep 6 01:24:02.270466 kernel: audit: type=1400 audit(1757121842.215:1514): avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=522495 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:02.270681 kernel: audit: type=1300 audit(1757121842.215:1514): arch=c00000b7 syscall=27 success=no exit=-13 a0=75 a1=401198b0e0 a2=fc6 a3=0 items=0 ppid=2195 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 key=(null) Sep 6 01:24:02.270768 kernel: audit: type=1327 audit(1757121842.215:1514): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3236002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:24:02.215000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3236002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:24:02.216000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:02.320794 kernel: audit: type=1400 audit(1757121842.216:1515): avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:02.320928 kernel: audit: type=1300 audit(1757121842.216:1515): arch=c00000b7 syscall=27 success=no exit=-13 a0=75 a1=4010b82260 a2=fc6 a3=0 items=0 ppid=2195 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 key=(null) Sep 6 01:24:02.216000 audit[2330]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=75 a1=4010b82260 a2=fc6 a3=0 items=0 ppid=2195 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 key=(null) Sep 6 01:24:02.216000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3236002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:24:02.376285 kernel: audit: type=1327 audit(1757121842.216:1515): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3236002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:24:02.376401 kernel: audit: type=1400 audit(1757121842.216:1516): avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522499 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:02.216000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522499 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:02.216000 audit[2330]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=75 a1=4009169020 a2=fc6 a3=0 items=0 ppid=2195 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 key=(null) Sep 6 01:24:02.432431 kernel: audit: type=1300 audit(1757121842.216:1516): arch=c00000b7 syscall=27 success=no exit=-13 a0=75 a1=4009169020 a2=fc6 a3=0 items=0 ppid=2195 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 key=(null) Sep 6 01:24:02.216000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3236002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:24:02.458060 kernel: audit: type=1327 audit(1757121842.216:1516): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3236002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:24:02.458201 kernel: audit: type=1400 audit(1757121842.227:1517): avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=522501 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:02.227000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=522501 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:02.227000 audit[2330]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=75 a1=40091690b0 a2=fc6 a3=0 items=0 ppid=2195 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 key=(null) Sep 6 01:24:02.227000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3236002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:24:02.239000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:02.239000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522499 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:02.239000 audit[2330]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7a a1=40091691d0 a2=fc6 a3=0 items=0 ppid=2195 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 key=(null) Sep 6 01:24:02.239000 audit[2330]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=75 a1=4010b82460 a2=fc6 a3=0 items=0 ppid=2195 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 key=(null) Sep 6 01:24:02.239000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3236002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:24:02.239000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3236002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:24:02.378000 audit[5015]: AVC avc: denied { watch } for pid=5015 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_01_22_38.920819102/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c119,c1003 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c119,c1003 tclass=file permissive=0 Sep 6 01:24:02.378000 audit[5015]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4001cd43a0 a2=fc6 a3=0 items=0 ppid=4411 pid=5015 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c119,c1003 key=(null) Sep 6 01:24:02.378000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 01:24:02.625000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522499 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:02.625000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:02.625000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000470b00 a2=fc6 a3=0 items=0 ppid=2245 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 key=(null) Sep 6 01:24:02.625000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001417020 a2=fc6 a3=0 items=0 ppid=2245 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 key=(null) Sep 6 01:24:02.625000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:24:02.625000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:24:05.089000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:05.089000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:05.089000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000470ba0 a2=fc6 a3=0 items=0 ppid=2245 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 key=(null) Sep 6 01:24:05.089000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:24:05.089000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000bb5980 a2=fc6 a3=0 items=0 ppid=2245 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 key=(null) Sep 6 01:24:05.089000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:24:05.089000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:05.089000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000bb59a0 a2=fc6 a3=0 items=0 ppid=2245 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 key=(null) Sep 6 01:24:05.089000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:24:05.090000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:05.090000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000470bc0 a2=fc6 a3=0 items=0 ppid=2245 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 key=(null) Sep 6 01:24:05.090000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:24:08.674837 systemd[1]: run-containerd-runc-k8s.io-049a9751ea2b61f19d5654b91a108f306c59a568c3775a0fba835d1d081a0111-runc.WxTHxp.mount: Deactivated successfully. Sep 6 01:24:08.943244 systemd[1]: run-containerd-runc-k8s.io-40749c7d3756581aad1ed5c1a90a13a4fff5a333f197d55c45158a5a4cf4951a-runc.IpsJ1H.mount: Deactivated successfully. Sep 6 01:24:10.675000 audit[5279]: AVC avc: denied { watch } for pid=5279 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_01_22_38.3197167713/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c535,c889 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c535,c889 tclass=file permissive=0 Sep 6 01:24:10.682039 kernel: kauditd_printk_skb: 29 callbacks suppressed Sep 6 01:24:10.682180 kernel: audit: type=1400 audit(1757121850.675:1527): avc: denied { watch } for pid=5279 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_01_22_38.3197167713/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c535,c889 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c535,c889 tclass=file permissive=0 Sep 6 01:24:10.675000 audit[5279]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000c378c0 a2=fc6 a3=0 items=0 ppid=4789 pid=5279 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c535,c889 key=(null) Sep 6 01:24:10.742230 kernel: audit: type=1300 audit(1757121850.675:1527): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000c378c0 a2=fc6 a3=0 items=0 ppid=4789 pid=5279 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c535,c889 key=(null) Sep 6 01:24:10.675000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 01:24:10.774512 kernel: audit: type=1327 audit(1757121850.675:1527): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 01:24:14.397243 systemd[1]: run-containerd-runc-k8s.io-049a9751ea2b61f19d5654b91a108f306c59a568c3775a0fba835d1d081a0111-runc.Fbn2rb.mount: Deactivated successfully. Sep 6 01:24:23.409768 systemd[1]: Started sshd@7-10.200.20.26:22-10.200.16.10:57670.service. Sep 6 01:24:23.408000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.26:22-10.200.16.10:57670 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:23.433234 kernel: audit: type=1130 audit(1757121863.408:1528): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.26:22-10.200.16.10:57670 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:23.890418 sshd[5909]: Accepted publickey for core from 10.200.16.10 port 57670 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:24:23.889000 audit[5909]: USER_ACCT pid=5909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:23.916156 kernel: audit: type=1101 audit(1757121863.889:1529): pid=5909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:23.915000 audit[5909]: CRED_ACQ pid=5909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:23.917027 sshd[5909]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:24:23.958660 kernel: audit: type=1103 audit(1757121863.915:1530): pid=5909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:23.958874 kernel: audit: type=1006 audit(1757121863.915:1531): pid=5909 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Sep 6 01:24:23.915000 audit[5909]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdb4155f0 a2=3 a3=1 items=0 ppid=1 pid=5909 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:23.986889 kernel: audit: type=1300 audit(1757121863.915:1531): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdb4155f0 a2=3 a3=1 items=0 ppid=1 pid=5909 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:23.915000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:23.996435 kernel: audit: type=1327 audit(1757121863.915:1531): proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:23.998873 systemd-logind[1465]: New session 10 of user core. Sep 6 01:24:23.999790 systemd[1]: Started session-10.scope. Sep 6 01:24:24.003000 audit[5909]: USER_START pid=5909 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:24.003000 