Sep 6 01:17:35.094685 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Sep 6 01:17:35.094704 kernel: Linux version 5.15.190-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Fri Sep 5 23:00:12 -00 2025 Sep 6 01:17:35.094713 kernel: earlycon: pl11 at MMIO 0x00000000effec000 (options '') Sep 6 01:17:35.094720 kernel: printk: bootconsole [pl11] enabled Sep 6 01:17:35.094725 kernel: efi: EFI v2.70 by EDK II Sep 6 01:17:35.094730 kernel: efi: ACPI 2.0=0x3fd5f018 SMBIOS=0x3e580000 SMBIOS 3.0=0x3e560000 MEMATTR=0x3f214018 RNG=0x3fd5f998 MEMRESERVE=0x3761cf98 Sep 6 01:17:35.094737 kernel: random: crng init done Sep 6 01:17:35.094742 kernel: ACPI: Early table checksum verification disabled Sep 6 01:17:35.094748 kernel: ACPI: RSDP 0x000000003FD5F018 000024 (v02 VRTUAL) Sep 6 01:17:35.094753 kernel: ACPI: XSDT 0x000000003FD5FF18 00006C (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 01:17:35.094759 kernel: ACPI: FACP 0x000000003FD5FC18 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 01:17:35.094764 kernel: ACPI: DSDT 0x000000003FD41018 01DFCD (v02 MSFTVM DSDT01 00000001 INTL 20230628) Sep 6 01:17:35.094771 kernel: ACPI: DBG2 0x000000003FD5FB18 000072 (v00 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 01:17:35.094777 kernel: ACPI: GTDT 0x000000003FD5FD98 000060 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 01:17:35.094783 kernel: ACPI: OEM0 0x000000003FD5F098 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 01:17:35.094789 kernel: ACPI: SPCR 0x000000003FD5FA98 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 01:17:35.094796 kernel: ACPI: APIC 0x000000003FD5F818 0000FC (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 01:17:35.094803 kernel: ACPI: SRAT 0x000000003FD5F198 000234 (v03 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 01:17:35.094809 kernel: ACPI: PPTT 0x000000003FD5F418 000120 (v01 VRTUAL MICROSFT 00000000 MSFT 00000000) Sep 6 01:17:35.094815 kernel: ACPI: BGRT 0x000000003FD5FE98 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 01:17:35.094821 kernel: ACPI: SPCR: console: pl011,mmio32,0xeffec000,115200 Sep 6 01:17:35.094827 kernel: NUMA: Failed to initialise from firmware Sep 6 01:17:35.094832 kernel: NUMA: Faking a node at [mem 0x0000000000000000-0x00000001bfffffff] Sep 6 01:17:35.094838 kernel: NUMA: NODE_DATA [mem 0x1bf7f1900-0x1bf7f6fff] Sep 6 01:17:35.094844 kernel: Zone ranges: Sep 6 01:17:35.094850 kernel: DMA [mem 0x0000000000000000-0x00000000ffffffff] Sep 6 01:17:35.094856 kernel: DMA32 empty Sep 6 01:17:35.094861 kernel: Normal [mem 0x0000000100000000-0x00000001bfffffff] Sep 6 01:17:35.094868 kernel: Movable zone start for each node Sep 6 01:17:35.094874 kernel: Early memory node ranges Sep 6 01:17:35.094880 kernel: node 0: [mem 0x0000000000000000-0x00000000007fffff] Sep 6 01:17:35.094886 kernel: node 0: [mem 0x0000000000824000-0x000000003e54ffff] Sep 6 01:17:35.094891 kernel: node 0: [mem 0x000000003e550000-0x000000003e87ffff] Sep 6 01:17:35.094897 kernel: node 0: [mem 0x000000003e880000-0x000000003fc7ffff] Sep 6 01:17:35.094903 kernel: node 0: [mem 0x000000003fc80000-0x000000003fcfffff] Sep 6 01:17:35.094909 kernel: node 0: [mem 0x000000003fd00000-0x000000003fffffff] Sep 6 01:17:35.094914 kernel: node 0: [mem 0x0000000100000000-0x00000001bfffffff] Sep 6 01:17:35.094920 kernel: Initmem setup node 0 [mem 0x0000000000000000-0x00000001bfffffff] Sep 6 01:17:35.094926 kernel: On node 0, zone DMA: 36 pages in unavailable ranges Sep 6 01:17:35.094932 kernel: psci: probing for conduit method from ACPI. Sep 6 01:17:35.094941 kernel: psci: PSCIv1.1 detected in firmware. Sep 6 01:17:35.094947 kernel: psci: Using standard PSCI v0.2 function IDs Sep 6 01:17:35.094953 kernel: psci: MIGRATE_INFO_TYPE not supported. Sep 6 01:17:35.094959 kernel: psci: SMC Calling Convention v1.4 Sep 6 01:17:35.094966 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x0 -> Node -1 Sep 6 01:17:35.094973 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x1 -> Node -1 Sep 6 01:17:35.094979 kernel: percpu: Embedded 30 pages/cpu s82968 r8192 d31720 u122880 Sep 6 01:17:35.094985 kernel: pcpu-alloc: s82968 r8192 d31720 u122880 alloc=30*4096 Sep 6 01:17:35.094991 kernel: pcpu-alloc: [0] 0 [0] 1 Sep 6 01:17:35.094997 kernel: Detected PIPT I-cache on CPU0 Sep 6 01:17:35.095004 kernel: CPU features: detected: GIC system register CPU interface Sep 6 01:17:35.095010 kernel: CPU features: detected: Hardware dirty bit management Sep 6 01:17:35.095016 kernel: CPU features: detected: Spectre-BHB Sep 6 01:17:35.095022 kernel: CPU features: kernel page table isolation forced ON by KASLR Sep 6 01:17:35.095028 kernel: CPU features: detected: Kernel page table isolation (KPTI) Sep 6 01:17:35.095034 kernel: CPU features: detected: ARM erratum 1418040 Sep 6 01:17:35.095042 kernel: CPU features: detected: ARM erratum 1542419 (kernel portion) Sep 6 01:17:35.095048 kernel: CPU features: detected: SSBS not fully self-synchronizing Sep 6 01:17:35.095055 kernel: Built 1 zonelists, mobility grouping on. Total pages: 1032156 Sep 6 01:17:35.095061 kernel: Policy zone: Normal Sep 6 01:17:35.095068 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=5cb382ab59aa1336098b36da02e2d4491706a6fda80ee56c4ff8582cce9206a4 Sep 6 01:17:35.095075 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Sep 6 01:17:35.095082 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Sep 6 01:17:35.095088 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Sep 6 01:17:35.095094 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Sep 6 01:17:35.095100 kernel: software IO TLB: mapped [mem 0x000000003a550000-0x000000003e550000] (64MB) Sep 6 01:17:35.095107 kernel: Memory: 3986872K/4194160K available (9792K kernel code, 2094K rwdata, 7592K rodata, 36416K init, 777K bss, 207288K reserved, 0K cma-reserved) Sep 6 01:17:35.095114 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Sep 6 01:17:35.095120 kernel: trace event string verifier disabled Sep 6 01:17:35.095449 kernel: rcu: Preemptible hierarchical RCU implementation. Sep 6 01:17:35.095460 kernel: rcu: RCU event tracing is enabled. Sep 6 01:17:35.095467 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Sep 6 01:17:35.095474 kernel: Trampoline variant of Tasks RCU enabled. Sep 6 01:17:35.095480 kernel: Tracing variant of Tasks RCU enabled. Sep 6 01:17:35.095487 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Sep 6 01:17:35.095493 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Sep 6 01:17:35.095499 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Sep 6 01:17:35.095505 kernel: GICv3: 960 SPIs implemented Sep 6 01:17:35.095515 kernel: GICv3: 0 Extended SPIs implemented Sep 6 01:17:35.095522 kernel: GICv3: Distributor has no Range Selector support Sep 6 01:17:35.095528 kernel: Root IRQ handler: gic_handle_irq Sep 6 01:17:35.095534 kernel: GICv3: 16 PPIs implemented Sep 6 01:17:35.095540 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000effee000 Sep 6 01:17:35.095547 kernel: ITS: No ITS available, not enabling LPIs Sep 6 01:17:35.095553 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Sep 6 01:17:35.095559 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Sep 6 01:17:35.095566 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Sep 6 01:17:35.095572 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Sep 6 01:17:35.095579 kernel: Console: colour dummy device 80x25 Sep 6 01:17:35.095587 kernel: printk: console [tty1] enabled Sep 6 01:17:35.095594 kernel: ACPI: Core revision 20210730 Sep 6 01:17:35.095600 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Sep 6 01:17:35.095607 kernel: pid_max: default: 32768 minimum: 301 Sep 6 01:17:35.095613 kernel: LSM: Security Framework initializing Sep 6 01:17:35.095619 kernel: SELinux: Initializing. Sep 6 01:17:35.095626 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Sep 6 01:17:35.095633 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Sep 6 01:17:35.095640 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3a8030, hints 0xe, misc 0x31e1 Sep 6 01:17:35.095647 kernel: Hyper-V: Host Build 10.0.22477.1619-1-0 Sep 6 01:17:35.095654 kernel: rcu: Hierarchical SRCU implementation. Sep 6 01:17:35.095660 kernel: Remapping and enabling EFI services. Sep 6 01:17:35.095667 kernel: smp: Bringing up secondary CPUs ... Sep 6 01:17:35.095673 kernel: Detected PIPT I-cache on CPU1 Sep 6 01:17:35.095680 kernel: GICv3: CPU1: found redistributor 1 region 1:0x00000000f000e000 Sep 6 01:17:35.095686 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Sep 6 01:17:35.095693 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Sep 6 01:17:35.095699 kernel: smp: Brought up 1 node, 2 CPUs Sep 6 01:17:35.095706 kernel: SMP: Total of 2 processors activated. Sep 6 01:17:35.095713 kernel: CPU features: detected: 32-bit EL0 Support Sep 6 01:17:35.095720 kernel: CPU features: detected: Instruction cache invalidation not required for I/D coherence Sep 6 01:17:35.095727 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Sep 6 01:17:35.095733 kernel: CPU features: detected: CRC32 instructions Sep 6 01:17:35.095740 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Sep 6 01:17:35.095746 kernel: CPU features: detected: LSE atomic instructions Sep 6 01:17:35.095753 kernel: CPU features: detected: Privileged Access Never Sep 6 01:17:35.095759 kernel: CPU: All CPU(s) started at EL1 Sep 6 01:17:35.095765 kernel: alternatives: patching kernel code Sep 6 01:17:35.095773 kernel: devtmpfs: initialized Sep 6 01:17:35.095784 kernel: KASLR enabled Sep 6 01:17:35.095791 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Sep 6 01:17:35.095799 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Sep 6 01:17:35.095806 kernel: pinctrl core: initialized pinctrl subsystem Sep 6 01:17:35.095812 kernel: SMBIOS 3.1.0 present. Sep 6 01:17:35.095819 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 09/28/2024 Sep 6 01:17:35.095826 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Sep 6 01:17:35.095833 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Sep 6 01:17:35.095842 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Sep 6 01:17:35.095849 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Sep 6 01:17:35.095856 kernel: audit: initializing netlink subsys (disabled) Sep 6 01:17:35.095863 kernel: audit: type=2000 audit(0.089:1): state=initialized audit_enabled=0 res=1 Sep 6 01:17:35.095870 kernel: thermal_sys: Registered thermal governor 'step_wise' Sep 6 01:17:35.095876 kernel: cpuidle: using governor menu Sep 6 01:17:35.095883 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Sep 6 01:17:35.095891 kernel: ASID allocator initialised with 32768 entries Sep 6 01:17:35.095898 kernel: ACPI: bus type PCI registered Sep 6 01:17:35.095905 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Sep 6 01:17:35.095911 kernel: Serial: AMBA PL011 UART driver Sep 6 01:17:35.095918 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Sep 6 01:17:35.095925 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Sep 6 01:17:35.095932 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Sep 6 01:17:35.095939 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Sep 6 01:17:35.095946 kernel: cryptd: max_cpu_qlen set to 1000 Sep 6 01:17:35.095954 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Sep 6 01:17:35.095961 kernel: ACPI: Added _OSI(Module Device) Sep 6 01:17:35.095967 kernel: ACPI: Added _OSI(Processor Device) Sep 6 01:17:35.095974 kernel: ACPI: Added _OSI(Processor Aggregator Device) Sep 6 01:17:35.095981 kernel: ACPI: Added _OSI(Linux-Dell-Video) Sep 6 01:17:35.095988 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Sep 6 01:17:35.095994 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Sep 6 01:17:35.096001 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Sep 6 01:17:35.096008 kernel: ACPI: Interpreter enabled Sep 6 01:17:35.096016 kernel: ACPI: Using GIC for interrupt routing Sep 6 01:17:35.096023 kernel: ARMH0011:00: ttyAMA0 at MMIO 0xeffec000 (irq = 12, base_baud = 0) is a SBSA Sep 6 01:17:35.096030 kernel: printk: console [ttyAMA0] enabled Sep 6 01:17:35.096036 kernel: printk: bootconsole [pl11] disabled Sep 6 01:17:35.096043 kernel: ARMH0011:01: ttyAMA1 at MMIO 0xeffeb000 (irq = 13, base_baud = 0) is a SBSA Sep 6 01:17:35.096050 kernel: iommu: Default domain type: Translated Sep 6 01:17:35.096057 kernel: iommu: DMA domain TLB invalidation policy: strict mode Sep 6 01:17:35.096064 kernel: vgaarb: loaded Sep 6 01:17:35.096070 kernel: pps_core: LinuxPPS API ver. 1 registered Sep 6 01:17:35.096077 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Sep 6 01:17:35.096085 kernel: PTP clock support registered Sep 6 01:17:35.096092 kernel: Registered efivars operations Sep 6 01:17:35.096098 kernel: No ACPI PMU IRQ for CPU0 Sep 6 01:17:35.096105 kernel: No ACPI PMU IRQ for CPU1 Sep 6 01:17:35.096111 kernel: clocksource: Switched to clocksource arch_sys_counter Sep 6 01:17:35.096118 kernel: VFS: Disk quotas dquot_6.6.0 Sep 6 01:17:35.096138 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Sep 6 01:17:35.096146 kernel: pnp: PnP ACPI init Sep 6 01:17:35.096153 kernel: pnp: PnP ACPI: found 0 devices Sep 6 01:17:35.096162 kernel: NET: Registered PF_INET protocol family Sep 6 01:17:35.096168 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Sep 6 01:17:35.096175 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Sep 6 01:17:35.096182 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Sep 6 01:17:35.096189 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Sep 6 01:17:35.096197 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Sep 6 01:17:35.096204 kernel: TCP: Hash tables configured (established 32768 bind 32768) Sep 6 01:17:35.096210 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Sep 6 01:17:35.096219 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Sep 6 01:17:35.096225 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Sep 6 01:17:35.096232 kernel: PCI: CLS 0 bytes, default 64 Sep 6 01:17:35.096239 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 1 counters available Sep 6 01:17:35.096246 kernel: kvm [1]: HYP mode not available Sep 6 01:17:35.096253 kernel: Initialise system trusted keyrings Sep 6 01:17:35.096260 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Sep 6 01:17:35.096266 kernel: Key type asymmetric registered Sep 6 01:17:35.096273 kernel: Asymmetric key parser 'x509' registered Sep 6 01:17:35.096281 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Sep 6 01:17:35.096288 kernel: io scheduler mq-deadline registered Sep 6 01:17:35.096295 kernel: io scheduler kyber registered Sep 6 01:17:35.096302 kernel: io scheduler bfq registered Sep 6 01:17:35.096309 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Sep 6 01:17:35.096315 kernel: thunder_xcv, ver 1.0 Sep 6 01:17:35.096322 kernel: thunder_bgx, ver 1.0 Sep 6 01:17:35.096329 kernel: nicpf, ver 1.0 Sep 6 01:17:35.096335 kernel: nicvf, ver 1.0 Sep 6 01:17:35.096473 kernel: rtc-efi rtc-efi.0: registered as rtc0 Sep 6 01:17:35.096537 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-09-06T01:17:34 UTC (1757121454) Sep 6 01:17:35.096546 kernel: efifb: probing for efifb Sep 6 01:17:35.096553 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Sep 6 01:17:35.096560 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Sep 6 01:17:35.096567 kernel: efifb: scrolling: redraw Sep 6 01:17:35.096574 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Sep 6 01:17:35.096581 kernel: Console: switching to colour frame buffer device 128x48 Sep 6 01:17:35.096589 kernel: fb0: EFI VGA frame buffer device Sep 6 01:17:35.096596 kernel: SMCCC: SOC_ID: ARCH_SOC_ID not implemented, skipping .... Sep 6 01:17:35.096603 kernel: hid: raw HID events driver (C) Jiri Kosina Sep 6 01:17:35.096610 kernel: NET: Registered PF_INET6 protocol family Sep 6 01:17:35.096617 kernel: Segment Routing with IPv6 Sep 6 01:17:35.096623 kernel: In-situ OAM (IOAM) with IPv6 Sep 6 01:17:35.096630 kernel: NET: Registered PF_PACKET protocol family Sep 6 01:17:35.096637 kernel: Key type dns_resolver registered Sep 6 01:17:35.096644 kernel: registered taskstats version 1 Sep 6 01:17:35.096651 kernel: Loading compiled-in X.509 certificates Sep 6 01:17:35.096659 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.190-flatcar: 72ab5ba99c2368429c7a4d04fccfc5a39dd84386' Sep 6 01:17:35.096666 kernel: Key type .fscrypt registered Sep 6 01:17:35.096673 kernel: Key type fscrypt-provisioning registered Sep 6 01:17:35.096680 kernel: ima: No TPM chip found, activating TPM-bypass! Sep 6 01:17:35.096687 kernel: ima: Allocated hash algorithm: sha1 Sep 6 01:17:35.096693 kernel: ima: No architecture policies found Sep 6 01:17:35.096700 kernel: clk: Disabling unused clocks Sep 6 01:17:35.096707 kernel: Freeing unused kernel memory: 36416K Sep 6 01:17:35.096715 kernel: Run /init as init process Sep 6 01:17:35.096723 kernel: with arguments: Sep 6 01:17:35.096730 kernel: /init Sep 6 01:17:35.096736 kernel: with environment: Sep 6 01:17:35.096743 kernel: HOME=/ Sep 6 01:17:35.096749 kernel: TERM=linux Sep 6 01:17:35.096756 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Sep 6 01:17:35.096765 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 6 01:17:35.096776 systemd[1]: Detected virtualization microsoft. Sep 6 01:17:35.096784 systemd[1]: Detected architecture arm64. Sep 6 01:17:35.096791 systemd[1]: Running in initrd. Sep 6 01:17:35.096798 systemd[1]: No hostname configured, using default hostname. Sep 6 01:17:35.096805 systemd[1]: Hostname set to . Sep 6 01:17:35.096813 systemd[1]: Initializing machine ID from random generator. Sep 6 01:17:35.096820 systemd[1]: Queued start job for default target initrd.target. Sep 6 01:17:35.096827 systemd[1]: Started systemd-ask-password-console.path. Sep 6 01:17:35.096836 systemd[1]: Reached target cryptsetup.target. Sep 6 01:17:35.096843 systemd[1]: Reached target paths.target. Sep 6 01:17:35.096850 systemd[1]: Reached target slices.target. Sep 6 01:17:35.096857 systemd[1]: Reached target swap.target. Sep 6 01:17:35.096865 systemd[1]: Reached target timers.target. Sep 6 01:17:35.096872 systemd[1]: Listening on iscsid.socket. Sep 6 01:17:35.096879 systemd[1]: Listening on iscsiuio.socket. Sep 6 01:17:35.096887 systemd[1]: Listening on systemd-journald-audit.socket. Sep 6 01:17:35.096895 systemd[1]: Listening on systemd-journald-dev-log.socket. Sep 6 01:17:35.096903 systemd[1]: Listening on systemd-journald.socket. Sep 6 01:17:35.096910 systemd[1]: Listening on systemd-networkd.socket. Sep 6 01:17:35.096918 systemd[1]: Listening on systemd-udevd-control.socket. Sep 6 01:17:35.096925 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 6 01:17:35.096932 systemd[1]: Reached target sockets.target. Sep 6 01:17:35.096939 systemd[1]: Starting kmod-static-nodes.service... Sep 6 01:17:35.096946 systemd[1]: Finished network-cleanup.service. Sep 6 01:17:35.096954 systemd[1]: Starting systemd-fsck-usr.service... Sep 6 01:17:35.096962 systemd[1]: Starting systemd-journald.service... Sep 6 01:17:35.096970 systemd[1]: Starting systemd-modules-load.service... Sep 6 01:17:35.096977 systemd[1]: Starting systemd-resolved.service... Sep 6 01:17:35.096988 systemd-journald[276]: Journal started Sep 6 01:17:35.097031 systemd-journald[276]: Runtime Journal (/run/log/journal/643e242a7b3f4f49a75827b7c0fe1f0d) is 8.0M, max 78.5M, 70.5M free. Sep 6 01:17:35.079451 systemd-modules-load[277]: Inserted module 'overlay' Sep 6 01:17:35.139254 systemd[1]: Starting systemd-vconsole-setup.service... Sep 6 01:17:35.139278 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Sep 6 01:17:35.129918 systemd-resolved[278]: Positive Trust Anchors: Sep 6 01:17:35.129926 systemd-resolved[278]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 6 01:17:35.159667 systemd[1]: Started systemd-journald.service. Sep 6 01:17:35.129956 systemd-resolved[278]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 6 01:17:35.238227 kernel: Bridge firewalling registered Sep 6 01:17:35.238253 kernel: audit: type=1130 audit(1757121455.212:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:35.212000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:35.138413 systemd-resolved[278]: Defaulting to hostname 'linux'. Sep 6 01:17:35.317415 kernel: SCSI subsystem initialized Sep 6 01:17:35.317442 kernel: audit: type=1130 audit(1757121455.250:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:35.317453 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Sep 6 01:17:35.317462 kernel: audit: type=1130 audit(1757121455.275:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:35.317471 kernel: device-mapper: uevent: version 1.0.3 Sep 6 01:17:35.317496 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Sep 6 01:17:35.250000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:35.275000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:35.172779 systemd-modules-load[277]: Inserted module 'br_netfilter' Sep 6 01:17:35.213063 systemd[1]: Started systemd-resolved.service. Sep 6 01:17:35.339000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:35.250799 systemd[1]: Finished kmod-static-nodes.service. Sep 6 01:17:35.290824 systemd[1]: Finished systemd-fsck-usr.service. Sep 6 01:17:35.383000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:35.333143 systemd-modules-load[277]: Inserted module 'dm_multipath' Sep 6 01:17:35.442874 kernel: audit: type=1130 audit(1757121455.339:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:35.442897 kernel: audit: type=1130 audit(1757121455.383:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:35.442906 kernel: audit: type=1130 audit(1757121455.416:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:35.416000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:35.369930 systemd[1]: Finished systemd-modules-load.service. Sep 6 01:17:35.383862 systemd[1]: Finished systemd-vconsole-setup.service. Sep 6 01:17:35.445025 systemd[1]: Reached target nss-lookup.target. Sep 6 01:17:35.461659 systemd[1]: Starting dracut-cmdline-ask.service... Sep 6 01:17:35.475744 systemd[1]: Starting systemd-sysctl.service... Sep 6 01:17:35.498468 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Sep 6 01:17:35.506568 systemd[1]: Finished dracut-cmdline-ask.service. Sep 6 01:17:35.524000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:35.525154 systemd[1]: Finished systemd-sysctl.service. Sep 6 01:17:35.552897 kernel: audit: type=1130 audit(1757121455.524:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:35.558000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:35.558678 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Sep 6 01:17:35.584861 systemd[1]: Starting dracut-cmdline.service... Sep 6 01:17:35.621537 kernel: audit: type=1130 audit(1757121455.558:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:35.621567 kernel: audit: type=1130 audit(1757121455.583:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:35.583000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:35.623834 dracut-cmdline[298]: dracut-dracut-053 Sep 6 01:17:35.629309 dracut-cmdline[298]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=5cb382ab59aa1336098b36da02e2d4491706a6fda80ee56c4ff8582cce9206a4 Sep 6 01:17:35.691156 kernel: Loading iSCSI transport class v2.0-870. Sep 6 01:17:35.707150 kernel: iscsi: registered transport (tcp) Sep 6 01:17:35.728660 kernel: iscsi: registered transport (qla4xxx) Sep 6 01:17:35.728725 kernel: QLogic iSCSI HBA Driver Sep 6 01:17:35.759354 systemd[1]: Finished dracut-cmdline.service. Sep 6 01:17:35.764000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:35.765566 systemd[1]: Starting dracut-pre-udev.service... Sep 6 01:17:35.821146 kernel: raid6: neonx8 gen() 13757 MB/s Sep 6 01:17:35.843140 kernel: raid6: neonx8 xor() 10830 MB/s Sep 6 01:17:35.864137 kernel: raid6: neonx4 gen() 13543 MB/s Sep 6 01:17:35.885136 kernel: raid6: neonx4 xor() 11085 MB/s Sep 6 01:17:35.923136 kernel: raid6: neonx2 gen() 12928 MB/s Sep 6 01:17:35.932150 kernel: raid6: neonx2 xor() 10305 MB/s Sep 6 01:17:35.949138 kernel: raid6: neonx1 gen() 10529 MB/s Sep 6 01:17:35.971136 kernel: raid6: neonx1 xor() 8793 MB/s Sep 6 01:17:35.992135 kernel: raid6: int64x8 gen() 6272 MB/s Sep 6 01:17:36.013137 kernel: raid6: int64x8 xor() 3544 MB/s Sep 6 01:17:36.035135 kernel: raid6: int64x4 gen() 7223 MB/s Sep 6 01:17:36.056134 kernel: raid6: int64x4 xor() 3855 MB/s Sep 6 01:17:36.077135 kernel: raid6: int64x2 gen() 6156 MB/s Sep 6 01:17:36.099137 kernel: raid6: int64x2 xor() 3319 MB/s Sep 6 01:17:36.120137 kernel: raid6: int64x1 gen() 5046 MB/s Sep 6 01:17:36.145855 kernel: raid6: int64x1 xor() 2647 MB/s Sep 6 01:17:36.145869 kernel: raid6: using algorithm neonx8 gen() 13757 MB/s Sep 6 01:17:36.145879 kernel: raid6: .... xor() 10830 MB/s, rmw enabled Sep 6 01:17:36.152510 kernel: raid6: using neon recovery algorithm Sep 6 01:17:36.175672 kernel: xor: measuring software checksum speed Sep 6 01:17:36.175719 kernel: 8regs : 17188 MB/sec Sep 6 01:17:36.182531 kernel: 32regs : 20665 MB/sec Sep 6 01:17:36.186850 kernel: arm64_neon : 27496 MB/sec Sep 6 01:17:36.186861 kernel: xor: using function: arm64_neon (27496 MB/sec) Sep 6 01:17:36.250146 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Sep 6 01:17:36.259332 systemd[1]: Finished dracut-pre-udev.service. Sep 6 01:17:36.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:36.268000 audit: BPF prog-id=7 op=LOAD Sep 6 01:17:36.269000 audit: BPF prog-id=8 op=LOAD Sep 6 01:17:36.269705 systemd[1]: Starting systemd-udevd.service... Sep 6 01:17:36.289988 systemd-udevd[475]: Using default interface naming scheme 'v252'. Sep 6 01:17:36.302000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:36.295946 systemd[1]: Started systemd-udevd.service. Sep 6 01:17:36.308263 systemd[1]: Starting dracut-pre-trigger.service... Sep 6 01:17:36.322814 dracut-pre-trigger[496]: rd.md=0: removing MD RAID activation Sep 6 01:17:36.353862 systemd[1]: Finished dracut-pre-trigger.service. Sep 6 01:17:36.359000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:36.360486 systemd[1]: Starting systemd-udev-trigger.service... Sep 6 01:17:36.400241 systemd[1]: Finished systemd-udev-trigger.service. Sep 6 01:17:36.412000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:36.466148 kernel: hv_vmbus: Vmbus version:5.3 Sep 6 01:17:36.481151 kernel: hv_vmbus: registering driver hid_hyperv Sep 6 01:17:36.481219 kernel: hv_vmbus: registering driver hyperv_keyboard Sep 6 01:17:36.497148 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/MSFT1000:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input0 Sep 6 01:17:36.497197 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input1 Sep 6 01:17:36.512228 kernel: hv_vmbus: registering driver hv_netvsc Sep 6 01:17:36.513156 kernel: hid-generic 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Sep 6 01:17:36.532168 kernel: hv_vmbus: registering driver hv_storvsc Sep 6 01:17:36.540397 kernel: scsi host1: storvsc_host_t Sep 6 01:17:36.540593 kernel: scsi host0: storvsc_host_t Sep 6 01:17:36.550795 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Sep 6 01:17:36.562008 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Sep 6 01:17:36.588268 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Sep 6 01:17:36.606786 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Sep 6 01:17:36.606825 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Sep 6 01:17:36.629094 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Sep 6 01:17:36.629246 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Sep 6 01:17:36.629337 kernel: sd 0:0:0:0: [sda] Write Protect is off Sep 6 01:17:36.629420 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Sep 6 01:17:36.629502 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Sep 6 01:17:36.629587 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Sep 6 01:17:36.629604 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Sep 6 01:17:36.690522 kernel: hv_netvsc 000d3af9-b6bd-000d-3af9-b6bd000d3af9 eth0: VF slot 1 added Sep 6 01:17:36.709363 kernel: hv_vmbus: registering driver hv_pci Sep 6 01:17:36.709415 kernel: hv_pci 5ba1cbf8-7193-4638-84ea-2ff0b1772f18: PCI VMBus probing: Using version 0x10004 Sep 6 01:17:37.008316 kernel: hv_pci 5ba1cbf8-7193-4638-84ea-2ff0b1772f18: PCI host bridge to bus 7193:00 Sep 6 01:17:37.008421 kernel: pci_bus 7193:00: root bus resource [mem 0xfc0000000-0xfc00fffff window] Sep 6 01:17:37.008527 kernel: pci_bus 7193:00: No busn resource found for root bus, will use [bus 00-ff] Sep 6 01:17:37.008601 kernel: pci 7193:00:02.0: [15b3:1018] type 00 class 0x020000 Sep 6 01:17:37.008690 kernel: pci 7193:00:02.0: reg 0x10: [mem 0xfc0000000-0xfc00fffff 64bit pref] Sep 6 01:17:37.008774 kernel: pci 7193:00:02.0: enabling Extended Tags Sep 6 01:17:37.008853 kernel: pci 7193:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at 7193:00:02.0 (capable of 126.016 Gb/s with 8.0 GT/s PCIe x16 link) Sep 6 01:17:37.008929 kernel: pci_bus 7193:00: busn_res: [bus 00-ff] end is updated to 00 Sep 6 01:17:37.008999 kernel: pci 7193:00:02.0: BAR 0: assigned [mem 0xfc0000000-0xfc00fffff 64bit pref] Sep 6 01:17:37.046102 kernel: mlx5_core 7193:00:02.0: enabling device (0000 -> 0002) Sep 6 01:17:37.413783 kernel: mlx5_core 7193:00:02.0: firmware version: 16.31.2424 Sep 6 01:17:37.413912 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/sda6 scanned by (udev-worker) (529) Sep 6 01:17:37.413924 kernel: mlx5_core 7193:00:02.0: MLX5E: StrdRq(1) RqSz(8) StrdSz(2048) RxCqeCmprss(0) Sep 6 01:17:37.414008 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Sep 6 01:17:37.414019 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Sep 6 01:17:37.414027 kernel: hv_netvsc 000d3af9-b6bd-000d-3af9-b6bd000d3af9 eth0: VF registering: eth1 Sep 6 01:17:37.414120 kernel: mlx5_core 7193:00:02.0 eth1: joined to eth0 Sep 6 01:17:37.099835 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Sep 6 01:17:37.122636 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 6 01:17:37.274254 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Sep 6 01:17:37.445457 kernel: mlx5_core 7193:00:02.0 enP29075s1: renamed from eth1 Sep 6 01:17:37.285280 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Sep 6 01:17:37.292636 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Sep 6 01:17:37.301251 systemd[1]: Starting disk-uuid.service... Sep 6 01:17:38.334147 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Sep 6 01:17:38.334289 disk-uuid[602]: The operation has completed successfully. Sep 6 01:17:38.390669 systemd[1]: disk-uuid.service: Deactivated successfully. Sep 6 01:17:38.390761 systemd[1]: Finished disk-uuid.service. Sep 6 01:17:38.400000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:38.400000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:38.409867 systemd[1]: Starting verity-setup.service... Sep 6 01:17:38.451154 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Sep 6 01:17:38.626066 systemd[1]: Found device dev-mapper-usr.device. Sep 6 01:17:38.638297 systemd[1]: Mounting sysusr-usr.mount... Sep 6 01:17:38.642635 systemd[1]: Finished verity-setup.service. Sep 6 01:17:38.650000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:38.708905 systemd[1]: Mounted sysusr-usr.mount. Sep 6 01:17:38.718889 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Sep 6 01:17:38.714445 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Sep 6 01:17:38.715251 systemd[1]: Starting ignition-setup.service... Sep 6 01:17:38.724718 systemd[1]: Starting parse-ip-for-networkd.service... Sep 6 01:17:38.767727 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Sep 6 01:17:38.767788 kernel: BTRFS info (device sda6): using free space tree Sep 6 01:17:38.773490 kernel: BTRFS info (device sda6): has skinny extents Sep 6 01:17:38.815923 systemd[1]: Finished parse-ip-for-networkd.service. Sep 6 01:17:38.820000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:38.825000 audit: BPF prog-id=9 op=LOAD Sep 6 01:17:38.826288 systemd[1]: Starting systemd-networkd.service... Sep 6 01:17:38.842262 systemd[1]: mnt-oem.mount: Deactivated successfully. Sep 6 01:17:38.855943 systemd-networkd[846]: lo: Link UP Sep 6 01:17:38.855960 systemd-networkd[846]: lo: Gained carrier Sep 6 01:17:38.866000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:38.856440 systemd-networkd[846]: Enumeration completed Sep 6 01:17:38.860350 systemd[1]: Started systemd-networkd.service. Sep 6 01:17:38.865986 systemd-networkd[846]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 6 01:17:38.866234 systemd[1]: Reached target network.target. Sep 6 01:17:38.932663 systemd[1]: Starting iscsiuio.service... Sep 6 01:17:38.960000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:38.951340 systemd[1]: Started iscsiuio.service. Sep 6 01:17:39.005216 kernel: kauditd_printk_skb: 13 callbacks suppressed Sep 6 01:17:39.005240 kernel: audit: type=1130 audit(1757121458.960:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:39.005264 iscsid[854]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Sep 6 01:17:39.005264 iscsid[854]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Sep 6 01:17:39.005264 iscsid[854]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Sep 6 01:17:39.005264 iscsid[854]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Sep 6 01:17:39.005264 iscsid[854]: If using hardware iscsi like qla4xxx this message can be ignored. Sep 6 01:17:39.005264 iscsid[854]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Sep 6 01:17:39.005264 iscsid[854]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Sep 6 01:17:39.143803 kernel: audit: type=1130 audit(1757121459.009:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:39.143832 kernel: audit: type=1130 audit(1757121459.065:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:39.009000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:39.065000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:38.961831 systemd[1]: Starting iscsid.service... Sep 6 01:17:39.004617 systemd[1]: Started iscsid.service. Sep 6 01:17:39.010240 systemd[1]: Starting dracut-initqueue.service... Sep 6 01:17:39.161000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:39.038647 systemd[1]: Finished dracut-initqueue.service. Sep 6 01:17:39.065620 systemd[1]: Reached target remote-fs-pre.target. Sep 6 01:17:39.212765 kernel: audit: type=1130 audit(1757121459.161:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:39.212791 kernel: audit: type=1130 audit(1757121459.192:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:39.192000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:39.101408 systemd[1]: Reached target remote-cryptsetup.target. Sep 6 01:17:39.111756 systemd[1]: Reached target remote-fs.target. Sep 6 01:17:39.133612 systemd[1]: Starting dracut-pre-mount.service... Sep 6 01:17:39.150112 systemd[1]: Finished ignition-setup.service. Sep 6 01:17:39.183562 systemd[1]: Finished dracut-pre-mount.service. Sep 6 01:17:39.213317 systemd[1]: Starting ignition-fetch-offline.service... Sep 6 01:17:39.256144 kernel: mlx5_core 7193:00:02.0 enP29075s1: Link up Sep 6 01:17:39.344154 kernel: hv_netvsc 000d3af9-b6bd-000d-3af9-b6bd000d3af9 eth0: Data path switched to VF: enP29075s1 Sep 6 01:17:39.350138 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 6 01:17:39.350175 systemd-networkd[846]: enP29075s1: Link UP Sep 6 01:17:39.350378 systemd-networkd[846]: eth0: Link UP Sep 6 01:17:39.350751 systemd-networkd[846]: eth0: Gained carrier Sep 6 01:17:39.362644 systemd-networkd[846]: enP29075s1: Gained carrier Sep 6 01:17:39.375199 systemd-networkd[846]: eth0: DHCPv4 address 10.200.20.41/24, gateway 10.200.20.1 acquired from 168.63.129.16 Sep 6 01:17:40.368295 systemd-networkd[846]: eth0: Gained IPv6LL Sep 6 01:17:41.451171 ignition[870]: Ignition 2.14.0 Sep 6 01:17:41.451184 ignition[870]: Stage: fetch-offline Sep 6 01:17:41.451244 ignition[870]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 01:17:41.451268 ignition[870]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 6 01:17:41.539628 ignition[870]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 6 01:17:41.539806 ignition[870]: parsed url from cmdline: "" Sep 6 01:17:41.546478 systemd[1]: Finished ignition-fetch-offline.service. Sep 6 01:17:41.552000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:41.539810 ignition[870]: no config URL provided Sep 6 01:17:41.586111 kernel: audit: type=1130 audit(1757121461.552:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:41.553808 systemd[1]: Starting ignition-fetch.service... Sep 6 01:17:41.539816 ignition[870]: reading system config file "/usr/lib/ignition/user.ign" Sep 6 01:17:41.539825 ignition[870]: no config at "/usr/lib/ignition/user.ign" Sep 6 01:17:41.539830 ignition[870]: failed to fetch config: resource requires networking Sep 6 01:17:41.539945 ignition[870]: Ignition finished successfully Sep 6 01:17:41.571430 ignition[876]: Ignition 2.14.0 Sep 6 01:17:41.571436 ignition[876]: Stage: fetch Sep 6 01:17:41.571591 ignition[876]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 01:17:41.571617 ignition[876]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 6 01:17:41.574483 ignition[876]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 6 01:17:41.574621 ignition[876]: parsed url from cmdline: "" Sep 6 01:17:41.574625 ignition[876]: no config URL provided Sep 6 01:17:41.574630 ignition[876]: reading system config file "/usr/lib/ignition/user.ign" Sep 6 01:17:41.574638 ignition[876]: no config at "/usr/lib/ignition/user.ign" Sep 6 01:17:41.574682 ignition[876]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Sep 6 01:17:41.674092 ignition[876]: GET result: OK Sep 6 01:17:41.674214 ignition[876]: config has been read from IMDS userdata Sep 6 01:17:41.674259 ignition[876]: parsing config with SHA512: 6995ef363d0cf7fba186ac68b3ec72544ffeccb331d606dfe19a2c4cb4dbdbea13a376e365da4e280188b56b7154f30d3561348c6bf70f5b5048e06da868b1b1 Sep 6 01:17:41.678039 unknown[876]: fetched base config from "system" Sep 6 01:17:41.678602 ignition[876]: fetch: fetch complete Sep 6 01:17:41.694000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:41.678047 unknown[876]: fetched base config from "system" Sep 6 01:17:41.727082 kernel: audit: type=1130 audit(1757121461.694:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:41.678607 ignition[876]: fetch: fetch passed Sep 6 01:17:41.678052 unknown[876]: fetched user config from "azure" Sep 6 01:17:41.678653 ignition[876]: Ignition finished successfully Sep 6 01:17:41.684100 systemd[1]: Finished ignition-fetch.service. Sep 6 01:17:41.771887 kernel: audit: type=1130 audit(1757121461.745:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:41.745000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:41.729698 ignition[882]: Ignition 2.14.0 Sep 6 01:17:41.717154 systemd[1]: Starting ignition-kargs.service... Sep 6 01:17:41.729705 ignition[882]: Stage: kargs Sep 6 01:17:41.785000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:41.740315 systemd[1]: Finished ignition-kargs.service. Sep 6 01:17:41.729838 ignition[882]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 01:17:41.825468 kernel: audit: type=1130 audit(1757121461.785:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:41.746949 systemd[1]: Starting ignition-disks.service... Sep 6 01:17:41.729857 ignition[882]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 6 01:17:41.776525 systemd[1]: Finished ignition-disks.service. Sep 6 01:17:41.732803 ignition[882]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 6 01:17:41.808346 systemd[1]: Reached target initrd-root-device.target. Sep 6 01:17:41.735253 ignition[882]: kargs: kargs passed Sep 6 01:17:41.818370 systemd[1]: Reached target local-fs-pre.target. Sep 6 01:17:41.735326 ignition[882]: Ignition finished successfully Sep 6 01:17:41.830408 systemd[1]: Reached target local-fs.target. Sep 6 01:17:41.758037 ignition[888]: Ignition 2.14.0 Sep 6 01:17:41.839991 systemd[1]: Reached target sysinit.target. Sep 6 01:17:41.758044 ignition[888]: Stage: disks Sep 6 01:17:41.849005 systemd[1]: Reached target basic.target. Sep 6 01:17:41.758192 ignition[888]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 01:17:41.861323 systemd[1]: Starting systemd-fsck-root.service... Sep 6 01:17:41.758220 ignition[888]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 6 01:17:41.762065 ignition[888]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 6 01:17:41.773337 ignition[888]: disks: disks passed Sep 6 01:17:41.773411 ignition[888]: Ignition finished successfully Sep 6 01:17:41.971377 systemd-fsck[896]: ROOT: clean, 629/7326000 files, 481083/7359488 blocks Sep 6 01:17:41.980609 systemd[1]: Finished systemd-fsck-root.service. Sep 6 01:17:41.986000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:42.011768 systemd[1]: Mounting sysroot.mount... Sep 6 01:17:42.023091 kernel: audit: type=1130 audit(1757121461.986:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:42.037148 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Sep 6 01:17:42.037812 systemd[1]: Mounted sysroot.mount. Sep 6 01:17:42.042173 systemd[1]: Reached target initrd-root-fs.target. Sep 6 01:17:42.081182 systemd[1]: Mounting sysroot-usr.mount... Sep 6 01:17:42.086453 systemd[1]: Starting flatcar-metadata-hostname.service... Sep 6 01:17:42.100271 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Sep 6 01:17:42.100314 systemd[1]: Reached target ignition-diskful.target. Sep 6 01:17:42.117428 systemd[1]: Mounted sysroot-usr.mount. Sep 6 01:17:42.174275 systemd[1]: Mounting sysroot-usr-share-oem.mount... Sep 6 01:17:42.180176 systemd[1]: Starting initrd-setup-root.service... Sep 6 01:17:42.205653 initrd-setup-root[911]: cut: /sysroot/etc/passwd: No such file or directory Sep 6 01:17:42.219601 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/sda6 scanned by mount (906) Sep 6 01:17:42.219805 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Sep 6 01:17:42.225805 kernel: BTRFS info (device sda6): using free space tree Sep 6 01:17:42.225879 kernel: BTRFS info (device sda6): has skinny extents Sep 6 01:17:42.235873 systemd[1]: Mounted sysroot-usr-share-oem.mount. Sep 6 01:17:42.249899 initrd-setup-root[937]: cut: /sysroot/etc/group: No such file or directory Sep 6 01:17:42.274185 initrd-setup-root[945]: cut: /sysroot/etc/shadow: No such file or directory Sep 6 01:17:42.284437 initrd-setup-root[953]: cut: /sysroot/etc/gshadow: No such file or directory Sep 6 01:17:42.655451 systemd[1]: Finished initrd-setup-root.service. Sep 6 01:17:42.660000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:42.661463 systemd[1]: Starting ignition-mount.service... Sep 6 01:17:42.671164 systemd[1]: Starting sysroot-boot.service... Sep 6 01:17:42.686828 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Sep 6 01:17:42.686963 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Sep 6 01:17:42.704718 systemd[1]: Finished sysroot-boot.service. Sep 6 01:17:42.709000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:42.722235 ignition[975]: INFO : Ignition 2.14.0 Sep 6 01:17:42.727150 ignition[975]: INFO : Stage: mount Sep 6 01:17:42.727150 ignition[975]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 01:17:42.727150 ignition[975]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 6 01:17:42.755214 ignition[975]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 6 01:17:42.755214 ignition[975]: INFO : mount: mount passed Sep 6 01:17:42.755214 ignition[975]: INFO : Ignition finished successfully Sep 6 01:17:42.758000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:42.754169 systemd[1]: Finished