audit[5911]: CRED_ACQ pid=5911 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:24.055768 kernel: audit: type=1105 audit(1757121864.003:1532): pid=5909 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:24.055906 kernel: audit: type=1103 audit(1757121864.003:1533): pid=5911 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:24.407894 sshd[5909]: pam_unix(sshd:session): session closed for user core Sep 6 01:24:24.407000 audit[5909]: USER_END pid=5909 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:24.411866 systemd[1]: session-10.scope: Deactivated successfully. Sep 6 01:24:24.412864 systemd[1]: sshd@7-10.200.20.26:22-10.200.16.10:57670.service: Deactivated successfully. Sep 6 01:24:24.409000 audit[5909]: CRED_DISP pid=5909 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:24.459868 kernel: audit: type=1106 audit(1757121864.407:1534): pid=5909 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:24.460011 kernel: audit: type=1104 audit(1757121864.409:1535): pid=5909 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:24.460404 systemd-logind[1465]: Session 10 logged out. Waiting for processes to exit. Sep 6 01:24:24.411000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.26:22-10.200.16.10:57670 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:24.461773 systemd-logind[1465]: Removed session 10. Sep 6 01:24:25.200256 update_engine[1468]: I0906 01:24:25.200209 1468 prefs.cc:52] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Sep 6 01:24:25.200256 update_engine[1468]: I0906 01:24:25.200251 1468 prefs.cc:52] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Sep 6 01:24:25.200949 update_engine[1468]: I0906 01:24:25.200930 1468 prefs.cc:52] aleph-version not present in /var/lib/update_engine/prefs Sep 6 01:24:25.201361 update_engine[1468]: I0906 01:24:25.201339 1468 omaha_request_params.cc:62] Current group set to lts Sep 6 01:24:25.202182 update_engine[1468]: I0906 01:24:25.202163 1468 update_attempter.cc:499] Already updated boot flags. Skipping. Sep 6 01:24:25.202182 update_engine[1468]: I0906 01:24:25.202178 1468 update_attempter.cc:643] Scheduling an action processor start. Sep 6 01:24:25.202332 update_engine[1468]: I0906 01:24:25.202195 1468 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Sep 6 01:24:25.202332 update_engine[1468]: I0906 01:24:25.202226 1468 prefs.cc:52] previous-version not present in /var/lib/update_engine/prefs Sep 6 01:24:25.202670 update_engine[1468]: I0906 01:24:25.202649 1468 omaha_request_action.cc:270] Posting an Omaha request to disabled Sep 6 01:24:25.202670 update_engine[1468]: I0906 01:24:25.202666 1468 omaha_request_action.cc:271] Request: Sep 6 01:24:25.202670 update_engine[1468]: Sep 6 01:24:25.202670 update_engine[1468]: Sep 6 01:24:25.202670 update_engine[1468]: Sep 6 01:24:25.202670 update_engine[1468]: Sep 6 01:24:25.202670 update_engine[1468]: Sep 6 01:24:25.202670 update_engine[1468]: Sep 6 01:24:25.202670 update_engine[1468]: Sep 6 01:24:25.202670 update_engine[1468]: Sep 6 01:24:25.202977 update_engine[1468]: I0906 01:24:25.202673 1468 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Sep 6 01:24:25.205571 locksmithd[1552]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Sep 6 01:24:25.246875 update_engine[1468]: I0906 01:24:25.246835 1468 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Sep 6 01:24:25.247167 update_engine[1468]: I0906 01:24:25.247143 1468 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Sep 6 01:24:25.315432 update_engine[1468]: E0906 01:24:25.315388 1468 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Sep 6 01:24:25.315591 update_engine[1468]: I0906 01:24:25.315503 1468 libcurl_http_fetcher.cc:283] No HTTP response, retry 1 Sep 6 01:24:29.479284 systemd[1]: Started sshd@8-10.200.20.26:22-10.200.16.10:57678.service. Sep 6 01:24:29.490157 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 01:24:29.490291 kernel: audit: type=1130 audit(1757121869.478:1537): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.26:22-10.200.16.10:57678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:29.478000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.26:22-10.200.16.10:57678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:29.885000 audit[5923]: USER_ACCT pid=5923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:29.886751 sshd[5923]: Accepted publickey for core from 10.200.16.10 port 57678 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:24:29.888539 sshd[5923]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:24:29.885000 audit[5923]: CRED_ACQ pid=5923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:29.937719 kernel: audit: type=1101 audit(1757121869.885:1538): pid=5923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:29.937872 kernel: audit: type=1103 audit(1757121869.885:1539): pid=5923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:29.939072 systemd-logind[1465]: New session 11 of user core. Sep 6 01:24:29.939617 systemd[1]: Started session-11.scope. Sep 6 01:24:29.959176 kernel: audit: type=1006 audit(1757121869.885:1540): pid=5923 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Sep 6 01:24:29.885000 audit[5923]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff4f6f530 a2=3 a3=1 items=0 ppid=1 pid=5923 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:29.992261 kernel: audit: type=1300 audit(1757121869.885:1540): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff4f6f530 a2=3 a3=1 items=0 ppid=1 pid=5923 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:29.885000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:30.001296 kernel: audit: type=1327 audit(1757121869.885:1540): proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:29.961000 audit[5923]: USER_START pid=5923 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:30.028399 kernel: audit: type=1105 audit(1757121869.961:1541): pid=5923 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:29.962000 audit[5925]: CRED_ACQ pid=5925 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:30.051805 kernel: audit: type=1103 audit(1757121869.962:1542): pid=5925 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:30.296202 sshd[5923]: pam_unix(sshd:session): session closed for user core Sep 6 01:24:30.296000 audit[5923]: USER_END pid=5923 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:30.296000 audit[5923]: CRED_DISP pid=5923 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:30.325936 systemd[1]: sshd@8-10.200.20.26:22-10.200.16.10:57678.service: Deactivated successfully. Sep 6 01:24:30.326731 systemd[1]: session-11.scope: Deactivated successfully. Sep 6 01:24:30.327977 systemd-logind[1465]: Session 11 logged out. Waiting for processes to exit. Sep 6 01:24:30.328913 systemd-logind[1465]: Removed session 11. Sep 6 01:24:30.347388 kernel: audit: type=1106 audit(1757121870.296:1543): pid=5923 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:30.347535 kernel: audit: type=1104 audit(1757121870.296:1544): pid=5923 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:30.325000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.26:22-10.200.16.10:57678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:30.719767 systemd[1]: run-containerd-runc-k8s.io-40749c7d3756581aad1ed5c1a90a13a4fff5a333f197d55c45158a5a4cf4951a-runc.JfGWmE.mount: Deactivated successfully. Sep 6 01:24:31.910509 systemd[1]: run-containerd-runc-k8s.io-6497e70858216fbc735ce77a474bc3b4d95448ef2a62bba112ec29db7e0d52f0-runc.NWY5fA.mount: Deactivated successfully. Sep 6 01:24:35.200621 update_engine[1468]: I0906 01:24:35.200574 1468 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Sep 6 01:24:35.201017 update_engine[1468]: I0906 01:24:35.200779 1468 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Sep 6 01:24:35.201017 update_engine[1468]: I0906 01:24:35.200978 1468 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Sep 6 01:24:35.303663 update_engine[1468]: E0906 01:24:35.303624 1468 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Sep 6 01:24:35.303827 update_engine[1468]: I0906 01:24:35.303732 1468 libcurl_http_fetcher.cc:283] No HTTP response, retry 2 Sep 6 01:24:35.380259 systemd[1]: Started sshd@9-10.200.20.26:22-10.200.16.10:52606.service. Sep 6 01:24:35.408135 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 01:24:35.408274 kernel: audit: type=1130 audit(1757121875.379:1546): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.26:22-10.200.16.10:52606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:35.379000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.26:22-10.200.16.10:52606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:35.834584 sshd[5978]: Accepted publickey for core from 10.200.16.10 port 52606 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:24:35.833000 audit[5978]: USER_ACCT pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:35.857000 audit[5978]: CRED_ACQ pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:35.881362 kernel: audit: type=1101 audit(1757121875.833:1547): pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:35.881471 kernel: audit: type=1103 audit(1757121875.857:1548): pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:35.881502 kernel: audit: type=1006 audit(1757121875.857:1549): pid=5978 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Sep 6 01:24:35.858986 sshd[5978]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:24:35.857000 audit[5978]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe7e48450 a2=3 a3=1 items=0 ppid=1 pid=5978 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:35.920202 kernel: audit: type=1300 audit(1757121875.857:1549): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe7e48450 a2=3 a3=1 items=0 ppid=1 pid=5978 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:35.857000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:35.924290 systemd[1]: Started session-12.scope. Sep 6 01:24:35.925430 systemd-logind[1465]: New session 12 of user core. Sep 6 01:24:35.929324 kernel: audit: type=1327 audit(1757121875.857:1549): proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:35.929000 audit[5978]: USER_START pid=5978 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:35.931000 audit[5980]: CRED_ACQ pid=5980 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:35.979690 kernel: audit: type=1105 audit(1757121875.929:1550): pid=5978 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:35.979806 kernel: audit: type=1103 audit(1757121875.931:1551): pid=5980 