ignition-mount.service. Sep 6 01:17:43.160820 coreos-metadata[905]: Sep 06 01:17:43.160 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Sep 6 01:17:43.171765 coreos-metadata[905]: Sep 06 01:17:43.171 INFO Fetch successful Sep 6 01:17:43.205601 coreos-metadata[905]: Sep 06 01:17:43.205 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Sep 6 01:17:43.230035 coreos-metadata[905]: Sep 06 01:17:43.230 INFO Fetch successful Sep 6 01:17:43.244965 coreos-metadata[905]: Sep 06 01:17:43.244 INFO wrote hostname ci-3510.3.8-n-f2ea6194e4 to /sysroot/etc/hostname Sep 6 01:17:43.256239 systemd[1]: Finished flatcar-metadata-hostname.service. Sep 6 01:17:43.262000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:43.263364 systemd[1]: Starting ignition-files.service... Sep 6 01:17:43.281510 systemd[1]: Mounting sysroot-usr-share-oem.mount... Sep 6 01:17:43.312104 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by mount (984) Sep 6 01:17:43.312168 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Sep 6 01:17:43.317870 kernel: BTRFS info (device sda6): using free space tree Sep 6 01:17:43.323378 kernel: BTRFS info (device sda6): has skinny extents Sep 6 01:17:43.328686 systemd[1]: Mounted sysroot-usr-share-oem.mount. Sep 6 01:17:43.347818 ignition[1003]: INFO : Ignition 2.14.0 Sep 6 01:17:43.353151 ignition[1003]: INFO : Stage: files Sep 6 01:17:43.353151 ignition[1003]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 01:17:43.365883 ignition[1003]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 6 01:17:43.365883 ignition[1003]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 6 01:17:43.365883 ignition[1003]: DEBUG : files: compiled without relabeling support, skipping Sep 6 01:17:43.365883 ignition[1003]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Sep 6 01:17:43.365883 ignition[1003]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Sep 6 01:17:43.436245 ignition[1003]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Sep 6 01:17:43.445418 ignition[1003]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Sep 6 01:17:43.445418 ignition[1003]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Sep 6 01:17:43.436905 unknown[1003]: wrote ssh authorized keys file for user: core Sep 6 01:17:43.470190 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Sep 6 01:17:43.470190 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.0-linux-arm64.tar.gz: attempt #1 Sep 6 01:17:43.627650 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Sep 6 01:17:44.035087 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Sep 6 01:17:44.048456 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Sep 6 01:17:44.048456 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Sep 6 01:17:44.048456 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Sep 6 01:17:44.048456 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Sep 6 01:17:44.048456 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 6 01:17:44.048456 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 6 01:17:44.048456 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 6 01:17:44.048456 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 6 01:17:44.048456 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Sep 6 01:17:44.048456 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Sep 6 01:17:44.048456 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Sep 6 01:17:44.048456 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Sep 6 01:17:44.048456 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Sep 6 01:17:44.048456 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(a): oem config not found in "/usr/share/oem", looking on oem partition Sep 6 01:17:44.216477 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2495010626" Sep 6 01:17:44.216477 ignition[1003]: CRITICAL : files: createFilesystemsFiles: createFiles: op(a): op(b): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2495010626": device or resource busy Sep 6 01:17:44.216477 ignition[1003]: ERROR : files: createFilesystemsFiles: createFiles: op(a): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2495010626", trying btrfs: device or resource busy Sep 6 01:17:44.216477 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2495010626" Sep 6 01:17:44.216477 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2495010626" Sep 6 01:17:44.216477 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [started] unmounting "/mnt/oem2495010626" Sep 6 01:17:44.216477 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [finished] unmounting "/mnt/oem2495010626" Sep 6 01:17:44.216477 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Sep 6 01:17:44.216477 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Sep 6 01:17:44.216477 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(e): oem config not found in "/usr/share/oem", looking on oem partition Sep 6 01:17:44.216477 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(f): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3202295143" Sep 6 01:17:44.216477 ignition[1003]: CRITICAL : files: createFilesystemsFiles: createFiles: op(e): op(f): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3202295143": device or resource busy Sep 6 01:17:44.216477 ignition[1003]: ERROR : files: createFilesystemsFiles: createFiles: op(e): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3202295143", trying btrfs: device or resource busy Sep 6 01:17:44.216477 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(10): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3202295143" Sep 6 01:17:44.085080 systemd[1]: mnt-oem2495010626.mount: Deactivated successfully. Sep 6 01:17:44.395713 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(10): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3202295143" Sep 6 01:17:44.395713 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(11): [started] unmounting "/mnt/oem3202295143" Sep 6 01:17:44.395713 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(11): [finished] unmounting "/mnt/oem3202295143" Sep 6 01:17:44.395713 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Sep 6 01:17:44.395713 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(12): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Sep 6 01:17:44.395713 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(12): GET https://extensions.flatcar.org/extensions/kubernetes-v1.32.4-arm64.raw: attempt #1 Sep 6 01:17:44.645241 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(12): GET result: OK Sep 6 01:17:45.000184 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(12): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Sep 6 01:17:45.017050 ignition[1003]: INFO : files: op(13): [started] processing unit "waagent.service" Sep 6 01:17:45.017050 ignition[1003]: INFO : files: op(13): [finished] processing unit "waagent.service" Sep 6 01:17:45.017050 ignition[1003]: INFO : files: op(14): [started] processing unit "nvidia.service" Sep 6 01:17:45.017050 ignition[1003]: INFO : files: op(14): [finished] processing unit "nvidia.service" Sep 6 01:17:45.017050 ignition[1003]: INFO : files: op(15): [started] processing unit "prepare-helm.service" Sep 6 01:17:45.017050 ignition[1003]: INFO : files: op(15): op(16): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 6 01:17:45.017050 ignition[1003]: INFO : files: op(15): op(16): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 6 01:17:45.017050 ignition[1003]: INFO : files: op(15): [finished] processing unit "prepare-helm.service" Sep 6 01:17:45.017050 ignition[1003]: INFO : files: op(17): [started] setting preset to enabled for "waagent.service" Sep 6 01:17:45.017050 ignition[1003]: INFO : files: op(17): [finished] setting preset to enabled for "waagent.service" Sep 6 01:17:45.017050 ignition[1003]: INFO : files: op(18): [started] setting preset to enabled for "nvidia.service" Sep 6 01:17:45.017050 ignition[1003]: INFO : files: op(18): [finished] setting preset to enabled for "nvidia.service" Sep 6 01:17:45.017050 ignition[1003]: INFO : files: op(19): [started] setting preset to enabled for "prepare-helm.service" Sep 6 01:17:45.017050 ignition[1003]: INFO : files: op(19): [finished] setting preset to enabled for "prepare-helm.service" Sep 6 01:17:45.017050 ignition[1003]: INFO : files: createResultFile: createFiles: op(1a): [started] writing file "/sysroot/etc/.ignition-result.json" Sep 6 01:17:45.017050 ignition[1003]: INFO : files: createResultFile: createFiles: op(1a): [finished] writing file "/sysroot/etc/.ignition-result.json" Sep 6 01:17:45.017050 ignition[1003]: INFO : files: files passed Sep 6 01:17:45.017050 ignition[1003]: INFO : Ignition finished successfully Sep 6 01:17:45.409025 kernel: kauditd_printk_skb: 4 callbacks suppressed Sep 6 01:17:45.409055 kernel: audit: type=1130 audit(1757121465.022:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.409071 kernel: audit: type=1130 audit(1757121465.093:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.409082 kernel: audit: type=1130 audit(1757121465.128:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.409092 kernel: audit: type=1131 audit(1757121465.128:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.409101 kernel: audit: type=1130 audit(1757121465.256:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.409111 kernel: audit: type=1131 audit(1757121465.284:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.409122 kernel: audit: type=1130 audit(1757121465.378:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.022000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.093000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.128000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.128000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.256000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.284000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.378000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.016948 systemd[1]: Finished ignition-files.service. Sep 6 01:17:45.039342 systemd[1]: Starting initrd-setup-root-after-ignition.service... Sep 6 01:17:45.064156 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Sep 6 01:17:45.437015 initrd-setup-root-after-ignition[1027]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Sep 6 01:17:45.067017 systemd[1]: Starting ignition-quench.service... Sep 6 01:17:45.080823 systemd[1]: Finished initrd-setup-root-after-ignition.service. Sep 6 01:17:45.094323 systemd[1]: ignition-quench.service: Deactivated successfully. Sep 6 01:17:45.475000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.094407 systemd[1]: Finished ignition-quench.service. Sep 6 01:17:45.128787 systemd[1]: Reached target ignition-complete.target. Sep 6 01:17:45.514525 kernel: audit: type=1131 audit(1757121465.475:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.204573 systemd[1]: Starting initrd-parse-etc.service... Sep 6 01:17:45.244507 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Sep 6 01:17:45.244628 systemd[1]: Finished initrd-parse-etc.service. Sep 6 01:17:45.285079 systemd[1]: Reached target initrd-fs.target. Sep 6 01:17:45.299387 systemd[1]: Reached target initrd.target. Sep 6 01:17:45.334077 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Sep 6 01:17:45.343424 systemd[1]: Starting dracut-pre-pivot.service... Sep 6 01:17:45.372639 systemd[1]: Finished dracut-pre-pivot.service. Sep 6 01:17:45.408456 systemd[1]: Starting initrd-cleanup.service... Sep 6 01:17:45.426989 systemd[1]: Stopped target nss-lookup.target. Sep 6 01:17:45.441564 systemd[1]: Stopped target remote-cryptsetup.target. Sep 6 01:17:45.620000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.455724 systemd[1]: Stopped target timers.target. Sep 6 01:17:45.464676 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Sep 6 01:17:45.464744 systemd[1]: Stopped dracut-pre-pivot.service. Sep 6 01:17:45.689222 kernel: audit: type=1131 audit(1757121465.620:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.689252 kernel: audit: type=1131 audit(1757121465.665:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.665000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.500140 systemd[1]: Stopped target initrd.target. Sep 6 01:17:45.509424 systemd[1]: Stopped target basic.target. Sep 6 01:17:45.691000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.699000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.519084 systemd[1]: Stopped target ignition-complete.target. Sep 6 01:17:45.708000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.529301 systemd[1]: Stopped target ignition-diskful.target. Sep 6 01:17:45.540571 systemd[1]: Stopped target initrd-root-device.target. Sep 6 01:17:45.731000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.739532 iscsid[854]: iscsid shutting down. Sep 6 01:17:45.551140 systemd[1]: Stopped target remote-fs.target. Sep 6 01:17:45.754848 ignition[1042]: INFO : Ignition 2.14.0 Sep 6 01:17:45.754848 ignition[1042]: INFO : Stage: umount Sep 6 01:17:45.754848 ignition[1042]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 01:17:45.754848 ignition[1042]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 6 01:17:45.760000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.772000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.778000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.787000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.787000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.560496 systemd[1]: Stopped target remote-fs-pre.target. Sep 6 01:17:45.816000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.821688 ignition[1042]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 6 01:17:45.821688 ignition[1042]: INFO : umount: umount passed Sep 6 01:17:45.821688 ignition[1042]: INFO : Ignition finished successfully Sep 6 01:17:45.827000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.832000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.844000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.854000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.569907 systemd[1]: Stopped target sysinit.target. Sep 6 01:17:45.582526 systemd[1]: Stopped target local-fs.target. Sep 6 01:17:45.591945 systemd[1]: Stopped target local-fs-pre.target. Sep 6 01:17:45.601958 systemd[1]: Stopped target swap.target. Sep 6 01:17:45.611419 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Sep 6 01:17:45.611488 systemd[1]: Stopped dracut-pre-mount.service. Sep 6 01:17:45.644981 systemd[1]: Stopped target cryptsetup.target. Sep 6 01:17:45.923000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.654036 systemd[1]: dracut-initqueue.service: Deactivated successfully. Sep 6 01:17:45.654095 systemd[1]: Stopped dracut-initqueue.service. Sep 6 01:17:45.943000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.665767 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Sep 6 01:17:45.665811 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Sep 6 01:17:45.691974 systemd[1]: ignition-files.service: Deactivated successfully. Sep 6 01:17:45.692022 systemd[1]: Stopped ignition-files.service. Sep 6 01:17:45.699844 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Sep 6 01:17:45.996000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.699888 systemd[1]: Stopped flatcar-metadata-hostname.service. Sep 6 01:17:45.709346 systemd[1]: Stopping ignition-mount.service... Sep 6 01:17:45.716882 systemd[1]: Stopping iscsid.service... Sep 6 01:17:45.721611 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Sep 6 01:17:46.033000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.721685 systemd[1]: Stopped kmod-static-nodes.service. Sep 6 01:17:46.044000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.732782 systemd[1]: Stopping sysroot-boot.service... Sep 6 01:17:46.052000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.752248 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Sep 6 01:17:45.752342 systemd[1]: Stopped systemd-udev-trigger.service. Sep 6 01:17:46.077000 audit: BPF prog-id=6 op=UNLOAD Sep 6 01:17:45.760476 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Sep 6 01:17:46.081000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.760563 systemd[1]: Stopped dracut-pre-trigger.service. Sep 6 01:17:46.091000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.773647 systemd[1]: sysroot-boot.mount: Deactivated successfully. Sep 6 01:17:46.100000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.774263 systemd[1]: iscsid.service: Deactivated successfully. Sep 6 01:17:45.774360 systemd[1]: Stopped iscsid.service. Sep 6 01:17:46.124000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.779308 systemd[1]: initrd-cleanup.service: Deactivated successfully. Sep 6 01:17:46.132000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.779389 systemd[1]: Finished initrd-cleanup.service. Sep 6 01:17:46.142000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.788124 systemd[1]: ignition-mount.service: Deactivated successfully. Sep 6 01:17:46.150000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.788217 systemd[1]: Stopped ignition-mount.service. Sep 6 01:17:46.166000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.816951 systemd[1]: ignition-disks.service: Deactivated successfully. Sep 6 01:17:46.177000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:46.177000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:45.817012 systemd[1]: Stopped ignition-disks.service. Sep 6 01:17:45.827305 systemd[1]: ignition-kargs.service: Deactivated successfully. Sep 6 01:17:45.827359 systemd[1]: Stopped ignition-kargs.service. Sep 6 01:17:45.832590 systemd[1]: ignition-fetch.service: Deactivated successfully. Sep 6 01:17:46.214454 kernel: hv_netvsc 000d3af9-b6bd-000d-3af9-b6bd000d3af9 eth0: Data path switched from VF: enP29075s1 Sep 6 01:17:45.832630 systemd[1]: Stopped ignition-fetch.service. Sep 6 01:17:45.844617 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Sep 6 01:17:45.844663 systemd[1]: Stopped ignition-fetch-offline.service. Sep 6 01:17:45.855155 systemd[1]: Stopped target paths.target. Sep 6 01:17:45.866046 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Sep 6 01:17:45.876650 systemd[1]: Stopped systemd-ask-password-console.path. Sep 6 01:17:45.884182 systemd[1]: Stopped target slices.target. Sep 6 01:17:45.894359 systemd[1]: Stopped target sockets.target. Sep 6 01:17:45.903697 systemd[1]: iscsid.socket: Deactivated successfully. Sep 6 01:17:45.903744 systemd[1]: Closed iscsid.socket. Sep 6 01:17:45.913809 systemd[1]: ignition-setup.service: Deactivated successfully. Sep 6 01:17:45.913855 systemd[1]: Stopped ignition-setup.service. Sep 6 01:17:45.925160 systemd[1]: Stopping iscsiuio.service... Sep 6 01:17:45.933581 systemd[1]: iscsiuio.service: Deactivated successfully. Sep 6 01:17:45.933674 systemd[1]: Stopped iscsiuio.service. Sep 6 01:17:45.944166 systemd[1]: Stopped target network.target. Sep 6 01:17:45.953022 systemd[1]: iscsiuio.socket: Deactivated successfully. Sep 6 01:17:45.953059 systemd[1]: Closed iscsiuio.socket. Sep 6 01:17:45.964890 systemd[1]: Stopping systemd-networkd.service... Sep 6 01:17:45.974246 systemd-networkd[846]: eth0: DHCPv6 lease lost Sep 6 01:17:46.308000 audit: BPF prog-id=9 op=UNLOAD Sep 6 01:17:45.975719 systemd[1]: Stopping systemd-resolved.service... Sep 6 01:17:45.986440 systemd[1]: systemd-networkd.service: Deactivated successfully. Sep 6 01:17:45.986570 systemd[1]: Stopped systemd-networkd.service. Sep 6 01:17:45.996881 systemd[1]: systemd-networkd.socket: Deactivated successfully. Sep 6 01:17:45.996920 systemd[1]: Closed systemd-networkd.socket. Sep 6 01:17:46.009287 systemd[1]: Stopping network-cleanup.service... Sep 6 01:17:46.023888 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Sep 6 01:17:46.023970 systemd[1]: Stopped parse-ip-for-networkd.service. Sep 6 01:17:46.355000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:46.033287 systemd[1]: systemd-sysctl.service: Deactivated successfully. Sep 6 01:17:46.033349 systemd[1]: Stopped systemd-sysctl.service. Sep 6 01:17:46.048205 systemd[1]: systemd-modules-load.service: Deactivated successfully. Sep 6 01:17:46.048256 systemd[1]: Stopped systemd-modules-load.service. Sep 6 01:17:46.053272 systemd[1]: Stopping systemd-udevd.service... Sep 6 01:17:46.066593 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Sep 6 01:17:46.067191 systemd[1]: systemd-resolved.service: Deactivated successfully. Sep 6 01:17:46.067330 systemd[1]: Stopped systemd-resolved.service. Sep 6 01:17:46.082279 systemd[1]: systemd-udevd.service: Deactivated successfully. Sep 6 01:17:46.429716 systemd-journald[276]: Received SIGTERM from PID 1 (systemd). Sep 6 01:17:46.082424 systemd[1]: Stopped systemd-udevd.service. Sep 6 01:17:46.091975 systemd[1]: sysroot-boot.service: Deactivated successfully. Sep 6 01:17:46.092092 systemd[1]: Stopped sysroot-boot.service. Sep 6 01:17:46.101468 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Sep 6 01:17:46.101523 systemd[1]: Closed systemd-udevd-control.socket. Sep 6 01:17:46.110017 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Sep 6 01:17:46.110052 systemd[1]: Closed systemd-udevd-kernel.socket. Sep 6 01:17:46.114983 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Sep 6 01:17:46.115048 systemd[1]: Stopped dracut-pre-udev.service. Sep 6 01:17:46.124958 systemd[1]: dracut-cmdline.service: Deactivated successfully. Sep 6 01:17:46.125012 systemd[1]: Stopped dracut-cmdline.service. Sep 6 01:17:46.132812 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Sep 6 01:17:46.132864 systemd[1]: Stopped dracut-cmdline-ask.service. Sep 6 01:17:46.142262 systemd[1]: initrd-setup-root.service: Deactivated successfully. Sep 6 01:17:46.142312 systemd[1]: Stopped initrd-setup-root.service. Sep 6 01:17:46.151651 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Sep 6 01:17:46.161569 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Sep 6 01:17:46.161636 systemd[1]: Stopped systemd-vconsole-setup.service. Sep 6 01:17:46.170376 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Sep 6 01:17:46.170492 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Sep 6 01:17:46.350970 systemd[1]: network-cleanup.service: Deactivated successfully. Sep 6 01:17:46.351079 systemd[1]: Stopped network-cleanup.service. Sep 6 01:17:46.356261 systemd[1]: Reached target initrd-switch-root.target. Sep 6 01:17:46.367627 systemd[1]: Starting initrd-switch-root.service... Sep 6 01:17:46.385888 systemd[1]: Switching root. Sep 6 01:17:46.430405 systemd-journald[276]: Journal stopped Sep 6 01:17:56.556461 kernel: mlx5_core 7193:00:02.0: poll_health:739:(pid 0): device's health compromised - reached miss count Sep 6 01:17:56.556487 kernel: SELinux: Class mctp_socket not defined in policy. Sep 6 01:17:56.556504 kernel: SELinux: Class anon_inode not defined in policy. Sep 6 01:17:56.556513 kernel: SELinux: the above unknown classes and permissions will be allowed Sep 6 01:17:56.556522 kernel: SELinux: policy capability network_peer_controls=1 Sep 6 01:17:56.556530 kernel: SELinux: policy capability open_perms=1 Sep 6 01:17:56.556539 kernel: SELinux: policy capability extended_socket_class=1 Sep 6 01:17:56.556548 kernel: SELinux: policy capability always_check_network=0 Sep 6 01:17:56.556556 kernel: SELinux: policy capability cgroup_seclabel=1 Sep 6 01:17:56.556566 kernel: SELinux: policy capability nnp_nosuid_transition=1 Sep 6 01:17:56.556575 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Sep 6 01:17:56.556583 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Sep 6 01:17:56.556592 systemd[1]: Successfully loaded SELinux policy in 266.533ms. Sep 6 01:17:56.556603 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 22.194ms. Sep 6 01:17:56.556616 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 6 01:17:56.556626 systemd[1]: Detected virtualization microsoft. Sep 6 01:17:56.556635 systemd[1]: Detected architecture arm64. Sep 6 01:17:56.556644 systemd[1]: Detected first boot. Sep 6 01:17:56.556654 systemd[1]: Hostname set to . Sep 6 01:17:56.556663 systemd[1]: Initializing machine ID from random generator. Sep 6 01:17:56.556673 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Sep 6 01:17:56.556682 kernel: kauditd_printk_skb: 40 callbacks suppressed Sep 6 01:17:56.556693 kernel: audit: type=1400 audit(1757121470.359:88): avc: denied { associate } for pid=1075 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Sep 6 01:17:56.556704 kernel: audit: type=1300 audit(1757121470.359:88): arch=c00000b7 syscall=5 success=yes exit=0 a0=400002226c a1=4000028360 a2=40000267c0 a3=32 items=0 ppid=1058 pid=1075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:17:56.556714 kernel: audit: type=1327 audit(1757121470.359:88): proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 6 01:17:56.556724 kernel: audit: type=1400 audit(1757121470.368:89): avc: denied { associate } for pid=1075 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Sep 6 01:17:56.556734 kernel: audit: type=1300 audit(1757121470.368:89): arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=4000022349 a2=1ed a3=0 items=2 ppid=1058 pid=1075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:17:56.556744 kernel: audit: type=1307 audit(1757121470.368:89): cwd="/" Sep 6 01:17:56.556754 kernel: audit: type=1302 audit(1757121470.368:89): item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:17:56.556763 kernel: audit: type=1302 audit(1757121470.368:89): item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:17:56.556773 kernel: audit: type=1327 audit(1757121470.368:89): proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 6 01:17:56.556782 systemd[1]: Populated /etc with preset unit settings. Sep 6 01:17:56.556792 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 6 01:17:56.556803 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 6 01:17:56.556814 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 6 01:17:56.556824 systemd[1]: initrd-switch-root.service: Deactivated successfully. Sep 6 01:17:56.556833 kernel: audit: type=1334 audit(1757121475.721:90): prog-id=12 op=LOAD Sep 6 01:17:56.556842 systemd[1]: Stopped initrd-switch-root.service. Sep 6 01:17:56.556852 kernel: audit: type=1334 audit(1757121475.721:91): prog-id=3 op=UNLOAD Sep 6 01:17:56.556861 kernel: audit: type=1334 audit(1757121475.721:92): prog-id=13 op=LOAD Sep 6 01:17:56.556872 kernel: audit: type=1334 audit(1757121475.721:93): prog-id=14 op=LOAD Sep 6 01:17:56.556882 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Sep 6 01:17:56.556892 kernel: audit: type=1334 audit(1757121475.721:94): prog-id=4 op=UNLOAD Sep 6 01:17:56.556902 systemd[1]: Created slice system-addon\x2dconfig.slice. Sep 6 01:17:56.556913 kernel: audit: type=1334 audit(1757121475.721:95): prog-id=5 op=UNLOAD Sep 6 01:17:56.556922 kernel: audit: type=1334 audit(1757121475.722:96): prog-id=15 op=LOAD Sep 6 01:17:56.556931 kernel: audit: type=1334 audit(1757121475.722:97): prog-id=12 op=UNLOAD Sep 6 01:17:56.556940 kernel: audit: type=1334 audit(1757121475.722:98): prog-id=16 op=LOAD Sep 6 01:17:56.556950 kernel: audit: type=1334 audit(1757121475.722:99): prog-id=17 op=LOAD Sep 6 01:17:56.556960 systemd[1]: Created slice system-addon\x2drun.slice. Sep 6 01:17:56.556970 systemd[1]: Created slice system-getty.slice. Sep 6 01:17:56.556980 systemd[1]: Created slice system-modprobe.slice. Sep 6 01:17:56.556990 systemd[1]: Created slice system-serial\x2dgetty.slice. Sep 6 01:17:56.557000 systemd[1]: Created slice system-system\x2dcloudinit.slice. Sep 6 01:17:56.557009 systemd[1]: Created slice system-systemd\x2dfsck.slice. Sep 6 01:17:56.557019 systemd[1]: Created slice user.slice. Sep 6 01:17:56.557029 systemd[1]: Started systemd-ask-password-console.path. Sep 6 01:17:56.557039 systemd[1]: Started systemd-ask-password-wall.path. Sep 6 01:17:56.557049 systemd[1]: Set up automount boot.automount. Sep 6 01:17:56.557059 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Sep 6 01:17:56.557068 systemd[1]: Stopped target initrd-switch-root.target. Sep 6 01:17:56.557078 systemd[1]: Stopped target initrd-fs.target. Sep 6 01:17:56.557087 systemd[1]: Stopped target initrd-root-fs.target. Sep 6 01:17:56.557097 systemd[1]: Reached target integritysetup.target. Sep 6 01:17:56.557107 systemd[1]: Reached target remote-cryptsetup.target. Sep 6 01:17:56.557120 systemd[1]: Reached target remote-fs.target. Sep 6 01:17:56.557161 systemd[1]: Reached target slices.target. Sep 6 01:17:56.557173 systemd[1]: Reached target swap.target. Sep 6 01:17:56.557183 systemd[1]: Reached target torcx.target. Sep 6 01:17:56.557192 systemd[1]: Reached target veritysetup.target. Sep 6 01:17:56.557202 systemd[1]: Listening on systemd-coredump.socket. Sep 6 01:17:56.557212 systemd[1]: Listening on systemd-initctl.socket. Sep 6 01:17:56.557222 systemd[1]: Listening on systemd-networkd.socket. Sep 6 01:17:56.557234 systemd[1]: Listening on systemd-udevd-control.socket. Sep 6 01:17:56.557245 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 6 01:17:56.557255 systemd[1]: Listening on systemd-userdbd.socket. Sep 6 01:17:56.557265 systemd[1]: Mounting dev-hugepages.mount... Sep 6 01:17:56.557275 systemd[1]: Mounting dev-mqueue.mount... Sep 6 01:17:56.557284 systemd[1]: Mounting media.mount... Sep 6 01:17:56.557296 systemd[1]: Mounting sys-kernel-debug.mount... Sep 6 01:17:56.557306 systemd[1]: Mounting sys-kernel-tracing.mount... Sep 6 01:17:56.557315 systemd[1]: Mounting tmp.mount... Sep 6 01:17:56.557325 systemd[1]: Starting flatcar-tmpfiles.service... Sep 6 01:17:56.557335 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 01:17:56.557345 systemd[1]: Starting kmod-static-nodes.service... Sep 6 01:17:56.557356 systemd[1]: Starting modprobe@configfs.service... Sep 6 01:17:56.557371 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 01:17:56.557381 systemd[1]: Starting modprobe@drm.service... Sep 6 01:17:56.557393 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 01:17:56.557403 systemd[1]: Starting modprobe@fuse.service... Sep 6 01:17:56.557412 systemd[1]: Starting modprobe@loop.service... Sep 6 01:17:56.557423 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Sep 6 01:17:56.557433 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Sep 6 01:17:56.557443 systemd[1]: Stopped systemd-fsck-root.service. Sep 6 01:17:56.557453 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Sep 6 01:17:56.557462 systemd[1]: Stopped systemd-fsck-usr.service. Sep 6 01:17:56.557473 kernel: fuse: init (API version 7.34) Sep 6 01:17:56.557482 systemd[1]: Stopped systemd-journald.service. Sep 6 01:17:56.557492 kernel: loop: module loaded Sep 6 01:17:56.557501 systemd[1]: systemd-journald.service: Consumed 3.421s CPU time. Sep 6 01:17:56.557512 systemd[1]: Starting systemd-journald.service... Sep 6 01:17:56.557521 systemd[1]: Starting systemd-modules-load.service... Sep 6 01:17:56.557531 systemd[1]: Starting systemd-network-generator.service... Sep 6 01:17:56.557541 systemd[1]: Starting systemd-remount-fs.service... Sep 6 01:17:56.557551 systemd[1]: Starting systemd-udev-trigger.service... Sep 6 01:17:56.557562 systemd[1]: verity-setup.service: Deactivated successfully. Sep 6 01:17:56.557572 systemd[1]: Stopped verity-setup.service. Sep 6 01:17:56.557584 systemd[1]: Mounted dev-hugepages.mount. Sep 6 01:17:56.557594 systemd[1]: Mounted dev-mqueue.mount. Sep 6 01:17:56.557603 systemd[1]: Mounted media.mount. Sep 6 01:17:56.557613 systemd[1]: Mounted sys-kernel-debug.mount. Sep 6 01:17:56.557627 systemd-journald[1181]: Journal started Sep 6 01:17:56.557673 systemd-journald[1181]: Runtime Journal (/run/log/journal/01686103275f4019925b0f83112dc49b) is 8.0M, max 78.5M, 70.5M free. Sep 6 01:17:48.351000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Sep 6 01:17:49.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 6 01:17:49.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 6 01:17:49.177000 audit: BPF prog-id=10 op=LOAD Sep 6 01:17:49.177000 audit: BPF prog-id=10 op=UNLOAD Sep 6 01:17:49.177000 audit: BPF prog-id=11 op=LOAD Sep 6 01:17:49.177000 audit: BPF prog-id=11 op=UNLOAD Sep 6 01:17:50.359000 audit[1075]: AVC avc: denied { associate } for pid=1075 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Sep 6 01:17:50.359000 audit[1075]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=400002226c a1=4000028360 a2=40000267c0 a3=32 items=0 ppid=1058 pid=1075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:17:50.359000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 6 01:17:50.368000 audit[1075]: AVC avc: denied { associate } for pid=1075 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Sep 6 01:17:50.368000 audit[1075]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=4000022349 a2=1ed a3=0 items=2 ppid=1058 pid=1075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:17:50.368000 audit: CWD cwd="/" Sep 6 01:17:50.368000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:17:50.368000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:17:50.368000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 6 01:17:55.721000 audit: BPF prog-id=12 op=LOAD Sep 6 01:17:55.721000 audit: BPF prog-id=3 op=UNLOAD Sep 6 01:17:55.721000 audit: BPF prog-id=13 op=LOAD Sep 6 01:17:55.721000 audit: BPF prog-id=14 op=LOAD Sep 6 01:17:55.721000 audit: BPF prog-id=4 op=UNLOAD Sep 6 01:17:55.721000 audit: BPF prog-id=5 op=UNLOAD Sep 6 01:17:55.722000 audit: BPF prog-id=15 op=LOAD Sep 6 01:17:55.722000 audit: BPF prog-id=12 op=UNLOAD Sep 6 01:17:55.722000 audit: BPF prog-id=16 op=LOAD Sep 6 01:17:55.722000 audit: BPF prog-id=17 op=LOAD Sep 6 01:17:55.722000 audit: BPF prog-id=13 op=UNLOAD Sep 6 01:17:55.722000 audit: BPF prog-id=14 op=UNLOAD Sep 6 01:17:55.722000 audit: BPF prog-id=18 op=LOAD Sep 6 01:17:55.722000 audit: BPF prog-id=15 op=UNLOAD Sep 6 01:17:55.722000 audit: BPF prog-id=19 op=LOAD Sep 6 01:17:55.722000 audit: BPF prog-id=20 op=LOAD Sep 6 01:17:55.722000 audit: BPF prog-id=16 op=UNLOAD Sep 6 01:17:55.722000 audit: BPF prog-id=17 op=UNLOAD Sep 6 01:17:55.723000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:55.747000 audit: BPF prog-id=18 op=UNLOAD Sep 6 01:17:55.769000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:55.769000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:56.380000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:56.403000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:56.416000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:56.416000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:56.424000 audit: BPF prog-id=21 op=LOAD Sep 6 01:17:56.424000 audit: BPF prog-id=22 op=LOAD Sep 6 01:17:56.424000 audit: BPF prog-id=23 op=LOAD Sep 6 01:17:56.424000 audit: BPF prog-id=19 op=UNLOAD Sep 6 01:17:56.424000 audit: BPF prog-id=20 op=UNLOAD Sep 6 01:17:56.524000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:56.552000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Sep 6 01:17:56.552000 audit[1181]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=6 a1=ffffe5de20a0 a2=4000 a3=1 items=0 ppid=1 pid=1181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:17:56.552000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Sep 6 01:17:55.719812 systemd[1]: Queued start job for default target multi-user.target. Sep 6 01:17:50.313292 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2025-09-06T01:17:50Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 6 01:17:55.719825 systemd[1]: Unnecessary job was removed for dev-sda6.device. Sep 6 01:17:50.313625 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2025-09-06T01:17:50Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 6 01:17:55.723340 systemd[1]: systemd-journald.service: Deactivated successfully. Sep 6 01:17:50.313643 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2025-09-06T01:17:50Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 6 01:17:55.723682 systemd[1]: systemd-journald.service: Consumed 3.421s CPU time. Sep 6 01:17:50.313679 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2025-09-06T01:17:50Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Sep 6 01:17:50.313689 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2025-09-06T01:17:50Z" level=debug msg="skipped missing lower profile" missing profile=oem Sep 6 01:17:50.313719 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2025-09-06T01:17:50Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Sep 6 01:17:50.313731 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2025-09-06T01:17:50Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Sep 6 01:17:50.313930 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2025-09-06T01:17:50Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Sep 6 01:17:50.313964 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2025-09-06T01:17:50Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 6 01:17:50.313976 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2025-09-06T01:17:50Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 6 01:17:50.342254 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2025-09-06T01:17:50Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Sep 6 01:17:50.342310 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2025-09-06T01:17:50Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Sep 6 01:17:50.342342 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2025-09-06T01:17:50Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Sep 6 01:17:50.342357 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2025-09-06T01:17:50Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Sep 6 01:17:50.342379 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2025-09-06T01:17:50Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Sep 6 01:17:50.342392 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2025-09-06T01:17:50Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Sep 6 01:17:54.862470 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2025-09-06T01:17:54Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 6 01:17:54.862731 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2025-09-06T01:17:54Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 6 01:17:54.862830 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2025-09-06T01:17:54Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 6 01:17:54.862995 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2025-09-06T01:17:54Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 6 01:17:54.863046 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2025-09-06T01:17:54Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Sep 6 01:17:54.863103 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2025-09-06T01:17:54Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Sep 6 01:17:56.577792 systemd[1]: Started systemd-journald.service. Sep 6 01:17:56.577000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:56.578623 systemd[1]: Mounted sys-kernel-tracing.mount. Sep 6 01:17:56.584090 systemd[1]: Mounted tmp.mount. Sep 6 01:17:56.588574 systemd[1]: Finished flatcar-tmpfiles.service. Sep 6 01:17:56.594000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:56.594667 systemd[1]: Finished kmod-static-nodes.service. Sep 6 01:17:56.600000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:56.600447 systemd[1]: modprobe@configfs.service: Deactivated successfully. Sep 6 01:17:56.600577 systemd[1]: Finished modprobe@configfs.service. Sep 6 01:17:56.605000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:56.605000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:56.606395 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 01:17:56.606522 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 01:17:56.612000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:56.612000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:56.612901 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 6 01:17:56.613024 systemd[1]: Finished modprobe@drm.service. Sep 6 01:17:56.618000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:56.618000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:56.618643 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 01:17:56.618767 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 01:17:56.624000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:56.624000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:56.624852 systemd[1]: modprobe@fuse.service: Deactivated successfully. Sep 6 01:17:56.624989 systemd[1]: Finished modprobe@fuse.service. Sep 6 01:17:56.630000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:56.630000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:56.630529 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 01:17:56.630655 systemd[1]: Finished modprobe@loop.service. Sep 6 01:17:56.635000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:56.635000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:56.636457 systemd[1]: Finished systemd-modules-load.service. Sep 6 01:17:56.642000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:56.643248 systemd[1]: Finished systemd-network-generator.service. Sep 6 01:17:56.649000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:56.649633 systemd[1]: Finished systemd-remount-fs.service. Sep 6 01:17:56.655000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:56.656023 systemd[1]: Reached target network-pre.target. Sep 6 01:17:56.662653 systemd[1]: Mounting sys-fs-fuse-connections.mount... Sep 6 01:17:56.669334 systemd[1]: Mounting sys-kernel-config.mount... Sep 6 01:17:56.674208 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Sep 6 01:17:56.675816 systemd[1]: Starting systemd-hwdb-update.service... Sep 6 01:17:56.681781 systemd[1]: Starting systemd-journal-flush.service... Sep 6 01:17:56.687446 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 6 01:17:56.688815 systemd[1]: Starting systemd-random-seed.service... Sep 6 01:17:56.693857 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 6 01:17:56.695096 systemd[1]: Starting systemd-sysctl.service... Sep 6 01:17:56.700700 systemd[1]: Starting systemd-sysusers.service... Sep 6 01:17:56.707606 systemd[1]: Finished systemd-udev-trigger.service. Sep 6 01:17:56.712000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:56.713177 systemd[1]: Mounted sys-fs-fuse-connections.mount. Sep 6 01:17:56.719015 systemd[1]: Mounted sys-kernel-config.mount. Sep 6 01:17:56.725752 systemd[1]: Starting systemd-udev-settle.service... Sep 6 01:17:56.739322 udevadm[1195]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Sep 6 01:17:56.744410 systemd[1]: Finished systemd-random-seed.service. Sep 6 01:17:56.750000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:56.750598 systemd[1]: Reached target first-boot-complete.target. Sep 6 01:17:56.750900 systemd-journald[1181]: Time spent on flushing to /var/log/journal/01686103275f4019925b0f83112dc49b is 19.864ms for 1108 entries. Sep 6 01:17:56.750900 systemd-journald[1181]: System Journal (/var/log/journal/01686103275f4019925b0f83112dc49b) is 8.0M, max 2.6G, 2.6G free. Sep 6 01:17:56.825401 systemd-journald[1181]: Received client request to flush runtime journal. Sep 6 01:17:56.810000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:56.805490 systemd[1]: Finished systemd-sysctl.service. Sep 6 01:17:56.826411 systemd[1]: Finished systemd-journal-flush.service. Sep 6 01:17:56.832000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:57.245227 systemd[1]: Finished systemd-sysusers.service. Sep 6 01:17:57.250000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:57.644794 systemd[1]: Finished systemd-hwdb-update.service. Sep 6 