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:36.286534 sshd[5978]: pam_unix(sshd:session): session closed for user core Sep 6 01:24:36.287000 audit[5978]: USER_END pid=5978 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:36.290019 systemd[1]: session-12.scope: Deactivated successfully. Sep 6 01:24:36.290737 systemd[1]: sshd@9-10.200.20.26:22-10.200.16.10:52606.service: Deactivated successfully. Sep 6 01:24:36.287000 audit[5978]: CRED_DISP pid=5978 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:36.337913 kernel: audit: type=1106 audit(1757121876.287:1552): pid=5978 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:36.338037 kernel: audit: type=1104 audit(1757121876.287:1553): pid=5978 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:36.338172 systemd-logind[1465]: Session 12 logged out. Waiting for processes to exit. Sep 6 01:24:36.289000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.26:22-10.200.16.10:52606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:36.338935 systemd-logind[1465]: Removed session 12. Sep 6 01:24:36.360000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.26:22-10.200.16.10:52610 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:36.361031 systemd[1]: Started sshd@10-10.200.20.26:22-10.200.16.10:52610.service. Sep 6 01:24:36.808000 audit[5990]: USER_ACCT pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:36.809510 sshd[5990]: Accepted publickey for core from 10.200.16.10 port 52610 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:24:36.809000 audit[5990]: CRED_ACQ pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:36.809000 audit[5990]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff76a9620 a2=3 a3=1 items=0 ppid=1 pid=5990 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:36.809000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:36.811185 sshd[5990]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:24:36.815091 systemd-logind[1465]: New session 13 of user core. Sep 6 01:24:36.815667 systemd[1]: Started session-13.scope. Sep 6 01:24:36.819000 audit[5990]: USER_START pid=5990 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:36.820000 audit[5992]: CRED_ACQ pid=5992 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:37.247563 sshd[5990]: pam_unix(sshd:session): session closed for user core Sep 6 01:24:37.247000 audit[5990]: USER_END pid=5990 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:37.247000 audit[5990]: CRED_DISP pid=5990 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:37.250095 systemd-logind[1465]: Session 13 logged out. Waiting for processes to exit. Sep 6 01:24:37.250293 systemd[1]: sshd@10-10.200.20.26:22-10.200.16.10:52610.service: Deactivated successfully. Sep 6 01:24:37.251052 systemd[1]: session-13.scope: Deactivated successfully. Sep 6 01:24:37.249000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.26:22-10.200.16.10:52610 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:37.251941 systemd-logind[1465]: Removed session 13. Sep 6 01:24:37.316697 systemd[1]: Started sshd@11-10.200.20.26:22-10.200.16.10:52612.service. Sep 6 01:24:37.315000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.26:22-10.200.16.10:52612 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:37.762000 audit[6001]: USER_ACCT pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:37.764300 sshd[6001]: Accepted publickey for core from 10.200.16.10 port 52612 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:24:37.764000 audit[6001]: CRED_ACQ pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:37.764000 audit[6001]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffd21b1f0 a2=3 a3=1 items=0 ppid=1 pid=6001 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:37.764000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:37.765947 sshd[6001]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:24:37.770782 systemd[1]: Started session-14.scope. Sep 6 01:24:37.771335 systemd-logind[1465]: New session 14 of user core. Sep 6 01:24:37.774000 audit[6001]: USER_START pid=6001 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:37.775000 audit[6003]: CRED_ACQ pid=6003 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:38.177330 sshd[6001]: pam_unix(sshd:session): session closed for user core Sep 6 01:24:38.177000 audit[6001]: USER_END pid=6001 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:38.177000 audit[6001]: CRED_DISP pid=6001 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:38.180230 systemd-logind[1465]: Session 14 logged out. Waiting for processes to exit. Sep 6 01:24:38.180237 systemd[1]: session-14.scope: Deactivated successfully. Sep 6 01:24:38.181375 systemd[1]: sshd@11-10.200.20.26:22-10.200.16.10:52612.service: Deactivated successfully. Sep 6 01:24:38.180000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.26:22-10.200.16.10:52612 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:38.182268 systemd-logind[1465]: Removed session 14. Sep 6 01:24:38.677491 systemd[1]: run-containerd-runc-k8s.io-049a9751ea2b61f19d5654b91a108f306c59a568c3775a0fba835d1d081a0111-runc.HZigv5.mount: Deactivated successfully. Sep 6 01:24:43.260453 systemd[1]: Started sshd@12-10.200.20.26:22-10.200.16.10:33242.service. Sep 6 01:24:43.259000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.26:22-10.200.16.10:33242 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:43.266600 kernel: kauditd_printk_skb: 23 callbacks suppressed Sep 6 01:24:43.266736 kernel: audit: type=1130 audit(1757121883.259:1573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.26:22-10.200.16.10:33242 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:43.720000 audit[6057]: USER_ACCT pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:43.721748 sshd[6057]: Accepted publickey for core from 10.200.16.10 port 33242 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:24:43.745000 audit[6057]: CRED_ACQ pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:43.747525 sshd[6057]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:24:43.769138 kernel: audit: type=1101 audit(1757121883.720:1574): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:43.769279 kernel: audit: type=1103 audit(1757121883.745:1575): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:43.783942 kernel: audit: type=1006 audit(1757121883.746:1576): pid=6057 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Sep 6 01:24:43.746000 audit[6057]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe3f10710 a2=3 a3=1 items=0 ppid=1 pid=6057 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:43.809318 kernel: audit: type=1300 audit(1757121883.746:1576): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe3f10710 a2=3 a3=1 items=0 ppid=1 pid=6057 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:43.746000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:43.818917 kernel: audit: type=1327 audit(1757121883.746:1576): proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:43.814022 systemd-logind[1465]: New session 15 of user core. Sep 6 01:24:43.818891 systemd[1]: Started session-15.scope. Sep 6 01:24:43.822000 audit[6057]: USER_START pid=6057 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:43.822000 audit[6059]: CRED_ACQ pid=6059 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:43.873162 kernel: audit: type=1105 audit(1757121883.822:1577): pid=6057 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:43.873290 kernel: audit: type=1103 audit(1757121883.822:1578): pid=6059 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:44.146027 sshd[6057]: pam_unix(sshd:session): session closed for user core Sep 6 01:24:44.146000 audit[6057]: USER_END pid=6057 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:44.149778 systemd[1]: session-15.scope: Deactivated successfully. Sep 6 01:24:44.150574 systemd[1]: sshd@12-10.200.20.26:22-10.200.16.10:33242.service: Deactivated successfully. Sep 6 01:24:44.147000 audit[6057]: CRED_DISP pid=6057 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:44.195467 kernel: audit: type=1106 audit(1757121884.146:1579): pid=6057 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:44.195595 kernel: audit: type=1104 audit(1757121884.147:1580): pid=6057 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:44.149000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.26:22-10.200.16.10:33242 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:44.196415 systemd-logind[1465]: Session 15 logged out. Waiting for processes to exit. Sep 6 01:24:44.197345 systemd-logind[1465]: Removed session 15. Sep 6 01:24:45.199712 update_engine[1468]: I0906 01:24:45.199666 1468 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Sep 6 01:24:45.200039 update_engine[1468]: I0906 01:24:45.199880 1468 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Sep 6 01:24:45.200111 update_engine[1468]: I0906 01:24:45.200080 1468 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Sep 6 01:24:45.218681 update_engine[1468]: E0906 01:24:45.218648 1468 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Sep 6 01:24:45.218781 update_engine[1468]: I0906 01:24:45.218755 1468 libcurl_http_fetcher.cc:283] No HTTP response, retry 3 Sep 6 01:24:49.237166 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 01:24:49.237315 kernel: audit: type=1130 audit(1757121889.208:1582): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.26:22-10.200.16.10:33258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:49.208000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.26:22-10.200.16.10:33258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:49.209954 systemd[1]: Started sshd@13-10.200.20.26:22-10.200.16.10:33258.service. Sep 6 01:24:49.618000 audit[6069]: USER_ACCT pid=6069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:49.620321 sshd[6069]: Accepted publickey for core from 10.200.16.10 port 33258 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:24:49.623957 sshd[6069]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:24:49.622000 audit[6069]: CRED_ACQ pid=6069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:49.667839 kernel: audit: type=1101 audit(1757121889.618:1583): pid=6069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:49.667973 kernel: audit: type=1103 audit(1757121889.622:1584): pid=6069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:49.682940 kernel: audit: type=1006 audit(1757121889.622:1585): pid=6069 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Sep 6 01:24:49.622000 