01:17:57.649000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:57.650000 audit: BPF prog-id=24 op=LOAD Sep 6 01:17:57.650000 audit: BPF prog-id=25 op=LOAD Sep 6 01:17:57.650000 audit: BPF prog-id=7 op=UNLOAD Sep 6 01:17:57.650000 audit: BPF prog-id=8 op=UNLOAD Sep 6 01:17:57.651093 systemd[1]: Starting systemd-udevd.service... Sep 6 01:17:57.668513 systemd-udevd[1198]: Using default interface naming scheme 'v252'. Sep 6 01:17:57.817871 systemd[1]: Started systemd-udevd.service. Sep 6 01:17:57.828000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:57.829000 audit: BPF prog-id=26 op=LOAD Sep 6 01:17:57.830457 systemd[1]: Starting systemd-networkd.service... Sep 6 01:17:57.873733 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Sep 6 01:17:57.898000 audit: BPF prog-id=27 op=LOAD Sep 6 01:17:57.898000 audit: BPF prog-id=28 op=LOAD Sep 6 01:17:57.898000 audit: BPF prog-id=29 op=LOAD Sep 6 01:17:57.899720 systemd[1]: Starting systemd-userdbd.service... Sep 6 01:17:57.915357 kernel: mousedev: PS/2 mouse device common for all mice Sep 6 01:17:57.968000 audit[1203]: AVC avc: denied { confidentiality } for pid=1203 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Sep 6 01:17:57.980576 kernel: hv_vmbus: registering driver hv_balloon Sep 6 01:17:57.980823 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Sep 6 01:17:57.980841 kernel: hv_balloon: Memory hot add disabled on ARM64 Sep 6 01:17:57.991291 systemd[1]: Started systemd-userdbd.service. Sep 6 01:17:57.996000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:57.997150 kernel: hv_vmbus: registering driver hyperv_fb Sep 6 01:17:58.008571 kernel: hv_utils: Registering HyperV Utility Driver Sep 6 01:17:58.013461 kernel: hv_vmbus: registering driver hv_utils Sep 6 01:17:58.013545 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Sep 6 01:17:58.026567 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Sep 6 01:17:58.026651 kernel: hv_utils: Heartbeat IC version 3.0 Sep 6 01:17:58.033150 kernel: hv_utils: Shutdown IC version 3.2 Sep 6 01:17:58.040442 kernel: Console: switching to colour dummy device 80x25 Sep 6 01:17:57.634937 kernel: hv_utils: TimeSync IC version 4.0 Sep 6 01:17:57.684446 systemd-journald[1181]: Time jumped backwards, rotating. Sep 6 01:17:57.684854 kernel: Console: switching to colour frame buffer device 128x48 Sep 6 01:17:57.968000 audit[1203]: SYSCALL arch=c00000b7 syscall=105 success=yes exit=0 a0=aaaae147f2b0 a1=aa2c a2=ffffb84524b0 a3=aaaae13e0010 items=12 ppid=1198 pid=1203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:17:57.968000 audit: CWD cwd="/" Sep 6 01:17:57.968000 audit: PATH item=0 name=(null) inode=7267 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:17:57.968000 audit: PATH item=1 name=(null) inode=10937 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:17:57.968000 audit: PATH item=2 name=(null) inode=10937 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:17:57.968000 audit: PATH item=3 name=(null) inode=10938 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:17:57.968000 audit: PATH item=4 name=(null) inode=10937 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:17:57.968000 audit: PATH item=5 name=(null) inode=10939 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:17:57.968000 audit: PATH item=6 name=(null) inode=10937 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:17:57.968000 audit: PATH item=7 name=(null) inode=10940 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:17:57.968000 audit: PATH item=8 name=(null) inode=10937 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:17:57.968000 audit: PATH item=9 name=(null) inode=10941 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:17:57.968000 audit: PATH item=10 name=(null) inode=10937 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:17:57.968000 audit: PATH item=11 name=(null) inode=10942 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:17:57.968000 audit: PROCTITLE proctitle="(udev-worker)" Sep 6 01:17:57.848501 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 6 01:17:57.854603 systemd[1]: Finished systemd-udev-settle.service. Sep 6 01:17:57.857000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:57.862485 systemd[1]: Starting lvm2-activation-early.service... Sep 6 01:17:57.874891 systemd-networkd[1219]: lo: Link UP Sep 6 01:17:57.874902 systemd-networkd[1219]: lo: Gained carrier Sep 6 01:17:57.875348 systemd-networkd[1219]: Enumeration completed Sep 6 01:17:57.875471 systemd[1]: Started systemd-networkd.service. Sep 6 01:17:57.878000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:57.881648 systemd[1]: Starting systemd-networkd-wait-online.service... Sep 6 01:17:57.902869 systemd-networkd[1219]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 6 01:17:57.956767 kernel: mlx5_core 7193:00:02.0 enP29075s1: Link up Sep 6 01:17:58.000817 kernel: hv_netvsc 000d3af9-b6bd-000d-3af9-b6bd000d3af9 eth0: Data path switched to VF: enP29075s1 Sep 6 01:17:58.002007 systemd-networkd[1219]: enP29075s1: Link UP Sep 6 01:17:58.002150 systemd-networkd[1219]: eth0: Link UP Sep 6 01:17:58.002158 systemd-networkd[1219]: eth0: Gained carrier Sep 6 01:17:58.009048 systemd-networkd[1219]: enP29075s1: Gained carrier Sep 6 01:17:58.018866 systemd-networkd[1219]: eth0: DHCPv4 address 10.200.20.41/24, gateway 10.200.20.1 acquired from 168.63.129.16 Sep 6 01:17:58.165379 lvm[1277]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 6 01:17:58.204775 systemd[1]: Finished lvm2-activation-early.service. Sep 6 01:17:58.208000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:58.210428 systemd[1]: Reached target cryptsetup.target. Sep 6 01:17:58.217345 systemd[1]: Starting lvm2-activation.service... Sep 6 01:17:58.221426 lvm[1279]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 6 01:17:58.244699 systemd[1]: Finished lvm2-activation.service. Sep 6 01:17:58.248000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:58.250277 systemd[1]: Reached target local-fs-pre.target. Sep 6 01:17:58.255661 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Sep 6 01:17:58.255691 systemd[1]: Reached target local-fs.target. Sep 6 01:17:58.260729 systemd[1]: Reached target machines.target. Sep 6 01:17:58.267678 systemd[1]: Starting ldconfig.service... Sep 6 01:17:58.272438 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 01:17:58.272521 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 01:17:58.273894 systemd[1]: Starting systemd-boot-update.service... Sep 6 01:17:58.280271 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Sep 6 01:17:58.287934 systemd[1]: Starting systemd-machine-id-commit.service... Sep 6 01:17:58.294627 systemd[1]: Starting systemd-sysext.service... Sep 6 01:17:58.323334 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1281 (bootctl) Sep 6 01:17:58.324739 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Sep 6 01:17:58.486162 systemd[1]: Unmounting usr-share-oem.mount... Sep 6 01:17:58.627096 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Sep 6 01:17:58.633000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:58.641941 systemd[1]: usr-share-oem.mount: Deactivated successfully. Sep 6 01:17:58.642157 systemd[1]: Unmounted usr-share-oem.mount. Sep 6 01:17:58.690770 kernel: loop0: detected capacity change from 0 to 207008 Sep 6 01:17:58.694050 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Sep 6 01:17:58.694649 systemd[1]: Finished systemd-machine-id-commit.service. Sep 6 01:17:58.698000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:58.745783 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Sep 6 01:17:58.765762 kernel: loop1: detected capacity change from 0 to 207008 Sep 6 01:17:58.770928 (sd-sysext)[1293]: Using extensions 'kubernetes'. Sep 6 01:17:58.771586 (sd-sysext)[1293]: Merged extensions into '/usr'. Sep 6 01:17:58.790428 systemd[1]: Mounting usr-share-oem.mount... Sep 6 01:17:58.795091 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 01:17:58.796690 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 01:17:58.802307 systemd-fsck[1289]: fsck.fat 4.2 (2021-01-31) Sep 6 01:17:58.802307 systemd-fsck[1289]: /dev/sda1: 236 files, 117310/258078 clusters Sep 6 01:17:58.805393 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 01:17:58.813282 systemd[1]: Starting modprobe@loop.service... Sep 6 01:17:58.818792 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 01:17:58.818936 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 01:17:58.821573 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Sep 6 01:17:58.827000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:58.828807 systemd[1]: Mounted usr-share-oem.mount. Sep 6 01:17:58.834306 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 01:17:58.834456 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 01:17:58.838000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:58.838000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:58.840115 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 01:17:58.840243 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 01:17:58.844000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:58.844000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:58.846324 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 01:17:58.846446 systemd[1]: Finished modprobe@loop.service. Sep 6 01:17:58.850000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:58.850000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:58.853958 systemd[1]: Finished systemd-sysext.service. Sep 6 01:17:58.857000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:58.861551 systemd[1]: Mounting boot.mount... Sep 6 01:17:58.867170 systemd[1]: Starting ensure-sysext.service... Sep 6 01:17:58.872239 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 6 01:17:58.872312 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 6 01:17:58.873548 systemd[1]: Starting systemd-tmpfiles-setup.service... Sep 6 01:17:58.882195 systemd[1]: Mounted boot.mount. Sep 6 01:17:58.891381 systemd[1]: Reloading. Sep 6 01:17:58.946400 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2025-09-06T01:17:58Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 6 01:17:58.946727 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2025-09-06T01:17:58Z" level=info msg="torcx already run" Sep 6 01:17:59.031890 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 6 01:17:59.031910 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 6 01:17:59.036894 systemd-tmpfiles[1304]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Sep 6 01:17:59.047415 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 6 01:17:59.108000 audit: BPF prog-id=30 op=LOAD Sep 6 01:17:59.108000 audit: BPF prog-id=26 op=UNLOAD Sep 6 01:17:59.111261 systemd-tmpfiles[1304]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Sep 6 01:17:59.110000 audit: BPF prog-id=31 op=LOAD Sep 6 01:17:59.110000 audit: BPF prog-id=21 op=UNLOAD Sep 6 01:17:59.110000 audit: BPF prog-id=32 op=LOAD Sep 6 01:17:59.110000 audit: BPF prog-id=33 op=LOAD Sep 6 01:17:59.110000 audit: BPF prog-id=22 op=UNLOAD Sep 6 01:17:59.110000 audit: BPF prog-id=23 op=UNLOAD Sep 6 01:17:59.111000 audit: BPF prog-id=34 op=LOAD Sep 6 01:17:59.111000 audit: BPF prog-id=27 op=UNLOAD Sep 6 01:17:59.111000 audit: BPF prog-id=35 op=LOAD Sep 6 01:17:59.111000 audit: BPF prog-id=36 op=LOAD Sep 6 01:17:59.111000 audit: BPF prog-id=28 op=UNLOAD Sep 6 01:17:59.111000 audit: BPF prog-id=29 op=UNLOAD Sep 6 01:17:59.112000 audit: BPF prog-id=37 op=LOAD Sep 6 01:17:59.112000 audit: BPF prog-id=38 op=LOAD Sep 6 01:17:59.112000 audit: BPF prog-id=24 op=UNLOAD Sep 6 01:17:59.112000 audit: BPF prog-id=25 op=UNLOAD Sep 6 01:17:59.116892 systemd[1]: Finished systemd-boot-update.service. Sep 6 01:17:59.120000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:59.130978 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 01:17:59.132353 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 01:17:59.137732 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 01:17:59.143528 systemd[1]: Starting modprobe@loop.service... Sep 6 01:17:59.149455 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 01:17:59.149602 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 01:17:59.150472 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 01:17:59.150635 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 01:17:59.155000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:59.155000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:59.156893 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 01:17:59.157026 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 01:17:59.160000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:59.160000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:59.162440 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 01:17:59.162570 systemd[1]: Finished modprobe@loop.service. Sep 6 01:17:59.166000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:59.166000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:59.169094 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 01:17:59.170494 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 01:17:59.176015 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 01:17:59.181693 systemd[1]: Starting modprobe@loop.service... Sep 6 01:17:59.185928 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 01:17:59.186076 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 01:17:59.186999 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 01:17:59.187139 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 01:17:59.191000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:59.191000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:59.192666 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 01:17:59.192820 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 01:17:59.196000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:59.196000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:59.198472 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 01:17:59.198598 systemd[1]: Finished modprobe@loop.service. Sep 6 01:17:59.202000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:59.202000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:59.205701 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 01:17:59.207120 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 01:17:59.212515 systemd[1]: Starting modprobe@drm.service... Sep 6 01:17:59.217895 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 01:17:59.224810 systemd[1]: Starting modprobe@loop.service... Sep 6 01:17:59.228832 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 01:17:59.228980 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 01:17:59.229990 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 01:17:59.230138 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 01:17:59.234000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:59.234000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:59.235653 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 6 01:17:59.235816 systemd[1]: Finished modprobe@drm.service. Sep 6 01:17:59.240000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:59.240000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:59.241319 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 01:17:59.241450 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 01:17:59.246000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:59.246000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:59.248151 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 01:17:59.248279 systemd[1]: Finished modprobe@loop.service. Sep 6 01:17:59.254294 systemd-tmpfiles[1304]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Sep 6 01:17:59.253000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:59.253000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:59.256233 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 6 01:17:59.256308 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 6 01:17:59.257353 systemd[1]: Finished ensure-sysext.service. Sep 6 01:17:59.261000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:59.698255 systemd[1]: Finished systemd-tmpfiles-setup.service. Sep 6 01:17:59.702000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:59.705443 systemd[1]: Starting audit-rules.service... Sep 6 01:17:59.711146 systemd[1]: Starting clean-ca-certificates.service... Sep 6 01:17:59.718022 systemd[1]: Starting systemd-journal-catalog-update.service... Sep 6 01:17:59.724000 audit: BPF prog-id=39 op=LOAD Sep 6 01:17:59.726177 systemd[1]: Starting systemd-resolved.service... Sep 6 01:17:59.730000 audit: BPF prog-id=40 op=LOAD Sep 6 01:17:59.733394 systemd[1]: Starting systemd-timesyncd.service... Sep 6 01:17:59.739876 systemd[1]: Starting systemd-update-utmp.service... Sep 6 01:17:59.773630 systemd[1]: Finished clean-ca-certificates.service. Sep 6 01:17:59.777000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:59.779521 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 6 01:17:59.805000 audit[1400]: SYSTEM_BOOT pid=1400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Sep 6 01:17:59.808652 systemd[1]: Finished systemd-update-utmp.service. Sep 6 01:17:59.811000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:59.820980 systemd[1]: Started systemd-timesyncd.service. Sep 6 01:17:59.825000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:59.826516 systemd[1]: Reached target time-set.target. Sep 6 01:17:59.876416 systemd-resolved[1398]: Positive Trust Anchors: Sep 6 01:17:59.876756 systemd-resolved[1398]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 6 01:17:59.876843 systemd-resolved[1398]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 6 01:17:59.920615 systemd-resolved[1398]: Using system hostname 'ci-3510.3.8-n-f2ea6194e4'. Sep 6 01:17:59.922613 systemd[1]: Started systemd-resolved.service. Sep 6 01:17:59.925000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:59.927639 systemd[1]: Reached target network.target. Sep 6 01:17:59.932503 systemd-networkd[1219]: eth0: Gained IPv6LL Sep 6 01:17:59.932718 systemd[1]: Reached target nss-lookup.target. Sep 6 01:17:59.939278 systemd[1]: Finished systemd-networkd-wait-online.service. Sep 6 01:17:59.943000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:17:59.945648 systemd[1]: Reached target network-online.target. Sep 6 01:17:59.953450 systemd[1]: Finished systemd-journal-catalog-update.service. Sep 6 01:17:59.958000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:18:00.116000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Sep 6 01:18:00.116000 audit[1415]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffff3b72b0 a2=420 a3=0 items=0 ppid=1394 pid=1415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:18:00.116000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Sep 6 01:18:00.119095 systemd-timesyncd[1399]: Contacted time server 69.176.84.38:123 (1.flatcar.pool.ntp.org). Sep 6 01:18:00.119161 systemd-timesyncd[1399]: Initial clock synchronization to Sat 2025-09-06 01:18:00.118917 UTC. Sep 6 01:18:00.131885 augenrules[1415]: No rules Sep 6 01:18:00.132796 systemd[1]: Finished audit-rules.service. Sep 6 01:18:05.125894 ldconfig[1280]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Sep 6 01:18:05.141166 systemd[1]: Finished ldconfig.service. Sep 6 01:18:05.147369 systemd[1]: Starting systemd-update-done.service... Sep 6 01:18:05.183862 systemd[1]: Finished systemd-update-done.service. Sep 6 01:18:05.188805 systemd[1]: Reached target sysinit.target. Sep 6 01:18:05.195541 systemd[1]: Started motdgen.path. Sep 6 01:18:05.200575 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Sep 6 01:18:05.207162 systemd[1]: Started logrotate.timer. Sep 6 01:18:05.211421 systemd[1]: Started mdadm.timer. Sep 6 01:18:05.215193 systemd[1]: Started systemd-tmpfiles-clean.timer. Sep 6 01:18:05.220126 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Sep 6 01:18:05.220156 systemd[1]: Reached target paths.target. Sep 6 01:18:05.224646 systemd[1]: Reached target timers.target. Sep 6 01:18:05.231815 systemd[1]: Listening on dbus.socket. Sep 6 01:18:05.237128 systemd[1]: Starting docker.socket... Sep 6 01:18:05.243200 systemd[1]: Listening on sshd.socket. Sep 6 01:18:05.247426 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 01:18:05.247974 systemd[1]: Listening on docker.socket. Sep 6 01:18:05.252361 systemd[1]: Reached target sockets.target. Sep 6 01:18:05.256709 systemd[1]: Reached target basic.target. Sep 6 01:18:05.260906 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 6 01:18:05.260935 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 6 01:18:05.262217 systemd[1]: Starting containerd.service... Sep 6 01:18:05.267290 systemd[1]: Starting dbus.service... Sep 6 01:18:05.272258 systemd[1]: Starting enable-oem-cloudinit.service... Sep 6 01:18:05.277871 systemd[1]: Starting extend-filesystems.service... Sep 6 01:18:05.282637 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Sep 6 01:18:05.284178 systemd[1]: Starting kubelet.service... Sep 6 01:18:05.289302 systemd[1]: Starting motdgen.service... Sep 6 01:18:05.294205 systemd[1]: Started nvidia.service. Sep 6 01:18:05.300886 systemd[1]: Starting prepare-helm.service... Sep 6 01:18:05.306554 systemd[1]: Starting ssh-key-proc-cmdline.service... Sep 6 01:18:05.312269 systemd[1]: Starting sshd-keygen.service... Sep 6 01:18:05.318415 systemd[1]: Starting systemd-logind.service... Sep 6 01:18:05.322510 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 01:18:05.322591 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Sep 6 01:18:05.323085 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Sep 6 01:18:05.324518 systemd[1]: Starting update-engine.service... Sep 6 01:18:05.332434 systemd[1]: Starting update-ssh-keys-after-ignition.service... Sep 6 01:18:05.345961 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Sep 6 01:18:05.346172 systemd[1]: Finished ssh-key-proc-cmdline.service. Sep 6 01:18:05.364169 systemd[1]: motdgen.service: Deactivated successfully. Sep 6 01:18:05.364366 systemd[1]: Finished motdgen.service. Sep 6 01:18:05.386917 jq[1425]: false Sep 6 01:18:05.387578 jq[1443]: true Sep 6 01:18:05.403379 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Sep 6 01:18:05.403554 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Sep 6 01:18:05.459255 systemd-logind[1438]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Sep 6 01:18:05.459869 systemd-logind[1438]: New seat seat0. Sep 6 01:18:05.471558 extend-filesystems[1426]: Found loop1 Sep 6 01:18:05.471558 extend-filesystems[1426]: Found sda Sep 6 01:18:05.484617 extend-filesystems[1426]: Found sda1 Sep 6 01:18:05.484617 extend-filesystems[1426]: Found sda2 Sep 6 01:18:05.484617 extend-filesystems[1426]: Found sda3 Sep 6 01:18:05.484617 extend-filesystems[1426]: Found usr Sep 6 01:18:05.484617 extend-filesystems[1426]: Found sda4 Sep 6 01:18:05.484617 extend-filesystems[1426]: Found sda6 Sep 6 01:18:05.484617 extend-filesystems[1426]: Found sda7 Sep 6 01:18:05.484617 extend-filesystems[1426]: Found sda9 Sep 6 01:18:05.484617 extend-filesystems[1426]: Checking size of /dev/sda9 Sep 6 01:18:05.679809 env[1448]: time="2025-09-06T01:18:05.501801989Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Sep 6 01:18:05.679809 env[1448]: time="2025-09-06T01:18:05.574489853Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Sep 6 01:18:05.679809 env[1448]: time="2025-09-06T01:18:05.574641373Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Sep 6 01:18:05.679809 env[1448]: time="2025-09-06T01:18:05.587238608Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.190-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Sep 6 01:18:05.679809 env[1448]: time="2025-09-06T01:18:05.587279968Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Sep 6 01:18:05.679809 env[1448]: time="2025-09-06T01:18:05.587518367Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 6 01:18:05.679809 env[1448]: time="2025-09-06T01:18:05.587536687Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Sep 6 01:18:05.679809 env[1448]: time="2025-09-06T01:18:05.587549727Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Sep 6 01:18:05.679809 env[1448]: time="2025-09-06T01:18:05.587559687Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Sep 6 01:18:05.679809 env[1448]: time="2025-09-06T01:18:05.587626447Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Sep 6 01:18:05.679809 env[1448]: time="2025-09-06T01:18:05.595097021Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Sep 6 01:18:05.580507 dbus-daemon[1424]: [system] SELinux support is enabled Sep 6 01:18:05.680406 extend-filesystems[1426]: Old size kept for /dev/sda9 Sep 6 01:18:05.680406 extend-filesystems[1426]: Found sr0 Sep 6 01:18:05.689382 jq[1453]: true Sep 6 01:18:05.689482 tar[1446]: linux-arm64/LICENSE Sep 6 01:18:05.689482 tar[1446]: linux-arm64/helm Sep 6 01:18:05.557640 systemd[1]: extend-filesystems.service: Deactivated successfully. Sep 6 01:18:05.689796 env[1448]: time="2025-09-06T01:18:05.595288060Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 6 01:18:05.689796 env[1448]: time="2025-09-06T01:18:05.595305420Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Sep 6 01:18:05.689796 env[1448]: time="2025-09-06T01:18:05.595377660Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Sep 6 01:18:05.689796 env[1448]: time="2025-09-06T01:18:05.595389740Z" level=info msg="metadata content store policy set" policy=shared Sep 6 01:18:05.689796 env[1448]: time="2025-09-06T01:18:05.617500062Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Sep 6 01:18:05.689796 env[1448]: time="2025-09-06T01:18:05.617586861Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Sep 6 01:18:05.689796 env[1448]: time="2025-09-06T01:18:05.617614701Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Sep 6 01:18:05.689796 env[1448]: time="2025-09-06T01:18:05.617663941Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Sep 6 01:18:05.689796 env[1448]: time="2025-09-06T01:18:05.617681101Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Sep 6 01:18:05.689796 env[1448]: time="2025-09-06T01:18:05.617696141Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Sep 6 01:18:05.689796 env[1448]: time="2025-09-06T01:18:05.617728021Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Sep 6 01:18:05.689796 env[1448]: time="2025-09-06T01:18:05.618182859Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Sep 6 01:18:05.689796 env[1448]: time="2025-09-06T01:18:05.618217499Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Sep 6 01:18:05.679539 dbus-daemon[1424]: [system] Successfully activated service 'org.freedesktop.systemd1' Sep 6 01:18:05.557846 systemd[1]: Finished extend-filesystems.service. Sep 6 01:18:05.690377 env[1448]: time="2025-09-06T01:18:05.618232379Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Sep 6 01:18:05.690377 env[1448]: time="2025-09-06T01:18:05.618245139Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Sep 6 01:18:05.690377 env[1448]: time="2025-09-06T01:18:05.618260139Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Sep 6 01:18:05.690377 env[1448]: time="2025-09-06T01:18:05.618416418Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Sep 6 01:18:05.690377 env[1448]: time="2025-09-06T01:18:05.618507898Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Sep 6 01:18:05.690377 env[1448]: time="2025-09-06T01:18:05.618825737Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Sep 6 01:18:05.690377 env[1448]: time="2025-09-06T01:18:05.618866297Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Sep 6 01:18:05.690377 env[1448]: time="2025-09-06T01:18:05.618879377Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Sep 6 01:18:05.690377 env[1448]: time="2025-09-06T01:18:05.618938937Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Sep 6 01:18:05.690377 env[1448]: time="2025-09-06T01:18:05.618956457Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Sep 6 01:18:05.690377 env[1448]: time="2025-09-06T01:18:05.618968377Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Sep 6 01:18:05.690377 env[1448]: time="2025-09-06T01:18:05.618980056Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Sep 6 01:18:05.690377 env[1448]: time="2025-09-06T01:18:05.619047096Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Sep 6 01:18:05.690377 env[1448]: time="2025-09-06T01:18:05.619060856Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Sep 6 01:18:05.690637 bash[1494]: Updated "/home/core/.ssh/authorized_keys" Sep 6 01:18:05.580733 systemd[1]: Started dbus.service. Sep 6 01:18:05.690735 env[1448]: time="2025-09-06T01:18:05.619084096Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Sep 6 01:18:05.690735 env[1448]: time="2025-09-06T01:18:05.619097136Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Sep 6 01:18:05.690735 env[1448]: time="2025-09-06T01:18:05.619110856Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Sep 6 01:18:05.690735 env[1448]: time="2025-09-06T01:18:05.619259215Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Sep 6 01:18:05.690735 env[1448]: time="2025-09-06T01:18:05.619276375Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Sep 6 01:18:05.690735 env[1448]: time="2025-09-06T01:18:05.619289935Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Sep 6 01:18:05.690735 env[1448]: time="2025-09-06T01:18:05.619302215Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Sep 6 01:18:05.690735 env[1448]: time="2025-09-06T01:18:05.619331375Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Sep 6 01:18:05.690735 env[1448]: time="2025-09-06T01:18:05.619342135Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Sep 6 01:18:05.690735 env[1448]: time="2025-09-06T01:18:05.619359535Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Sep 6 01:18:05.690735 env[1448]: time="2025-09-06T01:18:05.619403455Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Sep 6 01:18:05.593650 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Sep 6 01:18:05.593672 systemd[1]: Reached target system-config.target. Sep 6 01:18:05.691161 env[1448]: time="2025-09-06T01:18:05.619628574Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Sep 6 01:18:05.691161 env[1448]: time="2025-09-06T01:18:05.619682294Z" level=info msg="Connect containerd service" Sep 6 01:18:05.691161 env[1448]: time="2025-09-06T01:18:05.619739294Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Sep 6 01:18:05.691161 env[1448]: time="2025-09-06T01:18:05.620427531Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 6 01:18:05.691161 env[1448]: time="2025-09-06T01:18:05.620544491Z" level=info msg="Start subscribing containerd event" Sep 6 01:18:05.691161 env[1448]: time="2025-09-06T01:18:05.620583731Z" level=info msg="Start recovering state" Sep 6 01:18:05.691161 env[1448]: time="2025-09-06T01:18:05.620639571Z" level=info msg="Start event monitor" Sep 6 01:18:05.691161 env[1448]: time="2025-09-06T01:18:05.620653971Z" level=info msg="Start snapshots syncer" Sep 6 01:18:05.691161 env[1448]: time="2025-09-06T01:18:05.620662891Z" level=info msg="Start cni network conf syncer for default" Sep 6 01:18:05.691161 env[1448]: time="2025-09-06T01:18:05.620671931Z" level=info msg="Start streaming server" Sep 6 01:18:05.691161 env[1448]: time="2025-09-06T01:18:05.621027249Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Sep 6 01:18:05.691161 env[1448]: time="2025-09-06T01:18:05.621109049Z" level=info msg=serving... address=/run/containerd/containerd.sock Sep 6 01:18:05.691161 env[1448]: time="2025-09-06T01:18:05.635479958Z" level=info msg="containerd successfully booted in 0.164231s" Sep 6 01:18:05.636900 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Sep 6 01:18:05.636929 systemd[1]: Reached target user-config.target. Sep 6 01:18:05.656887 systemd[1]: Started containerd.service. Sep 6 01:18:05.668397 systemd[1]: Started systemd-logind.service. Sep 6 01:18:05.673957 systemd[1]: Finished update-ssh-keys-after-ignition.service. Sep 6 01:18:05.700934 systemd[1]: nvidia.service: Deactivated successfully. Sep 6 01:18:06.012661 update_engine[1440]: I0906 01:18:05.999361 1440 main.cc:92] Flatcar Update Engine starting Sep 6 01:18:06.056499 systemd[1]: Started update-engine.service. Sep 6 01:18:06.063186 update_engine[1440]: I0906 01:18:06.056528 1440 update_check_scheduler.cc:74] Next update check in 5m27s Sep 6 01:18:06.066125 systemd[1]: Started locksmithd.service. Sep 6 01:18:06.452388 systemd[1]: Started kubelet.service. Sep 6 01:18:06.474891 tar[1446]: linux-arm64/README.md Sep 6 01:18:06.479876 systemd[1]: Finished prepare-helm.service. Sep 6 01:18:06.897351 kubelet[1533]: E0906 01:18:06.897253 1533 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 01:18:06.899575 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 01:18:06.899696 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 01:18:07.193496 sshd_keygen[1442]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Sep 6 01:18:07.212579 systemd[1]: Finished sshd-keygen.service. Sep 6 01:18:07.219767 systemd[1]: Starting issuegen.service... Sep 6 01:18:07.226166 systemd[1]: Started waagent.service. Sep 6 01:18:07.231473 systemd[1]: issuegen.service: Deactivated successfully. Sep 6 01:18:07.231685 systemd[1]: Finished issuegen.service. Sep 6 01:18:07.238783 systemd[1]: Starting systemd-user-sessions.service... Sep 6 01:18:07.286532 systemd[1]: Finished systemd-user-sessions.service. Sep 6 01:18:07.296139 systemd[1]: Started getty@tty1.service. Sep 6 01:18:07.302625 systemd[1]: Started serial-getty@ttyAMA0.service. Sep 6 01:18:07.307769 systemd[1]: Reached target getty.target. Sep 6 01:18:07.312075 systemd[1]: Reached target multi-user.target. Sep 6 01:18:07.318430 systemd[1]: Starting systemd-update-utmp-runlevel.service... Sep 6 01:18:07.327845 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Sep 6 01:18:07.328025 systemd[1]: Finished systemd-update-utmp-runlevel.service. Sep 6 01:18:07.335722 systemd[1]: Startup finished in 777ms (kernel) + 13.274s (initrd) + 19.817s (userspace) = 33.869s. Sep 6 01:18:07.467481 locksmithd[1530]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Sep 6 01:18:07.869284 login[1556]: pam_lastlog(login:session): file /var/log/lastlog is locked/write Sep 6 01:18:07.871204 login[1557]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Sep 6 01:18:07.921353 systemd[1]: Created slice user-500.slice. Sep 6 01:18:07.922572 systemd[1]: Starting user-runtime-dir@500.service... Sep 6 01:18:07.925507 systemd-logind[1438]: New session 2 of user core. Sep 6 01:18:07.968828 systemd[1]: Finished user-runtime-dir@500.service. Sep 6 01:18:07.970486 systemd[1]: Starting user@500.service... Sep 6 01:18:08.000788 (systemd)[1561]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:18:08.165114 systemd[1561]: Queued start job for default target default.target. Sep 6 01:18:08.166097 systemd[1561]: Reached target paths.target. Sep 6 01:18:08.166126 systemd[1561]: Reached target sockets.target. Sep 6 01:18:08.166138 systemd[1561]: Reached target timers.target. Sep 6 01:18:08.166149 systemd[1561]: Reached target basic.target. Sep 6 01:18:08.166200 systemd[1561]: Reached target default.target. Sep 6 01:18:08.166225 systemd[1561]: Startup finished in 158ms. Sep 6 01:18:08.166277 systemd[1]: Started user@500.service. Sep 6 01:18:08.167315 systemd[1]: Started session-2.scope. Sep 6 01:18:08.869634 login[1556]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Sep 6 01:18:08.873889 systemd-logind[1438]: New session 1 of user core. Sep 6 01:18:08.874332 systemd[1]: Started session-1.scope. Sep 6 01:18:13.479002 waagent[1554]: 2025-09-06T01:18:13.478888Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Sep 6 01:18:13.486680 waagent[1554]: 2025-09-06T01:18:13.486570Z INFO Daemon Daemon OS: flatcar 3510.3.8 Sep 6 01:18:13.492473 waagent[1554]: 2025-09-06T01:18:13.492375Z INFO Daemon Daemon Python: 3.9.16 Sep 6 01:18:13.497632 waagent[1554]: 2025-09-06T01:18:13.497495Z INFO Daemon Daemon Run daemon Sep 6 01:18:13.502727 waagent[1554]: 2025-09-06T01:18:13.502643Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.8' Sep 6 01:18:13.522540 waagent[1554]: 2025-09-06T01:18:13.522379Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Sep 6 01:18:13.546848 waagent[1554]: 2025-09-06T01:18:13.546674Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Sep 6 01:18:13.557320 waagent[1554]: 2025-09-06T01:18:13.557225Z INFO Daemon Daemon cloud-init is enabled: False Sep 6 01:18:13.562929 waagent[1554]: 2025-09-06T01:18:13.562822Z INFO Daemon Daemon Using waagent for provisioning Sep 6 01:18:13.569843 waagent[1554]: 2025-09-06T01:18:13.569734Z INFO Daemon Daemon Activate resource disk Sep 6 01:18:13.575557 waagent[1554]: 2025-09-06T01:18:13.575461Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Sep 6 01:18:13.591968 waagent[1554]: 2025-09-06T01:18:13.591866Z INFO Daemon Daemon Found device: None Sep 6 01:18:13.597004 waagent[1554]: 2025-09-06T01:18:13.596902Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Sep 6 01:18:13.606974 waagent[1554]: 2025-09-06T01:18:13.606870Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Sep 6 01:18:13.621580 waagent[1554]: 2025-09-06T01:18:13.621493Z INFO Daemon Daemon Clean protocol and wireserver endpoint Sep 6 01:18:13.628540 waagent[1554]: 2025-09-06T01:18:13.628436Z INFO Daemon Daemon Running default provisioning handler Sep 6 01:18:13.643719 waagent[1554]: 2025-09-06T01:18:13.643554Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Sep 6 01:18:13.662383 waagent[1554]: 2025-09-06T01:18:13.662216Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Sep 6 01:18:13.673871 waagent[1554]: 2025-09-06T01:18:13.673763Z INFO Daemon Daemon cloud-init is enabled: False Sep 6 01:18:13.680528 waagent[1554]: 2025-09-06T01:18:13.680422Z INFO Daemon Daemon Copying ovf-env.xml Sep 6 01:18:13.766910 waagent[1554]: 2025-09-06T01:18:13.766687Z INFO Daemon Daemon Successfully mounted dvd Sep 6 01:18:13.839336 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Sep 6 01:18:13.875994 waagent[1554]: 2025-09-06T01:18:13.875833Z INFO Daemon Daemon Detect protocol endpoint Sep 6 01:18:13.882324 waagent[1554]: 2025-09-06T01:18:13.881775Z INFO Daemon Daemon Clean protocol and wireserver endpoint Sep 6 01:18:13.889896 waagent[1554]: 2025-09-06T01:18:13.889791Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Sep 6 01:18:13.897888 waagent[1554]: 2025-09-06T01:18:13.897714Z INFO Daemon Daemon Test for route to 168.63.129.16 Sep 6 01:18:13.904425 waagent[1554]: 2025-09-06T01:18:13.904323Z INFO Daemon Daemon Route to 168.63.129.16 exists Sep 6 01:18:13.910592 waagent[1554]: 2025-09-06T01:18:13.910488Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Sep 6 01:18:14.013078 waagent[1554]: 2025-09-06T01:18:14.012996Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Sep 6 01:18:14.021345 waagent[1554]: 2025-09-06T01:18:14.021256Z INFO Daemon Daemon Wire protocol version:2012-11-30 Sep 6 01:18:14.027463 waagent[1554]: 2025-09-06T01:18:14.027378Z INFO Daemon Daemon Server preferred version:2015-04-05 Sep 6 01:18:14.626162 waagent[1554]: 2025-09-06T01:18:14.625990Z INFO Daemon Daemon Initializing goal state during protocol detection Sep 6 01:18:14.643481 waagent[1554]: 2025-09-06T01:18:14.643372Z INFO Daemon Daemon Forcing an update of the goal state.. Sep 6 01:18:14.650886 waagent[1554]: 2025-09-06T01:18:14.650787Z INFO Daemon Daemon Fetching goal state [incarnation 1] Sep 6 01:18:14.735510 waagent[1554]: 2025-09-06T01:18:14.735354Z INFO Daemon Daemon Found private key matching thumbprint 588BC06CADE02876E167DC8C15B035252448ED8A Sep 6 01:18:14.744843 waagent[1554]: 2025-09-06T01:18:14.744755Z INFO Daemon Daemon Fetch goal state completed Sep 6 01:18:14.773940 waagent[1554]: 2025-09-06T01:18:14.773870Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: 89f6838f-90f6-4e84-809b-8dedc7a3b5c5 New eTag: 3067060630870891026] Sep 6 01:18:14.786087 waagent[1554]: 2025-09-06T01:18:14.785987Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Sep 6 01:18:14.805638 waagent[1554]: 2025-09-06T01:18:14.805572Z INFO Daemon Daemon Starting provisioning Sep 6 01:18:14.810983 waagent[1554]: 2025-09-06T01:18:14.810889Z INFO Daemon Daemon Handle ovf-env.xml. Sep 6 01:18:14.816210 waagent[1554]: 2025-09-06T01:18:14.816124Z INFO Daemon Daemon Set hostname [ci-3510.3.8-n-f2ea6194e4] Sep 6 01:18:14.866517 waagent[1554]: 2025-09-06T01:18:14.866366Z INFO Daemon Daemon Publish hostname [ci-3510.3.8-n-f2ea6194e4] Sep 6 01:18:14.873570 waagent[1554]: 2025-09-06T01:18:14.873474Z INFO Daemon Daemon Examine /proc/net/route for primary interface Sep 6 01:18:14.880703 waagent[1554]: 2025-09-06T01:18:14.880588Z INFO Daemon Daemon Primary interface is [eth0] Sep 6 01:18:14.898797 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Sep 6 01:18:14.898976 systemd[1]: Stopped systemd-networkd-wait-online.service. Sep 6 01:18:14.899032 systemd[1]: Stopping systemd-networkd-wait-online.service... Sep 6 01:18:14.899273 systemd[1]: Stopping systemd-networkd.service... Sep 6 01:18:14.903808 systemd-networkd[1219]: eth0: DHCPv6 lease lost Sep 6 01:18:14.906263 systemd[1]: systemd-networkd.service: Deactivated successfully. Sep 6 01:18:14.906465 systemd[1]: Stopped systemd-networkd.service. Sep 6 01:18:14.908658 systemd[1]: Starting systemd-networkd.service... Sep 6 01:18:14.938115 systemd-networkd[1603]: enP29075s1: Link UP Sep 6 01:18:14.938126 systemd-networkd[1603]: enP29075s1: Gained carrier Sep 6 01:18:14.939228 systemd-networkd[1603]: eth0: Link UP Sep 6 01:18:14.939237 systemd-networkd[1603]: eth0: Gained carrier Sep 6 01:18:14.939597 systemd-networkd[1603]: lo: Link UP Sep 6 01:18:14.939606 systemd-networkd[1603]: lo: Gained carrier Sep 6 01:18:14.940049 systemd-networkd[1603]: eth0: Gained IPv6LL Sep 6 01:18:14.940280 systemd-networkd[1603]: Enumeration completed Sep 6 01:18:14.940970 systemd-networkd[1603]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 6 01:18:14.941117 systemd[1]: Started systemd-networkd.service. Sep 6 01:18:14.943113 systemd[1]: Starting systemd-networkd-wait-online.service... Sep 6 01:18:14.946406 waagent[1554]: 2025-09-06T01:18:14.945940Z INFO Daemon Daemon Create user account if not exists Sep 6 01:18:14.953102 waagent[1554]: 2025-09-06T01:18:14.952996Z INFO Daemon Daemon User core already exists, skip useradd Sep 6 01:18:14.959432 waagent[1554]: 2025-09-06T01:18:14.959338Z INFO Daemon Daemon Configure sudoer Sep 6 01:18:14.964871 waagent[1554]: 2025-09-06T01:18:14.964785Z INFO Daemon Daemon Configure sshd Sep 6 01:18:14.969368 waagent[1554]: 2025-09-06T01:18:14.969255Z INFO Daemon Daemon Deploy ssh public key. Sep 6 01:18:14.978703 systemd-networkd[1603]: eth0: DHCPv4 address 10.200.20.41/24, gateway 10.200.20.1 acquired from 168.63.129.16 Sep 6 01:18:14.982856 systemd[1]: Finished systemd-networkd-wait-online.service. Sep 6 01:18:16.171675 waagent[1554]: 2025-09-06T01:18:16.171581Z INFO Daemon Daemon Provisioning complete Sep 6 01:18:16.192693 waagent[1554]: 2025-09-06T01:18:16.192618Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Sep 6 01:18:16.199329 waagent[1554]: 2025-09-06T01:18:16.199237Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Sep 6 01:18:16.210943 waagent[1554]: 2025-09-06T01:18:16.210856Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Sep 6 01:18:16.534791 waagent[1609]: 2025-09-06T01:18:16.534615Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Sep 6 01:18:16.536018 waagent[1609]: 2025-09-06T01:18:16.535943Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 6 01:18:16.536299 waagent[1609]: 