audit[6069]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe5b9de60 a2=3 a3=1 items=0 ppid=1 pid=6069 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:49.708684 kernel: audit: type=1300 audit(1757121889.622:1585): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe5b9de60 a2=3 a3=1 items=0 ppid=1 pid=6069 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:49.622000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:49.718388 kernel: audit: type=1327 audit(1757121889.622:1585): proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:49.719354 systemd-logind[1465]: New session 16 of user core. Sep 6 01:24:49.719892 systemd[1]: Started session-16.scope. Sep 6 01:24:49.723000 audit[6069]: USER_START pid=6069 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:49.724000 audit[6071]: CRED_ACQ pid=6071 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:49.774630 kernel: audit: type=1105 audit(1757121889.723:1586): pid=6069 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:49.774732 kernel: audit: type=1103 audit(1757121889.724:1587): pid=6071 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:50.045035 sshd[6069]: pam_unix(sshd:session): session closed for user core Sep 6 01:24:50.045000 audit[6069]: USER_END pid=6069 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:50.075530 systemd[1]: sshd@13-10.200.20.26:22-10.200.16.10:33258.service: Deactivated successfully. Sep 6 01:24:50.076337 systemd[1]: session-16.scope: Deactivated successfully. Sep 6 01:24:50.045000 audit[6069]: CRED_DISP pid=6069 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:50.077023 systemd-logind[1465]: Session 16 logged out. Waiting for processes to exit. Sep 6 01:24:50.098895 kernel: audit: type=1106 audit(1757121890.045:1588): pid=6069 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:50.099035 kernel: audit: type=1104 audit(1757121890.045:1589): pid=6069 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:50.074000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.26:22-10.200.16.10:33258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:50.099760 systemd-logind[1465]: Removed session 16. Sep 6 01:24:55.116875 systemd[1]: Started sshd@14-10.200.20.26:22-10.200.16.10:60408.service. Sep 6 01:24:55.116000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.26:22-10.200.16.10:60408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:55.146176 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 01:24:55.146242 kernel: audit: type=1130 audit(1757121895.116:1591): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.26:22-10.200.16.10:60408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:55.200676 update_engine[1468]: I0906 01:24:55.200240 1468 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Sep 6 01:24:55.200676 update_engine[1468]: I0906 01:24:55.200444 1468 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Sep 6 01:24:55.200676 update_engine[1468]: I0906 01:24:55.200637 1468 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Sep 6 01:24:55.471906 update_engine[1468]: E0906 01:24:55.470906 1468 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Sep 6 01:24:55.471906 update_engine[1468]: I0906 01:24:55.471055 1468 libcurl_http_fetcher.cc:297] Transfer resulted in an error (0), 0 bytes downloaded Sep 6 01:24:55.471906 update_engine[1468]: I0906 01:24:55.471063 1468 omaha_request_action.cc:621] Omaha request response: Sep 6 01:24:55.471906 update_engine[1468]: E0906 01:24:55.471231 1468 omaha_request_action.cc:640] Omaha request network transfer failed. Sep 6 01:24:55.471906 update_engine[1468]: I0906 01:24:55.471247 1468 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaRequestAction action failed. Aborting processing. Sep 6 01:24:55.471906 update_engine[1468]: I0906 01:24:55.471251 1468 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Sep 6 01:24:55.471906 update_engine[1468]: I0906 01:24:55.471254 1468 update_attempter.cc:306] Processing Done. Sep 6 01:24:55.471906 update_engine[1468]: E0906 01:24:55.471287 1468 update_attempter.cc:619] Update failed. Sep 6 01:24:55.471906 update_engine[1468]: I0906 01:24:55.471290 1468 utils.cc:600] Converting error code 2000 to kActionCodeOmahaErrorInHTTPResponse Sep 6 01:24:55.471906 update_engine[1468]: I0906 01:24:55.471293 1468 payload_state.cc:97] Updating payload state for error code: 37 (kActionCodeOmahaErrorInHTTPResponse) Sep 6 01:24:55.471906 update_engine[1468]: I0906 01:24:55.471297 1468 payload_state.cc:103] Ignoring failures until we get a valid Omaha response. Sep 6 01:24:55.471906 update_engine[1468]: I0906 01:24:55.471364 1468 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Sep 6 01:24:55.471906 update_engine[1468]: I0906 01:24:55.471393 1468 omaha_request_action.cc:270] Posting an Omaha request to disabled Sep 6 01:24:55.471906 update_engine[1468]: I0906 01:24:55.471406 1468 omaha_request_action.cc:271] Request: Sep 6 01:24:55.471906 update_engine[1468]: Sep 6 01:24:55.471906 update_engine[1468]: Sep 6 01:24:55.472411 update_engine[1468]: Sep 6 01:24:55.472411 update_engine[1468]: Sep 6 01:24:55.472411 update_engine[1468]: Sep 6 01:24:55.472411 update_engine[1468]: Sep 6 01:24:55.472411 update_engine[1468]: I0906 01:24:55.471411 1468 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Sep 6 01:24:55.472411 update_engine[1468]: I0906 01:24:55.471577 1468 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Sep 6 01:24:55.472411 update_engine[1468]: I0906 01:24:55.471787 1468 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Sep 6 01:24:55.472815 locksmithd[1552]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_REPORTING_ERROR_EVENT" NewVersion=0.0.0 NewSize=0 Sep 6 01:24:55.477075 update_engine[1468]: E0906 01:24:55.476868 1468 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Sep 6 01:24:55.477075 update_engine[1468]: I0906 01:24:55.476962 1468 libcurl_http_fetcher.cc:297] Transfer resulted in an error (0), 0 bytes downloaded Sep 6 01:24:55.477075 update_engine[1468]: I0906 01:24:55.476969 1468 omaha_request_action.cc:621] Omaha request response: Sep 6 01:24:55.477075 update_engine[1468]: I0906 01:24:55.476972 1468 action_processor.cc:65] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Sep 6 01:24:55.477075 update_engine[1468]: I0906 01:24:55.476976 1468 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Sep 6 01:24:55.477075 update_engine[1468]: I0906 01:24:55.476979 1468 update_attempter.cc:306] Processing Done. Sep 6 01:24:55.477075 update_engine[1468]: I0906 01:24:55.476984 1468 update_attempter.cc:310] Error event sent. Sep 6 01:24:55.477075 update_engine[1468]: I0906 01:24:55.476992 1468 update_check_scheduler.cc:74] Next update check in 47m42s Sep 6 01:24:55.477413 locksmithd[1552]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Sep 6 01:24:55.531000 audit[6081]: USER_ACCT pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:55.533010 sshd[6081]: Accepted publickey for core from 10.200.16.10 port 60408 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:24:55.559468 sshd[6081]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:24:55.557000 audit[6081]: CRED_ACQ pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:55.584388 kernel: audit: type=1101 audit(1757121895.531:1592): pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:55.584526 kernel: audit: type=1103 audit(1757121895.557:1593): pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:55.599140 kernel: audit: type=1006 audit(1757121895.557:1594): pid=6081 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Sep 6 01:24:55.557000 audit[6081]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe18b0820 a2=3 a3=1 items=0 ppid=1 pid=6081 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:55.624380 kernel: audit: type=1300 audit(1757121895.557:1594): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe18b0820 a2=3 a3=1 items=0 ppid=1 pid=6081 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:55.557000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:55.628226 systemd[1]: Started session-17.scope. Sep 6 01:24:55.629584 systemd-logind[1465]: New session 17 of user core. Sep 6 01:24:55.633800 kernel: audit: type=1327 audit(1757121895.557:1594): proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:55.634000 audit[6081]: USER_START pid=6081 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:55.662618 kernel: audit: type=1105 audit(1757121895.634:1595): pid=6081 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:55.634000 audit[6083]: CRED_ACQ pid=6083 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:55.685773 kernel: audit: type=1103 audit(1757121895.634:1596): pid=6083 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:55.948852 sshd[6081]: pam_unix(sshd:session): session closed for user core Sep 6 01:24:55.948000 audit[6081]: USER_END pid=6081 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:55.952450 systemd-logind[1465]: Session 17 logged out. Waiting for processes to exit. Sep 6 01:24:55.953775 systemd[1]: session-17.scope: Deactivated successfully. Sep 6 01:24:55.955005 systemd-logind[1465]: Removed session 17. Sep 6 01:24:55.955797 systemd[1]: sshd@14-10.200.20.26:22-10.200.16.10:60408.service: Deactivated successfully. Sep 6 01:24:55.949000 audit[6081]: CRED_DISP pid=6081 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:56.002927 kernel: audit: type=1106 audit(1757121895.948:1597): pid=6081 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:56.003104 kernel: audit: type=1104 audit(1757121895.949:1598): pid=6081 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:55.954000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.26:22-10.200.16.10:60408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:01.028795 systemd[1]: Started sshd@15-10.200.20.26:22-10.200.16.10:57038.service. Sep 6 01:25:01.028000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.26:22-10.200.16.10:57038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:01.034696 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 01:25:01.034841 kernel: audit: type=1130 audit(1757121901.028:1600): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.26:22-10.200.16.10:57038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:01.506265 sshd[6093]: Accepted publickey for core from 10.200.16.10 port 57038 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:25:01.505000 audit[6093]: USER_ACCT pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:01.531000 audit[6093]: CRED_ACQ pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:01.556337 kernel: audit: type=1101 audit(1757121901.505:1601): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:01.556485 kernel: audit: type=1103 audit(1757121901.531:1602): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:01.558019 sshd[6093]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:25:01.573852 kernel: audit: type=1006 audit(1757121901.531:1603): pid=6093 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Sep 6 01:25:01.579297 systemd[1]: Started session-18.scope. Sep 6 01:25:01.579675 systemd-logind[1465]: New session 18 of user core. Sep 6 01:25:01.531000 audit[6093]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcb0bf8f0 a2=3 a3=1 items=0 ppid=1 pid=6093 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:01.606027 kernel: audit: type=1300 audit(1757121901.531:1603): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcb0bf8f0 a2=3 a3=1 items=0 ppid=1 pid=6093 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:01.531000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:25:01.614822 kernel: audit: type=1327 audit(1757121901.531:1603): proctitle=737368643A20636F7265205B707269765D Sep 6 01:25:01.617000 audit[6093]: USER_START pid=6093 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:01.618000 audit[6095]: CRED_ACQ pid=6095 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:01.671295 kernel: audit: type=1105 audit(1757121901.617:1604): pid=6093 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:01.671456 kernel: audit: type=1103 audit(1757121901.618:1605): pid=6095 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:01.928062 systemd[1]: run-containerd-runc-k8s.io-6497e70858216fbc735ce77a474bc3b4d95448ef2a62bba112ec29db7e0d52f0-runc.kR2Y6G.mount: Deactivated successfully. Sep 6 01:25:02.057460 sshd[6093]: pam_unix(sshd:session): session closed for user core Sep 6 01:25:02.057000 audit[6093]: USER_END pid=6093 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:02.087172 systemd-logind[1465]: Session 18 logged out. Waiting for processes to exit. Sep 6 01:25:02.087348 systemd[1]: session-18.scope: Deactivated successfully. Sep 6 01:25:02.088583 systemd[1]: sshd@15-10.200.20.26:22-10.200.16.10:57038.service: Deactivated successfully. Sep 6 01:25:02.089916 systemd-logind[1465]: Removed session 18. Sep 6 01:25:02.057000 audit[6093]: CRED_DISP pid=6093 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:02.121543 kernel: audit: type=1106 audit(1757121902.057:1606): pid=6093 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:02.121672 kernel: audit: type=1104 audit(1757121902.057:1607): pid=6093 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:02.087000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.26:22-10.200.16.10:57038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:02.169450 systemd[1]: Started sshd@16-10.200.20.26:22-10.200.16.10:57054.service. Sep 6 01:25:02.169000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.26:22-10.200.16.10:57054 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:02.216000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:25:02.216000 audit[2330]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7b a1=4006bb31e0 a2=fc6 a3=0 items=0 ppid=2195 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 key=(null) Sep 6 01:25:02.216000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3236002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:25:02.217000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=522495 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:25:02.217000 audit[2330]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7b a1=4011df3b00 a2=fc6 a3=0 items=0 ppid=2195 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 key=(null) Sep 6 01:25:02.217000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3236002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:25:02.218000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522499 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:25:02.218000 audit[2330]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7b a1=4007ea1620 a2=fc6 a3=0 items=0 ppid=2195 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 key=(null) Sep 6 01:25:02.218000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3236002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:25:02.228000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=522501 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:25:02.228000 audit[2330]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7b a1=400a9bf680 a2=fc6 a3=0 items=0 ppid=2195 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 key=(null) Sep 6 01:25:02.228000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3236002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:25:02.240000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:25:02.240000 audit[2330]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7b a1=400ad99b40 a2=fc6 a3=0 items=0 ppid=2195 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 key=(null) Sep 6 01:25:02.240000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3236002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:25:02.240000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522499 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:25:02.240000 audit[2330]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7d a1=40074452c0 a2=fc6 a3=0 items=0 ppid=2195 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c664 key=(null) Sep 6 01:25:02.240000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3236002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:25:02.378000 audit[5015]: AVC avc: denied { watch } for pid=5015 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_01_22_38.920819102/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c119,c1003 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c119,c1003 tclass=file permissive=0 Sep 6 01:25:02.378000 audit[5015]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40020d1120 a2=fc6 a3=0 items=0 ppid=4411 pid=5015 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c119,c1003 key=(null) Sep 6 01:25:02.378000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 01:25:02.626000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522499 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:25:02.626000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002f653b0 a2=fc6 a3=0 items=0 ppid=2245 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 key=(null) Sep 6 01:25:02.626000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:25:02.626000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:25:02.626000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400369d680 a2=fc6 a3=0 items=0 ppid=2245 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 key=(null) Sep 6 01:25:02.626000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:25:02.663000 audit[6124]: USER_ACCT pid=6124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:02.664373 sshd[6124]: Accepted publickey for core from 10.200.16.10 port 57054 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:25:02.664000 audit[6124]: CRED_ACQ pid=6124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:02.664000 audit[6124]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc30b72f0 a2=3 a3=1 items=0 ppid=1 pid=6124 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:02.664000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:25:02.666250 sshd[6124]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:25:02.671184 systemd[1]: Started session-19.scope. Sep 6 01:25:02.672193 systemd-logind[1465]: New session 19 of user core. Sep 6 01:25:02.676000 audit[6124]: USER_START pid=6124 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:02.677000 audit[6126]: CRED_ACQ pid=6126 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:03.247587 sshd[6124]: pam_unix(sshd:session): session closed for user core Sep 6 01:25:03.248000 audit[6124]: USER_END pid=6124 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:03.248000 audit[6124]: CRED_DISP pid=6124 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:03.250898 systemd-logind[1465]: Session 19 logged out. Waiting for processes to exit. Sep 6 01:25:03.251206 systemd[1]: sshd@16-10.200.20.26:22-10.200.16.10:57054.service: Deactivated successfully. Sep 6 01:25:03.251972 systemd[1]: session-19.scope: Deactivated successfully. Sep 6 01:25:03.250000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.26:22-10.200.16.10:57054 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:03.253093 systemd-logind[1465]: Removed session 19. Sep 6 01:25:03.323846 systemd[1]: Started sshd@17-10.200.20.26:22-10.200.16.10:57062.service. Sep 6 01:25:03.322000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.26:22-10.200.16.10:57062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:03.775000 audit[6134]: USER_ACCT pid=6134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:03.776856 sshd[6134]: Accepted publickey for core from 10.200.16.10 port 57062 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:25:03.777000 audit[6134]: CRED_ACQ pid=6134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:03.777000 audit[6134]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeac368e0 a2=3 a3=1 items=0 ppid=1 pid=6134 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:03.777000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:25:03.778909 sshd[6134]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:25:03.783812 systemd[1]: Started session-20.scope. Sep 6 01:25:03.784105 systemd-logind[1465]: New session 20 of user core. Sep 6 01:25:03.788000 audit[6134]: USER_START pid=6134 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:03.789000 audit[6136]: CRED_ACQ pid=6136 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:05.093000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:25:05.093000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400369d780 a2=fc6 a3=0 items=0 ppid=2245 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 key=(null) Sep 6 01:25:05.093000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:25:05.093000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:25:05.093000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400357bbe0 a2=fc6 a3=0 items=0 ppid=2245 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 key=(null) Sep 6 01:25:05.093000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:25:05.093000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:25:05.093000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400357bc00 a2=fc6 a3=0 items=0 ppid=2245 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 key=(null) Sep 6 01:25:05.093000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:25:05.093000 audit[2388]: AVC avc: denied { watch } for pid=2388 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:25:05.093000 audit[2388]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400357bc20 a2=fc6 a3=0 items=0 ppid=2245 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c434 key=(null) Sep 6 01:25:05.093000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:25:06.249000 audit[6150]: NETFILTER_CFG table=filter:142 family=2 entries=20 op=nft_register_rule pid=6150 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:25:06.255648 kernel: kauditd_printk_skb: 59 callbacks suppressed Sep 6 01:25:06.255804 kernel: audit: type=1325 audit(1757121906.249:1637): table=filter:142 family=2 entries=20 op=nft_register_rule pid=6150 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:25:06.249000 audit[6150]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffce36cad0 a2=0 a3=1 items=0 ppid=2649 pid=6150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:06.249000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:25:06.321755 kernel: audit: type=1300 audit(1757121906.249:1637): arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffce36cad0 a2=0 a3=1 items=0 ppid=2649 pid=6150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:06.321895 kernel: audit: type=1327 audit(1757121906.249:1637): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:25:06.323964 sshd[6134]: pam_unix(sshd:session): session closed for user core Sep 6 01:25:06.324000 audit[6134]: USER_END pid=6134 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:06.353725 kernel: audit: type=1106 audit(1757121906.324:1638): pid=6134 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:06.354399 systemd[1]: sshd@17-10.200.20.26:22-10.200.16.10:57062.service: Deactivated successfully. Sep 6 01:25:06.355184 systemd[1]: session-20.scope: Deactivated successfully. Sep 6 01:25:06.357697 systemd-logind[1465]: Session 20 logged out. Waiting for processes to exit. Sep 6 01:25:06.358805 systemd-logind[1465]: Removed session 20. Sep 6 01:25:06.324000 audit[6134]: CRED_DISP pid=6134 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:06.382077 kernel: audit: type=1104 audit(1757121906.324:1639): pid=6134 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:06.324000 audit[6150]: NETFILTER_CFG table=nat:143 family=2 entries=26 op=nft_register_rule pid=6150 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:25:06.397317 kernel: audit: type=1325 audit(1757121906.324:1640): table=nat:143 family=2 entries=26 op=nft_register_rule pid=6150 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:25:06.427033 kernel: audit: type=1300 audit(1757121906.324:1640): arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffce36cad0 a2=0 a3=1 items=0 ppid=2649 pid=6150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:06.324000 audit[6150]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffce36cad0 a2=0 a3=1 items=0 ppid=2649 pid=6150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:06.324000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:25:06.443169 kernel: audit: type=1327 audit(1757121906.324:1640): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:25:06.431241 systemd[1]: Started sshd@18-10.200.20.26:22-10.200.16.10:57066.service. Sep 6 01:25:06.353000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.26:22-10.200.16.10:57062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:06.478844 kernel: audit: type=1131 audit(1757121906.353:1641): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.26:22-10.200.16.10:57062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:06.432000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.26:22-10.200.16.10:57066 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:06.505299 kernel: audit: type=1130 audit(1757121906.432:1642): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.26:22-10.200.16.10:57066 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:06.507000 audit[6155]: NETFILTER_CFG table=filter:144 family=2 entries=32 op=nft_register_rule pid=6155 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:25:06.507000 audit[6155]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffcfe4b460 a2=0 a3=1 items=0 ppid=2649 pid=6155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:06.507000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:25:06.514000 audit[6155]: NETFILTER_CFG table=nat:145 family=2 entries=26 op=nft_register_rule pid=6155 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:25:06.514000 audit[6155]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffcfe4b460 a2=0 a3=1 items=0 ppid=2649 pid=6155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:06.514000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:25:06.910850 sshd[6154]: Accepted publickey for core from 10.200.16.10 port 57066 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:25:06.909000 audit[6154]: USER_ACCT pid=6154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:06.911000 audit[6154]: CRED_ACQ pid=6154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:06.911000 audit[6154]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcfeb7b20 a2=3 a3=1 items=0 ppid=1 pid=6154 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:06.911000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:25:06.913427 sshd[6154]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:25:06.918621 systemd-logind[1465]: New session 21 of user core. Sep 6 01:25:06.919228 systemd[1]: Started session-21.scope. Sep 6 01:25:06.924000 audit[6154]: USER_START pid=6154 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:06.925000 audit[6157]: CRED_ACQ pid=6157 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:07.423557 sshd[6154]: pam_unix(sshd:session): session closed for user core Sep 6 01:25:07.423000 audit[6154]: USER_END pid=6154 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:07.423000 audit[6154]: CRED_DISP pid=6154 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:07.426471 systemd[1]: sshd@18-10.200.20.26:22-10.200.16.10:57066.service: Deactivated successfully. Sep 6 01:25:07.425000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.26:22-10.200.16.10:57066 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:07.427341 systemd[1]: session-21.scope: Deactivated successfully. Sep 6 01:25:07.427886 systemd-logind[1465]: Session 21 logged out. Waiting for processes to exit. Sep 6 01:25:07.428632 systemd-logind[1465]: Removed session 21. Sep 6 01:25:07.499346 systemd[1]: Started sshd@19-10.200.20.26:22-10.200.16.10:57078.service. Sep 6 01:25:07.498000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.26:22-10.200.16.10:57078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:07.945000 audit[6165]: USER_ACCT pid=6165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:07.947272 sshd[6165]: Accepted publickey for core from 10.200.16.10 port 57078 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:25:07.947000 audit[6165]: CRED_ACQ pid=6165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:07.947000 audit[6165]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe7367040 a2=3 a3=1 items=0 ppid=1 pid=6165 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:07.947000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:25:07.949282 sshd[6165]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:25:07.954153 systemd[1]: Started session-22.scope. Sep 6 01:25:07.955088 systemd-logind[1465]: New session 22 of user core. Sep 6 01:25:07.958000 audit[6165]: USER_START pid=6165 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:07.960000 audit[6167]: CRED_ACQ pid=6167 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:08.352631 sshd[6165]: pam_unix(sshd:session): session closed for user core Sep 6 01:25:08.352000 audit[6165]: USER_END pid=6165 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:08.352000 audit[6165]: CRED_DISP pid=6165 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:08.355541 systemd-logind[1465]: Session 22 logged out. Waiting for processes to exit. Sep 6 01:25:08.355746 systemd[1]: sshd@19-10.200.20.26:22-10.200.16.10:57078.service: Deactivated successfully. Sep 6 01:25:08.354000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.26:22-10.200.16.10:57078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:08.356589 systemd[1]: session-22.scope: Deactivated successfully. Sep 6 01:25:08.357367 systemd-logind[1465]: Removed session 22. Sep 6 01:25:08.942211 systemd[1]: run-containerd-runc-k8s.io-40749c7d3756581aad1ed5c1a90a13a4fff5a333f197d55c45158a5a4cf4951a-runc.coEGCM.mount: Deactivated successfully. Sep 6 01:25:10.678000 audit[5279]: AVC avc: denied { watch } for pid=5279 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_01_22_38.3197167713/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c535,c889 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c535,c889 tclass=file permissive=0 Sep 6 01:25:10.678000 audit[5279]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000c37b40 a2=fc6 a3=0 items=0 ppid=4789 pid=5279 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c535,c889 key=(null) Sep 6 01:25:10.678000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 01:25:12.874160 kernel: kauditd_printk_skb: 30 callbacks suppressed Sep 6 01:25:12.874318 kernel: audit: type=1325 audit(1757121912.866:1663): table=filter:146 family=2 entries=20 op=nft_register_rule pid=6218 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:25:12.866000 audit[6218]: NETFILTER_CFG table=filter:146 family=2 entries=20 op=nft_register_rule pid=6218 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:25:12.866000 audit[6218]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffec6c29e0 a2=0 a3=1 items=0 ppid=2649 pid=6218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:12.915858 kernel: audit: type=1300 audit(1757121912.866:1663): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffec6c29e0 a2=0 a3=1 items=0 ppid=2649 pid=6218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:12.866000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:25:12.930169 kernel: audit: type=1327 audit(1757121912.866:1663): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:25:12.915000 audit[6218]: NETFILTER_CFG table=nat:147 family=2 entries=110 op=nft_register_chain pid=6218 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:25:12.915000 audit[6218]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=ffffec6c29e0 a2=0 a3=1 items=0 ppid=2649 pid=6218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:12.946307 kernel: audit: type=1325 audit(1757121912.915:1664): table=nat:147 family=2 entries=110 op=nft_register_chain pid=6218 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:25:12.915000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:25:12.991008 kernel: audit: type=1300 audit(1757121912.915:1664): arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=ffffec6c29e0 a2=0 a3=1 items=0 ppid=2649 pid=6218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:12.991107 kernel: audit: type=1327 audit(1757121912.915:1664): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:25:13.422836 systemd[1]: Started sshd@20-10.200.20.26:22-10.200.16.10:49276.service. Sep 6 01:25:13.421000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.26:22-10.200.16.10:49276 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:13.448146 kernel: audit: type=1130 audit(1757121913.421:1665): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.26:22-10.200.16.10:49276 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:13.829000 audit[6221]: USER_ACCT pid=6221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:13.832647 sshd[6221]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:25:13.833539 sshd[6221]: Accepted publickey for core from 10.200.16.10 port 49276 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:25:13.831000 audit[6221]: CRED_ACQ pid=6221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:13.878899 kernel: audit: type=1101 audit(1757121913.829:1666): pid=6221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:13.879037 kernel: audit: type=1103 audit(1757121913.831:1667): pid=6221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:13.895507 kernel: audit: type=1006 audit(1757121913.831:1668): pid=6221 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Sep 6 01:25:13.895583 systemd-logind[1465]: New session 23 of user core. Sep 6 01:25:13.831000 audit[6221]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff9b09f30 a2=3 a3=1 items=0 ppid=1 pid=6221 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:13.831000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:25:13.895893 systemd[1]: Started session-23.scope. Sep 6 01:25:13.899000 audit[6221]: USER_START pid=6221 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:13.901000 audit[6223]: CRED_ACQ pid=6223 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:14.217210 sshd[6221]: pam_unix(sshd:session): session closed for user core Sep 6 01:25:14.217000 audit[6221]: USER_END pid=6221 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:14.218000 audit[6221]: CRED_DISP pid=6221 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:14.220686 systemd-logind[1465]: Session 23 logged out. Waiting for processes to exit. Sep 6 01:25:14.220940 systemd[1]: sshd@20-10.200.20.26:22-10.200.16.10:49276.service: Deactivated successfully. Sep 6 01:25:14.220000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.26:22-10.200.16.10:49276 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:14.221727 systemd[1]: session-23.scope: Deactivated successfully. Sep 6 01:25:14.222490 systemd-logind[1465]: Removed session 23. Sep 6 01:25:19.301081 systemd[1]: Started sshd@21-10.200.20.26:22-10.200.16.10:49284.service. Sep 6 01:25:19.329016 kernel: kauditd_printk_skb: 7 callbacks suppressed Sep 6 01:25:19.329181 kernel: audit: type=1130 audit(1757121919.300:1674): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.26:22-10.200.16.10:49284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:19.300000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.26:22-10.200.16.10:49284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:19.748000 audit[6253]: USER_ACCT pid=6253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:19.798457 kernel: audit: type=1101 audit(1757121919.748:1675): pid=6253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:19.798557 kernel: audit: type=1103 audit(1757121919.750:1676): pid=6253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:19.798590 kernel: audit: type=1006 audit(1757121919.750:1677): pid=6253 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Sep 6 01:25:19.750000 audit[6253]: CRED_ACQ pid=6253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:19.798685 sshd[6253]: Accepted publickey for core from 10.200.16.10 port 49284 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:25:19.751628 sshd[6253]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:25:19.750000 audit[6253]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdd4f08f0 a2=3 a3=1 items=0 ppid=1 pid=6253 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:19.836220 kernel: audit: type=1300 audit(1757121919.750:1677): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdd4f08f0 a2=3 a3=1 items=0 ppid=1 pid=6253 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:19.750000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:25:19.845051 kernel: audit: type=1327 audit(1757121919.750:1677): proctitle=737368643A20636F7265205B707269765D Sep 6 01:25:19.847564 systemd[1]: Started session-24.scope. Sep 6 01:25:19.847892 systemd-logind[1465]: New session 24 of user core. Sep 6 01:25:19.851000 audit[6253]: USER_START pid=6253 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:19.852000 audit[6256]: CRED_ACQ pid=6256 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:19.900531 kernel: audit: type=1105 audit(1757121919.851:1678): pid=6253 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:19.900624 kernel: audit: type=1103 audit(1757121919.852:1679): pid=6256 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:20.182190 sshd[6253]: pam_unix(sshd:session): session closed for user core Sep 6 01:25:20.182000 audit[6253]: USER_END pid=6253 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:20.185048 systemd-logind[1465]: Session 24 logged out. Waiting for processes to exit. Sep 6 01:25:20.186069 systemd[1]: session-24.scope: Deactivated successfully. Sep 6 01:25:20.187190 systemd-logind[1465]: Removed session 24. Sep 6 01:25:20.187733 systemd[1]: sshd@21-10.200.20.26:22-10.200.16.10:49284.service: Deactivated successfully. Sep 6 01:25:20.182000 audit[6253]: CRED_DISP pid=6253 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:20.230917 kernel: audit: type=1106 audit(1757121920.182:1680): pid=6253 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:20.231091 kernel: audit: type=1104 audit(1757121920.182:1681): pid=6253 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:20.182000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.26:22-10.200.16.10:49284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:25.245745 systemd[1]: Started sshd@22-10.200.20.26:22-10.200.16.10:53776.service. Sep 6 01:25:25.276399 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 01:25:25.276442 kernel: audit: type=1130 audit(1757121925.244:1683): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.26:22-10.200.16.10:53776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:25.244000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.26:22-10.200.16.10:53776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:25.654000 audit[6265]: USER_ACCT pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:25.657294 sshd[6265]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:25:25.659077 sshd[6265]: Accepted publickey for core from 10.200.16.10 port 53776 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:25:25.655000 audit[6265]: CRED_ACQ pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:25.704055 kernel: audit: type=1101 audit(1757121925.654:1684): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:25.704237 kernel: audit: type=1103 audit(1757121925.655:1685): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:25.719072 kernel: audit: type=1006 audit(1757121925.655:1686): pid=6265 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Sep 6 01:25:25.655000 audit[6265]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc59423a0 a2=3 a3=1 items=0 ppid=1 pid=6265 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:25.744831 kernel: audit: type=1300 audit(1757121925.655:1686): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc59423a0 a2=3 a3=1 items=0 ppid=1 pid=6265 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:25.655000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:25:25.754882 kernel: audit: type=1327 audit(1757121925.655:1686): proctitle=737368643A20636F7265205B707269765D Sep 6 01:25:25.756450 systemd[1]: Started session-25.scope. Sep 6 01:25:25.756894 systemd-logind[1465]: New session 25 of user core. Sep 6 01:25:25.764000 audit[6265]: USER_START pid=6265 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:25.766000 audit[6270]: CRED_ACQ pid=6270 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:25.815378 kernel: audit: type=1105 audit(1757121925.764:1687): pid=6265 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:25.815522 kernel: audit: type=1103 audit(1757121925.766:1688): pid=6270 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:26.067369 sshd[6265]: pam_unix(sshd:session): session closed for user core Sep 6 01:25:26.067000 audit[6265]: USER_END pid=6265 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:26.098687 systemd[1]: sshd@22-10.200.20.26:22-10.200.16.10:53776.service: Deactivated successfully. Sep 6 01:25:26.099538 systemd[1]: session-25.scope: Deactivated successfully. Sep 6 01:25:26.067000 audit[6265]: CRED_DISP pid=6265 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:26.101268 systemd-logind[1465]: Session 25 logged out. Waiting for processes to exit. Sep 6 01:25:26.102342 systemd-logind[1465]: Removed session 25. Sep 6 01:25:26.123611 kernel: audit: type=1106 audit(1757121926.067:1689): pid=6265 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:26.123737 kernel: audit: type=1104 audit(1757121926.067:1690): pid=6265 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:26.097000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.26:22-10.200.16.10:53776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:30.726591 systemd[1]: run-containerd-runc-k8s.io-40749c7d3756581aad1ed5c1a90a13a4fff5a333f197d55c45158a5a4cf4951a-runc.JvSKDL.mount: Deactivated successfully. Sep 6 01:25:31.137598 systemd[1]: Started sshd@23-10.200.20.26:22-10.200.16.10:58144.service. Sep 6 01:25:31.166391 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 01:25:31.166490 kernel: audit: type=1130 audit(1757121931.136:1692): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.26:22-10.200.16.10:58144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:31.136000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.26:22-10.200.16.10:58144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:31.545000 audit[6309]: USER_ACCT pid=6309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:31.548738 sshd[6309]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:25:31.568665 sshd[6309]: Accepted publickey for core from 10.200.16.10 port 58144 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:25:31.576879 systemd[1]: Started session-26.scope. Sep 6 01:25:31.577183 systemd-logind[1465]: New session 26 of user core. Sep 6 01:25:31.547000 audit[6309]: CRED_ACQ pid=6309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:31.614636 kernel: audit: type=1101 audit(1757121931.545:1693): pid=6309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:31.614871 kernel: audit: type=1103 audit(1757121931.547:1694): pid=6309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:31.616152 kernel: audit: type=1006 audit(1757121931.547:1695): pid=6309 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Sep 6 01:25:31.547000 audit[6309]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc30e9280 a2=3 a3=1 items=0 ppid=1 pid=6309 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:31.662799 kernel: audit: type=1300 audit(1757121931.547:1695): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc30e9280 a2=3 a3=1 items=0 ppid=1 pid=6309 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:31.547000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:25:31.672054 kernel: audit: type=1327 audit(1757121931.547:1695): proctitle=737368643A20636F7265205B707269765D Sep 6 01:25:31.581000 audit[6309]: USER_START pid=6309 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:31.701279 kernel: audit: type=1105 audit(1757121931.581:1696): pid=6309 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:31.582000 audit[6311]: CRED_ACQ pid=6311 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:31.728356 kernel: audit: type=1103 audit(1757121931.582:1697): pid=6311 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:31.936672 sshd[6309]: pam_unix(sshd:session): session closed for user core Sep 6 01:25:31.936000 audit[6309]: USER_END pid=6309 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:31.969375 systemd[1]: sshd@23-10.200.20.26:22-10.200.16.10:58144.service: Deactivated successfully. Sep 6 01:25:31.970232 systemd[1]: session-26.scope: Deactivated successfully. Sep 6 01:25:31.936000 audit[6309]: CRED_DISP pid=6309 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:31.971977 systemd-logind[1465]: Session 26 logged out. Waiting for processes to exit. Sep 6 01:25:31.996183 kernel: audit: type=1106 audit(1757121931.936:1698): pid=6309 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:31.996340 kernel: audit: type=1104 audit(1757121931.936:1699): pid=6309 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:31.996838 systemd-logind[1465]: Removed session 26. Sep 6 01:25:31.968000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.26:22-10.200.16.10:58144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:37.005725 systemd[1]: Started sshd@24-10.200.20.26:22-10.200.16.10:58154.service. Sep 6 01:25:37.004000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.26:22-10.200.16.10:58154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:37.011085 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 01:25:37.011241 kernel: audit: type=1130 audit(1757121937.004:1701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.26:22-10.200.16.10:58154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:37.415000 audit[6346]: USER_ACCT pid=6346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:37.416588 sshd[6346]: Accepted publickey for core from 10.200.16.10 port 58154 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:25:37.441000 audit[6346]: CRED_ACQ pid=6346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:37.443020 sshd[6346]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:25:37.468108 kernel: audit: type=1101 audit(1757121937.415:1702): pid=6346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:37.468280 kernel: audit: type=1103 audit(1757121937.441:1703): pid=6346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:37.483939 kernel: audit: type=1006 audit(1757121937.441:1704): pid=6346 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Sep 6 01:25:37.441000 audit[6346]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7777780 a2=3 a3=1 items=0 ppid=1 pid=6346 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:37.509856 kernel: audit: type=1300 audit(1757121937.441:1704): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7777780 a2=3 a3=1 items=0 ppid=1 pid=6346 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:37.441000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:25:37.519827 kernel: audit: type=1327 audit(1757121937.441:1704): proctitle=737368643A20636F7265205B707269765D Sep 6 01:25:37.520693 systemd-logind[1465]: New session 27 of user core. Sep 6 01:25:37.521137 systemd[1]: Started session-27.scope. Sep 6 01:25:37.525000 audit[6346]: USER_START pid=6346 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:37.557147 kernel: audit: type=1105 audit(1757121937.525:1705): pid=6346 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:37.554000 audit[6348]: CRED_ACQ pid=6348 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:37.580145 kernel: audit: type=1103 audit(1757121937.554:1706): pid=6348 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:37.857455 sshd[6346]: pam_unix(sshd:session): session closed for user core Sep 6 01:25:37.857000 audit[6346]: USER_END pid=6346 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:37.885658 systemd[1]: sshd@24-10.200.20.26:22-10.200.16.10:58154.service: Deactivated successfully. Sep 6 01:25:37.857000 audit[6346]: CRED_DISP pid=6346 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:37.886528 systemd[1]: session-27.scope: Deactivated successfully. Sep 6 01:25:37.907422 kernel: audit: type=1106 audit(1757121937.857:1707): pid=6346 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:37.907534 kernel: audit: type=1104 audit(1757121937.857:1708): pid=6346 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:37.884000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.26:22-10.200.16.10:58154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:37.908170 systemd-logind[1465]: Session 27 logged out. Waiting for processes to exit. Sep 6 01:25:37.908993 systemd-logind[1465]: Removed session 27. Sep 6 01:25:38.948289 systemd[1]: run-containerd-runc-k8s.io-40749c7d3756581aad1ed5c1a90a13a4fff5a333f197d55c45158a5a4cf4951a-runc.30K7RR.mount: Deactivated successfully. Sep 6 01:25:42.952105 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 01:25:42.952277 kernel: audit: type=1130 audit(1757121942.940:1710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.26:22-10.200.16.10:47714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:42.940000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.26:22-10.200.16.10:47714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:42.940951 systemd[1]: Started sshd@25-10.200.20.26:22-10.200.16.10:47714.service. Sep 6 01:25:43.395000 audit[6401]: USER_ACCT pid=6401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:43.398274 sshd[6401]: Accepted publickey for core from 10.200.16.10 port 47714 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:25:43.399105 sshd[6401]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:25:43.395000 audit[6401]: CRED_ACQ pid=6401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:43.444063 kernel: audit: type=1101 audit(1757121943.395:1711): pid=6401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:43.444188 kernel: audit: type=1103 audit(1757121943.395:1712): pid=6401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:43.458998 kernel: audit: type=1006 audit(1757121943.395:1713): pid=6401 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Sep 6 01:25:43.395000 audit[6401]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff53c3d50 a2=3 a3=1 items=0 ppid=1 pid=6401 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:43.483675 kernel: audit: type=1300 audit(1757121943.395:1713): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff53c3d50 a2=3 a3=1 items=0 ppid=1 pid=6401 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:43.395000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:25:43.493644 kernel: audit: type=1327 audit(1757121943.395:1713): proctitle=737368643A20636F7265205B707269765D Sep 6 01:25:43.494536 systemd-logind[1465]: New session 28 of user core. Sep 6 01:25:43.494902 systemd[1]: Started session-28.scope. Sep 6 01:25:43.500000 audit[6401]: USER_START pid=6401 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:43.528162 kernel: audit: type=1105 audit(1757121943.500:1714): pid=6401 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:43.528000 audit[6403]: CRED_ACQ pid=6403 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:43.551185 kernel: audit: type=1103 audit(1757121943.528:1715): pid=6403 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:43.870444 sshd[6401]: pam_unix(sshd:session): session closed for user core Sep 6 01:25:43.872000 audit[6401]: USER_END pid=6401 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:43.875278 systemd-logind[1465]: Session 28 logged out. Waiting for processes to exit. Sep 6 01:25:43.876290 systemd[1]: sshd@25-10.200.20.26:22-10.200.16.10:47714.service: Deactivated successfully. Sep 6 01:25:43.877045 systemd[1]: session-28.scope: Deactivated successfully. Sep 6 01:25:43.878686 systemd-logind[1465]: Removed session 28. Sep 6 01:25:43.873000 audit[6401]: CRED_DISP pid=6401 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:43.926454 kernel: audit: type=1106 audit(1757121943.872:1716): pid=6401 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:43.926585 kernel: audit: type=1104 audit(1757121943.873:1717): pid=6401 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:43.876000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.26:22-10.200.16.10:47714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'