2025-09-06T01:18:16.536249Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 6 01:18:16.550004 waagent[1609]: 2025-09-06T01:18:16.549894Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Sep 6 01:18:16.550395 waagent[1609]: 2025-09-06T01:18:16.550341Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Sep 6 01:18:16.615269 waagent[1609]: 2025-09-06T01:18:16.615114Z INFO ExtHandler ExtHandler Found private key matching thumbprint 588BC06CADE02876E167DC8C15B035252448ED8A Sep 6 01:18:16.615815 waagent[1609]: 2025-09-06T01:18:16.615733Z INFO ExtHandler ExtHandler Fetch goal state completed Sep 6 01:18:16.631719 waagent[1609]: 2025-09-06T01:18:16.631659Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: 185eafe7-1e79-4e02-bd2c-22ad219af371 New eTag: 3067060630870891026] Sep 6 01:18:16.632538 waagent[1609]: 2025-09-06T01:18:16.632470Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Sep 6 01:18:16.726519 waagent[1609]: 2025-09-06T01:18:16.726384Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.8; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Sep 6 01:18:16.737339 waagent[1609]: 2025-09-06T01:18:16.737242Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1609 Sep 6 01:18:16.741438 waagent[1609]: 2025-09-06T01:18:16.741346Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.8', '', 'Flatcar Container Linux by Kinvolk'] Sep 6 01:18:16.742950 waagent[1609]: 2025-09-06T01:18:16.742867Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Sep 6 01:18:16.861942 waagent[1609]: 2025-09-06T01:18:16.861801Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Sep 6 01:18:16.862583 waagent[1609]: 2025-09-06T01:18:16.862512Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Sep 6 01:18:16.871608 waagent[1609]: 2025-09-06T01:18:16.871546Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Sep 6 01:18:16.872410 waagent[1609]: 2025-09-06T01:18:16.872339Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Sep 6 01:18:16.873784 waagent[1609]: 2025-09-06T01:18:16.873700Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Sep 6 01:18:16.875618 waagent[1609]: 2025-09-06T01:18:16.875541Z INFO ExtHandler ExtHandler Starting env monitor service. Sep 6 01:18:16.875904 waagent[1609]: 2025-09-06T01:18:16.875832Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 6 01:18:16.876491 waagent[1609]: 2025-09-06T01:18:16.876420Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 6 01:18:16.877204 waagent[1609]: 2025-09-06T01:18:16.877136Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Sep 6 01:18:16.877547 waagent[1609]: 2025-09-06T01:18:16.877487Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Sep 6 01:18:16.877547 waagent[1609]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Sep 6 01:18:16.877547 waagent[1609]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Sep 6 01:18:16.877547 waagent[1609]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Sep 6 01:18:16.877547 waagent[1609]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Sep 6 01:18:16.877547 waagent[1609]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Sep 6 01:18:16.877547 waagent[1609]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Sep 6 01:18:16.880038 waagent[1609]: 2025-09-06T01:18:16.879858Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Sep 6 01:18:16.880424 waagent[1609]: 2025-09-06T01:18:16.880349Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 6 01:18:16.881237 waagent[1609]: 2025-09-06T01:18:16.881169Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 6 01:18:16.881913 waagent[1609]: 2025-09-06T01:18:16.881833Z INFO EnvHandler ExtHandler Configure routes Sep 6 01:18:16.882134 waagent[1609]: 2025-09-06T01:18:16.882068Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Sep 6 01:18:16.882378 waagent[1609]: 2025-09-06T01:18:16.882310Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Sep 6 01:18:16.882501 waagent[1609]: 2025-09-06T01:18:16.882414Z INFO EnvHandler ExtHandler Gateway:None Sep 6 01:18:16.882903 waagent[1609]: 2025-09-06T01:18:16.882761Z INFO EnvHandler ExtHandler Routes:None Sep 6 01:18:16.885725 waagent[1609]: 2025-09-06T01:18:16.885643Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Sep 6 01:18:16.885989 waagent[1609]: 2025-09-06T01:18:16.885908Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Sep 6 01:18:16.886489 waagent[1609]: 2025-09-06T01:18:16.886375Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Sep 6 01:18:16.900141 waagent[1609]: 2025-09-06T01:18:16.900065Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Sep 6 01:18:16.901647 waagent[1609]: 2025-09-06T01:18:16.901584Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Sep 6 01:18:16.904390 waagent[1609]: 2025-09-06T01:18:16.904322Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Sep 6 01:18:16.922010 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Sep 6 01:18:16.922216 systemd[1]: Stopped kubelet.service. Sep 6 01:18:16.923722 systemd[1]: Starting kubelet.service... Sep 6 01:18:16.931100 waagent[1609]: 2025-09-06T01:18:16.931029Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Sep 6 01:18:16.937711 waagent[1609]: 2025-09-06T01:18:16.937631Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1603' Sep 6 01:18:17.034452 systemd[1]: Started kubelet.service. Sep 6 01:18:17.123412 kubelet[1638]: E0906 01:18:17.123311 1638 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 01:18:17.126013 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 01:18:17.126144 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 01:18:17.327257 waagent[1609]: 2025-09-06T01:18:17.327174Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.14.0.1 -- exiting Sep 6 01:18:18.215790 waagent[1554]: 2025-09-06T01:18:18.215643Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Sep 6 01:18:18.221568 waagent[1554]: 2025-09-06T01:18:18.221505Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.14.0.1 to be the latest agent Sep 6 01:18:19.545305 waagent[1646]: 2025-09-06T01:18:19.545208Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.14.0.1) Sep 6 01:18:19.546448 waagent[1646]: 2025-09-06T01:18:19.546380Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.8 Sep 6 01:18:19.546721 waagent[1646]: 2025-09-06T01:18:19.546673Z INFO ExtHandler ExtHandler Python: 3.9.16 Sep 6 01:18:19.546992 waagent[1646]: 2025-09-06T01:18:19.546944Z INFO ExtHandler ExtHandler CPU Arch: aarch64 Sep 6 01:18:19.561680 waagent[1646]: 2025-09-06T01:18:19.561551Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.8; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; Arch: aarch64; systemd: True; systemd_version: systemd 252 (252); LISDrivers: Absent; logrotate: logrotate 3.20.1; Sep 6 01:18:19.562360 waagent[1646]: 2025-09-06T01:18:19.562299Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 6 01:18:19.562636 waagent[1646]: 2025-09-06T01:18:19.562589Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 6 01:18:19.562989 waagent[1646]: 2025-09-06T01:18:19.562939Z INFO ExtHandler ExtHandler Initializing the goal state... Sep 6 01:18:19.577909 waagent[1646]: 2025-09-06T01:18:19.577799Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Sep 6 01:18:19.591906 waagent[1646]: 2025-09-06T01:18:19.591838Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.175 Sep 6 01:18:19.593260 waagent[1646]: 2025-09-06T01:18:19.593201Z INFO ExtHandler Sep 6 01:18:19.593553 waagent[1646]: 2025-09-06T01:18:19.593504Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: af252ee3-0038-4379-acb2-8b3a66a57183 eTag: 3067060630870891026 source: Fabric] Sep 6 01:18:19.594498 waagent[1646]: 2025-09-06T01:18:19.594444Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Sep 6 01:18:19.595923 waagent[1646]: 2025-09-06T01:18:19.595866Z INFO ExtHandler Sep 6 01:18:19.596171 waagent[1646]: 2025-09-06T01:18:19.596124Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Sep 6 01:18:19.603954 waagent[1646]: 2025-09-06T01:18:19.603889Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Sep 6 01:18:19.604720 waagent[1646]: 2025-09-06T01:18:19.604672Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Sep 6 01:18:19.627289 waagent[1646]: 2025-09-06T01:18:19.627222Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Sep 6 01:18:19.697492 waagent[1646]: 2025-09-06T01:18:19.697355Z INFO ExtHandler Downloaded certificate {'thumbprint': '588BC06CADE02876E167DC8C15B035252448ED8A', 'hasPrivateKey': True} Sep 6 01:18:19.699239 waagent[1646]: 2025-09-06T01:18:19.699161Z INFO ExtHandler Fetch goal state from WireServer completed Sep 6 01:18:19.700378 waagent[1646]: 2025-09-06T01:18:19.700317Z INFO ExtHandler ExtHandler Goal state initialization completed. Sep 6 01:18:19.722085 waagent[1646]: 2025-09-06T01:18:19.721954Z INFO ExtHandler ExtHandler OpenSSL version: OpenSSL 3.0.15 3 Sep 2024 (Library: OpenSSL 3.0.15 3 Sep 2024) Sep 6 01:18:19.731401 waagent[1646]: 2025-09-06T01:18:19.731277Z INFO ExtHandler ExtHandler Using iptables [version 1.8.8] to manage firewall rules Sep 6 01:18:19.735731 waagent[1646]: 2025-09-06T01:18:19.735613Z INFO ExtHandler ExtHandler Did not find a legacy firewall rule: ['iptables', '-w', '-t', 'security', '-C', 'OUTPUT', '-d', '168.63.129.16', '-p', 'tcp', '-m', 'conntrack', '--ctstate', 'INVALID,NEW', '-j', 'ACCEPT'] Sep 6 01:18:19.736179 waagent[1646]: 2025-09-06T01:18:19.736124Z INFO ExtHandler ExtHandler Checking state of the firewall Sep 6 01:18:19.894578 waagent[1646]: 2025-09-06T01:18:19.894376Z INFO ExtHandler ExtHandler Created firewall rules for Azure Fabric: Sep 6 01:18:19.894578 waagent[1646]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Sep 6 01:18:19.894578 waagent[1646]: pkts bytes target prot opt in out source destination Sep 6 01:18:19.894578 waagent[1646]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Sep 6 01:18:19.894578 waagent[1646]: pkts bytes target prot opt in out source destination Sep 6 01:18:19.894578 waagent[1646]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Sep 6 01:18:19.894578 waagent[1646]: pkts bytes target prot opt in out source destination Sep 6 01:18:19.894578 waagent[1646]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Sep 6 01:18:19.894578 waagent[1646]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Sep 6 01:18:19.894578 waagent[1646]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Sep 6 01:18:19.895849 waagent[1646]: 2025-09-06T01:18:19.895777Z INFO ExtHandler ExtHandler Setting up persistent firewall rules Sep 6 01:18:19.899143 waagent[1646]: 2025-09-06T01:18:19.898999Z INFO ExtHandler ExtHandler The firewalld service is not present on the system Sep 6 01:18:19.899470 waagent[1646]: 2025-09-06T01:18:19.899416Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Sep 6 01:18:19.899904 waagent[1646]: 2025-09-06T01:18:19.899849Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Sep 6 01:18:19.908359 waagent[1646]: 2025-09-06T01:18:19.908288Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Sep 6 01:18:19.908987 waagent[1646]: 2025-09-06T01:18:19.908929Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Sep 6 01:18:19.917854 waagent[1646]: 2025-09-06T01:18:19.917770Z INFO ExtHandler ExtHandler WALinuxAgent-2.14.0.1 running as process 1646 Sep 6 01:18:19.921383 waagent[1646]: 2025-09-06T01:18:19.921295Z INFO ExtHandler ExtHandler [CGI] Cgroups is not currently supported on ['flatcar', '3510.3.8', '', 'Flatcar Container Linux by Kinvolk'] Sep 6 01:18:19.922364 waagent[1646]: 2025-09-06T01:18:19.922300Z INFO ExtHandler ExtHandler [CGI] Agent will reset the quotas in case cgroup usage went from enabled to disabled Sep 6 01:18:19.923359 waagent[1646]: 2025-09-06T01:18:19.923298Z INFO ExtHandler ExtHandler [CGI] Agent cgroups enabled: False Sep 6 01:18:19.926242 waagent[1646]: 2025-09-06T01:18:19.926175Z INFO ExtHandler ExtHandler Signing certificate written to /var/lib/waagent/microsoft_root_certificate.pem Sep 6 01:18:19.926617 waagent[1646]: 2025-09-06T01:18:19.926563Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: 1. configuration enabled [True], 2. cgroups v1 enabled [False] OR cgroups v2 is in use and v2 resource limiting configuration enabled [False], 3. python supported: [True] Sep 6 01:18:19.928133 waagent[1646]: 2025-09-06T01:18:19.928058Z INFO ExtHandler ExtHandler Starting env monitor service. Sep 6 01:18:19.928816 waagent[1646]: 2025-09-06T01:18:19.928733Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 6 01:18:19.929105 waagent[1646]: 2025-09-06T01:18:19.929058Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 6 01:18:19.929814 waagent[1646]: 2025-09-06T01:18:19.929738Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Sep 6 01:18:19.930267 waagent[1646]: 2025-09-06T01:18:19.930217Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Sep 6 01:18:19.930267 waagent[1646]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Sep 6 01:18:19.930267 waagent[1646]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Sep 6 01:18:19.930267 waagent[1646]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Sep 6 01:18:19.930267 waagent[1646]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Sep 6 01:18:19.930267 waagent[1646]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Sep 6 01:18:19.930267 waagent[1646]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Sep 6 01:18:19.933285 waagent[1646]: 2025-09-06T01:18:19.933146Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 6 01:18:19.933560 waagent[1646]: 2025-09-06T01:18:19.933494Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 6 01:18:19.934238 waagent[1646]: 2025-09-06T01:18:19.934180Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Sep 6 01:18:19.934346 waagent[1646]: 2025-09-06T01:18:19.934045Z INFO EnvHandler ExtHandler Configure routes Sep 6 01:18:19.934907 waagent[1646]: 2025-09-06T01:18:19.934844Z INFO EnvHandler ExtHandler Gateway:None Sep 6 01:18:19.935091 waagent[1646]: 2025-09-06T01:18:19.935010Z INFO EnvHandler ExtHandler Routes:None Sep 6 01:18:19.936141 waagent[1646]: 2025-09-06T01:18:19.935808Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Sep 6 01:18:19.936244 waagent[1646]: 2025-09-06T01:18:19.936182Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Sep 6 01:18:19.940699 waagent[1646]: 2025-09-06T01:18:19.940614Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Sep 6 01:18:19.941170 waagent[1646]: 2025-09-06T01:18:19.941099Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Sep 6 01:18:19.941941 waagent[1646]: 2025-09-06T01:18:19.941865Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Sep 6 01:18:19.959088 waagent[1646]: 2025-09-06T01:18:19.958990Z INFO ExtHandler ExtHandler Downloading agent manifest Sep 6 01:18:19.971616 waagent[1646]: 2025-09-06T01:18:19.971540Z INFO MonitorHandler ExtHandler Network interfaces: Sep 6 01:18:19.971616 waagent[1646]: Executing ['ip', '-a', '-o', 'link']: Sep 6 01:18:19.971616 waagent[1646]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Sep 6 01:18:19.971616 waagent[1646]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:f9:b6:bd brd ff:ff:ff:ff:ff:ff Sep 6 01:18:19.971616 waagent[1646]: 3: enP29075s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:f9:b6:bd brd ff:ff:ff:ff:ff:ff\ altname enP29075p0s2 Sep 6 01:18:19.971616 waagent[1646]: Executing ['ip', '-4', '-a', '-o', 'address']: Sep 6 01:18:19.971616 waagent[1646]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Sep 6 01:18:19.971616 waagent[1646]: 2: eth0 inet 10.200.20.41/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Sep 6 01:18:19.971616 waagent[1646]: Executing ['ip', '-6', '-a', '-o', 'address']: Sep 6 01:18:19.971616 waagent[1646]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Sep 6 01:18:19.971616 waagent[1646]: 2: eth0 inet6 fe80::20d:3aff:fef9:b6bd/64 scope link \ valid_lft forever preferred_lft forever Sep 6 01:18:19.984235 waagent[1646]: 2025-09-06T01:18:19.984144Z INFO ExtHandler ExtHandler Sep 6 01:18:19.985532 waagent[1646]: 2025-09-06T01:18:19.985465Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: ca944e04-d8b0-4b55-963e-e671e8933012 correlation 7b7ba9a5-a4aa-4adc-bc49-bbaa16369513 created: 2025-09-06T01:16:50.759285Z] Sep 6 01:18:19.989650 waagent[1646]: 2025-09-06T01:18:19.989562Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Sep 6 01:18:19.996592 waagent[1646]: 2025-09-06T01:18:19.996514Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 12 ms] Sep 6 01:18:20.017198 waagent[1646]: 2025-09-06T01:18:20.017087Z INFO EnvHandler ExtHandler Using iptables [version 1.8.8] to manage firewall rules Sep 6 01:18:20.029097 waagent[1646]: 2025-09-06T01:18:20.029020Z INFO ExtHandler ExtHandler Looking for existing remote access users. Sep 6 01:18:20.037667 waagent[1646]: 2025-09-06T01:18:20.037437Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.14.0.1 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: C99CD5B5-2977-4C37-BE0E-EFB5FC4BC45C;UpdateGSErrors: 0;AutoUpdate: 1;UpdateMode: SelfUpdate;] Sep 6 01:18:20.041386 waagent[1646]: 2025-09-06T01:18:20.041325Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Sep 6 01:18:27.257186 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Sep 6 01:18:27.257362 systemd[1]: Stopped kubelet.service. Sep 6 01:18:27.258714 systemd[1]: Starting kubelet.service... Sep 6 01:18:27.353472 systemd[1]: Started kubelet.service. Sep 6 01:18:27.487681 kubelet[1691]: E0906 01:18:27.487641 1691 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 01:18:27.489944 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 01:18:27.490065 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 01:18:37.507267 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Sep 6 01:18:37.507432 systemd[1]: Stopped kubelet.service. Sep 6 01:18:37.509010 systemd[1]: Starting kubelet.service... Sep 6 01:18:37.603547 systemd[1]: Started kubelet.service. Sep 6 01:18:37.659030 systemd[1]: Created slice system-sshd.slice. Sep 6 01:18:37.660327 systemd[1]: Started sshd@0-10.200.20.41:22-10.200.16.10:56198.service. Sep 6 01:18:37.733287 kubelet[1700]: E0906 01:18:37.733220 1700 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 01:18:37.735482 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 01:18:37.735615 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 01:18:38.628132 sshd[1706]: Accepted publickey for core from 10.200.16.10 port 56198 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:18:38.643247 sshd[1706]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:18:38.647035 systemd-logind[1438]: New session 3 of user core. Sep 6 01:18:38.647495 systemd[1]: Started session-3.scope. Sep 6 01:18:39.017761 systemd[1]: Started sshd@1-10.200.20.41:22-10.200.16.10:56202.service. Sep 6 01:18:39.467225 sshd[1712]: Accepted publickey for core from 10.200.16.10 port 56202 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:18:39.468861 sshd[1712]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:18:39.472847 systemd-logind[1438]: New session 4 of user core. Sep 6 01:18:39.473445 systemd[1]: Started session-4.scope. Sep 6 01:18:39.818718 sshd[1712]: pam_unix(sshd:session): session closed for user core Sep 6 01:18:39.821592 systemd[1]: sshd@1-10.200.20.41:22-10.200.16.10:56202.service: Deactivated successfully. Sep 6 01:18:39.822333 systemd[1]: session-4.scope: Deactivated successfully. Sep 6 01:18:39.822880 systemd-logind[1438]: Session 4 logged out. Waiting for processes to exit. Sep 6 01:18:39.823875 systemd-logind[1438]: Removed session 4. Sep 6 01:18:39.887021 systemd[1]: Started sshd@2-10.200.20.41:22-10.200.16.10:51406.service. Sep 6 01:18:40.335154 sshd[1718]: Accepted publickey for core from 10.200.16.10 port 51406 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:18:40.336455 sshd[1718]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:18:40.340297 systemd-logind[1438]: New session 5 of user core. Sep 6 01:18:40.340786 systemd[1]: Started session-5.scope. Sep 6 01:18:40.650924 sshd[1718]: pam_unix(sshd:session): session closed for user core Sep 6 01:18:40.653624 systemd[1]: session-5.scope: Deactivated successfully. Sep 6 01:18:40.654238 systemd-logind[1438]: Session 5 logged out. Waiting for processes to exit. Sep 6 01:18:40.654347 systemd[1]: sshd@2-10.200.20.41:22-10.200.16.10:51406.service: Deactivated successfully. Sep 6 01:18:40.655430 systemd-logind[1438]: Removed session 5. Sep 6 01:18:40.718958 systemd[1]: Started sshd@3-10.200.20.41:22-10.200.16.10:51416.service. Sep 6 01:18:41.126578 sshd[1724]: Accepted publickey for core from 10.200.16.10 port 51416 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:18:41.127937 sshd[1724]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:18:41.131939 systemd-logind[1438]: New session 6 of user core. Sep 6 01:18:41.132401 systemd[1]: Started session-6.scope. Sep 6 01:18:41.440878 sshd[1724]: pam_unix(sshd:session): session closed for user core Sep 6 01:18:41.443573 systemd[1]: sshd@3-10.200.20.41:22-10.200.16.10:51416.service: Deactivated successfully. Sep 6 01:18:41.444287 systemd[1]: session-6.scope: Deactivated successfully. Sep 6 01:18:41.444828 systemd-logind[1438]: Session 6 logged out. Waiting for processes to exit. Sep 6 01:18:41.445484 systemd-logind[1438]: Removed session 6. Sep 6 01:18:41.523600 systemd[1]: Started sshd@4-10.200.20.41:22-10.200.16.10:51430.service. Sep 6 01:18:41.932486 sshd[1730]: Accepted publickey for core from 10.200.16.10 port 51430 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:18:41.933831 sshd[1730]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:18:41.937676 systemd-logind[1438]: New session 7 of user core. Sep 6 01:18:41.938160 systemd[1]: Started session-7.scope. Sep 6 01:18:42.435266 sudo[1733]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Sep 6 01:18:42.435479 sudo[1733]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 6 01:18:42.476940 dbus-daemon[1424]: avc: received setenforce notice (enforcing=1) Sep 6 01:18:42.478836 sudo[1733]: pam_unix(sudo:session): session closed for user root Sep 6 01:18:42.571165 sshd[1730]: pam_unix(sshd:session): session closed for user core Sep 6 01:18:42.574662 systemd[1]: sshd@4-10.200.20.41:22-10.200.16.10:51430.service: Deactivated successfully. Sep 6 01:18:42.575128 systemd-logind[1438]: Session 7 logged out. Waiting for processes to exit. Sep 6 01:18:42.575507 systemd[1]: session-7.scope: Deactivated successfully. Sep 6 01:18:42.576613 systemd-logind[1438]: Removed session 7. Sep 6 01:18:42.654998 systemd[1]: Started sshd@5-10.200.20.41:22-10.200.16.10:51438.service. Sep 6 01:18:43.104872 sshd[1737]: Accepted publickey for core from 10.200.16.10 port 51438 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:18:43.107651 sshd[1737]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:18:43.111542 systemd-logind[1438]: New session 8 of user core. Sep 6 01:18:43.112045 systemd[1]: Started session-8.scope. Sep 6 01:18:43.361044 sudo[1741]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Sep 6 01:18:43.361956 sudo[1741]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 6 01:18:43.364996 sudo[1741]: pam_unix(sudo:session): session closed for user root Sep 6 01:18:43.369875 sudo[1740]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Sep 6 01:18:43.370096 sudo[1740]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 6 01:18:43.379075 systemd[1]: Stopping audit-rules.service... Sep 6 01:18:43.379000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 6 01:18:43.380605 auditctl[1744]: No rules Sep 6 01:18:43.384252 kernel: kauditd_printk_skb: 142 callbacks suppressed Sep 6 01:18:43.384307 kernel: audit: type=1305 audit(1757121523.379:223): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 6 01:18:43.384608 systemd[1]: audit-rules.service: Deactivated successfully. Sep 6 01:18:43.384806 systemd[1]: Stopped audit-rules.service. Sep 6 01:18:43.386537 systemd[1]: Starting audit-rules.service... Sep 6 01:18:43.379000 audit[1744]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe028da20 a2=420 a3=0 items=0 ppid=1 pid=1744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:18:43.418193 kernel: audit: type=1300 audit(1757121523.379:223): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe028da20 a2=420 a3=0 items=0 ppid=1 pid=1744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:18:43.418284 kernel: audit: type=1327 audit(1757121523.379:223): proctitle=2F7362696E2F617564697463746C002D44 Sep 6 01:18:43.379000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Sep 6 01:18:43.419304 augenrules[1761]: No rules Sep 6 01:18:43.420342 systemd[1]: Finished audit-rules.service. Sep 6 01:18:43.384000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:18:43.440871 kernel: audit: type=1131 audit(1757121523.384:224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:18:43.441095 sudo[1740]: pam_unix(sudo:session): session closed for user root Sep 6 01:18:43.419000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:18:43.457521 kernel: audit: type=1130 audit(1757121523.419:225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:18:43.457605 kernel: audit: type=1106 audit(1757121523.440:226): pid=1740 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 01:18:43.440000 audit[1740]: USER_END pid=1740 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 01:18:43.440000 audit[1740]: CRED_DISP pid=1740 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 01:18:43.492067 kernel: audit: type=1104 audit(1757121523.440:227): pid=1740 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 01:18:43.525981 sshd[1737]: pam_unix(sshd:session): session closed for user core Sep 6 01:18:43.526000 audit[1737]: USER_END pid=1737 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:18:43.551796 systemd[1]: sshd@5-10.200.20.41:22-10.200.16.10:51438.service: Deactivated successfully. Sep 6 01:18:43.526000 audit[1737]: CRED_DISP pid=1737 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:18:43.552524 systemd[1]: session-8.scope: Deactivated successfully. Sep 6 01:18:43.571798 kernel: audit: type=1106 audit(1757121523.526:228): pid=1737 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:18:43.571874 kernel: audit: type=1104 audit(1757121523.526:229): pid=1737 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:18:43.551000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.41:22-10.200.16.10:51438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:18:43.572387 systemd-logind[1438]: Session 8 logged out. Waiting for processes to exit. Sep 6 01:18:43.591781 kernel: audit: type=1131 audit(1757121523.551:230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.41:22-10.200.16.10:51438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:18:43.593956 systemd-logind[1438]: Removed session 8. Sep 6 01:18:43.595360 systemd[1]: Started sshd@6-10.200.20.41:22-10.200.16.10:51448.service. Sep 6 01:18:43.594000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.41:22-10.200.16.10:51448 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:18:44.042000 audit[1767]: USER_ACCT pid=1767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:18:44.043250 sshd[1767]: Accepted publickey for core from 10.200.16.10 port 51448 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:18:44.043000 audit[1767]: CRED_ACQ pid=1767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:18:44.043000 audit[1767]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffdac5bc0 a2=3 a3=1 items=0 ppid=1 pid=1767 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:18:44.043000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:18:44.044977 sshd[1767]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:18:44.049225 systemd[1]: Started session-9.scope. Sep 6 01:18:44.049653 systemd-logind[1438]: New session 9 of user core. Sep 6 01:18:44.053000 audit[1767]: USER_START pid=1767 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:18:44.054000 audit[1769]: CRED_ACQ pid=1769 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:18:44.298000 audit[1770]: USER_ACCT pid=1770 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 01:18:44.299583 sudo[1770]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Sep 6 01:18:44.299000 audit[1770]: CRED_REFR pid=1770 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 01:18:44.300167 sudo[1770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 6 01:18:44.300000 audit[1770]: USER_START pid=1770 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 01:18:44.321811 systemd[1]: Starting docker.service... Sep 6 01:18:44.369984 env[1780]: time="2025-09-06T01:18:44.369929175Z" level=info msg="Starting up" Sep 6 01:18:44.371311 env[1780]: time="2025-09-06T01:18:44.371279254Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 6 01:18:44.371475 env[1780]: time="2025-09-06T01:18:44.371460094Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 6 01:18:44.371566 env[1780]: time="2025-09-06T01:18:44.371549534Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 6 01:18:44.371622 env[1780]: time="2025-09-06T01:18:44.371610574Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 6 01:18:44.373812 env[1780]: time="2025-09-06T01:18:44.373773733Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 6 01:18:44.373812 env[1780]: time="2025-09-06T01:18:44.373802693Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 6 01:18:44.373946 env[1780]: time="2025-09-06T01:18:44.373824133Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 6 01:18:44.373946 env[1780]: time="2025-09-06T01:18:44.373835413Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 6 01:18:44.452050 env[1780]: time="2025-09-06T01:18:44.451630071Z" level=info msg="Loading containers: start." Sep 6 01:18:44.535000 audit[1808]: NETFILTER_CFG table=nat:5 family=2 entries=2 op=nft_register_chain pid=1808 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:18:44.535000 audit[1808]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffccba1170 a2=0 a3=1 items=0 ppid=1780 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:18:44.535000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Sep 6 01:18:44.536000 audit[1810]: NETFILTER_CFG table=filter:6 family=2 entries=2 op=nft_register_chain pid=1810 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:18:44.536000 audit[1810]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffe0929860 a2=0 a3=1 items=0 ppid=1780 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:18:44.536000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Sep 6 01:18:44.538000 audit[1812]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_chain pid=1812 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:18:44.538000 audit[1812]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffe3e3fa40 a2=0 a3=1 items=0 ppid=1780 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:18:44.538000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 6 01:18:44.540000 audit[1814]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1814 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:18:44.540000 audit[1814]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffc2954960 a2=0 a3=1 items=0 ppid=1780 pid=1814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:18:44.540000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 6 01:18:44.542000 audit[1816]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1816 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:18:44.542000 audit[1816]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff2583f80 a2=0 a3=1 items=0 ppid=1780 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:18:44.542000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Sep 6 01:18:44.544000 audit[1818]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_rule pid=1818 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:18:44.544000 audit[1818]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffffeb3eb40 a2=0 a3=1 items=0 ppid=1780 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:18:44.544000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Sep 6 01:18:44.565000 audit[1820]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_chain pid=1820 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:18:44.565000 audit[1820]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc9585b80 a2=0 a3=1 items=0 ppid=1780 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:18:44.565000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Sep 6 01:18:44.568000 audit[1822]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1822 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:18:44.568000 audit[1822]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffcb77e9a0 a2=0 a3=1 items=0 ppid=1780 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:18:44.568000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Sep 6 01:18:44.570000 audit[1824]: NETFILTER_CFG table=filter:13 family=2 entries=2 op=nft_register_chain pid=1824 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:18:44.570000 audit[1824]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffd781bd80 a2=0 a3=1 items=0 ppid=1780 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:18:44.570000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 6 01:18:44.587000 audit[1828]: NETFILTER_CFG table=filter:14 family=2 entries=1 op=nft_unregister_rule pid=1828 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:18:44.587000 audit[1828]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffdd289780 a2=0 a3=1 items=0 ppid=1780 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:18:44.587000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 6 01:18:44.593000 audit[1829]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1829 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:18:44.593000 audit[1829]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffcf30a150 a2=0 a3=1 items=0 ppid=1780 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:18:44.593000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 6 01:18:44.635773 kernel: Initializing XFRM netlink socket Sep 6 01:18:44.678772 env[1780]: time="2025-09-06T01:18:44.678720807Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Sep 6 01:18:44.764000 audit[1837]: NETFILTER_CFG table=nat:16 family=2 entries=2 op=nft_register_chain pid=1837 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:18:44.764000 audit[1837]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffebcbe670 a2=0 a3=1 items=0 ppid=1780 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:18:44.764000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Sep 6 01:18:44.791000 audit[1840]: NETFILTER_CFG table=nat:17 family=2 entries=1 op=nft_register_rule pid=1840 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:18:44.791000 audit[1840]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffe124ce40 a2=0 a3=1 items=0 ppid=1780 pid=1840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:18:44.791000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Sep 6 01:18:44.794000 audit[1843]: NETFILTER_CFG table=filter:18 family=2 entries=1 op=nft_register_rule pid=1843 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:18:44.794000 audit[1843]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffe9734460 a2=0 a3=1 items=0 ppid=1780 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:18:44.794000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Sep 6 01:18:44.796000 audit[1845]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1845 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:18:44.796000 audit[1845]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc3b0d1f0 a2=0 a3=1 items=0 ppid=1780 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:18:44.796000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Sep 6 01:18:44.798000 audit[1847]: NETFILTER_CFG table=nat:20 family=2 entries=2 op=nft_register_chain pid=1847 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:18:44.798000 audit[1847]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffd1c465a0 a2=0 a3=1 items=0 ppid=1780 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:18:44.798000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Sep 6 01:18:44.800000 audit[1849]: NETFILTER_CFG table=nat:21 family=2 entries=2 op=nft_register_chain pid=1849 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:18:44.800000 audit[1849]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffebbdae30 a2=0 a3=1 items=0 ppid=1780 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:18:44.800000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Sep 6 01:18:44.802000 audit[1851]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1851 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:18:44.802000 audit[1851]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffd5759ff0 a2=0 a3=1 items=0 ppid=1780 pid=1851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:18:44.802000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Sep 6 01:18:44.804000 audit[1853]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1853 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:18:44.804000 audit[1853]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffef23f3c0 a2=0 a3=1 items=0 ppid=1780 pid=1853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:18:44.804000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Sep 6 01:18:44.806000 audit[1855]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_register_rule pid=1855 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:18:44.806000 audit[1855]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffce850c00 a2=0 a3=1 items=0 ppid=1780 pid=1855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:18:44.806000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 6 01:18:44.808000 audit[1857]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1857 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:18:44.808000 audit[1857]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffc40df590 a2=0 a3=1 items=0 ppid=1780 pid=1857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:18:44.808000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 6 01:18:44.810000 audit[1859]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1859 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:18:44.810000 audit[1859]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffffe9b26c0 a2=0 a3=1 items=0 ppid=1780 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:18:44.810000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Sep 6 01:18:44.811513 systemd-networkd[1603]: docker0: Link UP Sep 6 01:18:44.838000 audit[1863]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_unregister_rule pid=1863 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:18:44.838000 audit[1863]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffcbe357a0 a2=0 a3=1 items=0 ppid=1780 pid=1863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:18:44.838000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 6 01:18:44.851000 audit[1864]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_register_rule pid=1864 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:18:44.851000 audit[1864]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffff1688e90 a2=0 a3=1 items=0 ppid=1780 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:18:44.851000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 6 01:18:44.852367 env[1780]: time="2025-09-06T01:18:44.852340037Z" level=info msg="Loading containers: done." Sep 6 01:18:44.864946 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck730015939-merged.mount: Deactivated successfully. Sep 6 01:18:44.922386 env[1780]: time="2025-09-06T01:18:44.922343417Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Sep 6 01:18:44.922821 env[1780]: time="2025-09-06T01:18:44.922803137Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Sep 6 01:18:44.923050 env[1780]: time="2025-09-06T01:18:44.923035457Z" level=info msg="Daemon has completed initialization" Sep 6 01:18:44.955000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:18:44.955839 systemd[1]: Started docker.service. Sep 6 01:18:44.961625 env[1780]: time="2025-09-06T01:18:44.961551366Z" level=info msg="API listen on /run/docker.sock" Sep 6 01:18:45.735601 kernel: hv_balloon: Max. dynamic memory size: 4096 MB Sep 6 01:18:46.617195 env[1448]: time="2025-09-06T01:18:46.617151175Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.8\"" Sep 6 01:18:47.514559 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3464003958.mount: Deactivated successfully. Sep 6 01:18:47.756000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:18:47.756000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:18:47.757212 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 4. Sep 6 01:18:47.757378 systemd[1]: Stopped kubelet.service. Sep 6 01:18:47.758887 systemd[1]: Starting kubelet.service... Sep 6 01:18:47.882000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:18:47.882697 systemd[1]: Started kubelet.service. Sep 6 01:18:47.975092 kubelet[1902]: E0906 01:18:47.975050 1902 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 01:18:47.977000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 01:18:47.977486 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 01:18:47.977603 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 01:18:49.476297 env[1448]: time="2025-09-06T01:18:49.476247007Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.32.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:18:49.483587 env[1448]: time="2025-09-06T01:18:49.483547806Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:61d628eec7e2101b908b4476f1e8e620490a9e8754184860c8eed25183acaa8a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:18:49.487772 env[1448]: time="2025-09-06T01:18:49.487686765Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.32.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:18:49.492844 env[1448]: time="2025-09-06T01:18:49.492796244Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:6e1a2f9b24f69ee77d0c0edaf32b31fdbb5e1a613f4476272197e6e1e239050b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:18:49.493671 env[1448]: time="2025-09-06T01:18:49.493643484Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.8\" returns image reference \"sha256:61d628eec7e2101b908b4476f1e8e620490a9e8754184860c8eed25183acaa8a\"" Sep 6 01:18:49.494486 env[1448]: time="2025-09-06T01:18:49.494455523Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.8\"" Sep 6 01:18:50.873940 env[1448]: time="2025-09-06T01:18:50.873888891Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.32.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:18:50.880555 env[1448]: time="2025-09-06T01:18:50.880508889Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f17de36e40fc7cc372be0021b2c58ad61f05d3ebe4d430551bc5e4cd9ed2a061,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:18:50.885668 env[1448]: time="2025-09-06T01:18:50.885618728Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.32.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:18:50.890117 env[1448]: time="2025-09-06T01:18:50.890078087Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:8788ccd28ceed9e2e5f8fc31375ef5771df8ea6e518b362c9a06f3cc709cd6c7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:18:50.890833 env[1448]: time="2025-09-06T01:18:50.890798687Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.8\" returns image reference \"sha256:f17de36e40fc7cc372be0021b2c58ad61f05d3ebe4d430551bc5e4cd9ed2a061\"" Sep 6 01:18:50.891422 env[1448]: time="2025-09-06T01:18:50.891396727Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.8\"" Sep 6 01:18:51.474379 update_engine[1440]: I0906 01:18:51.473759 1440 update_attempter.cc:509] Updating boot flags... Sep 6 01:18:52.298016 env[1448]: time="2025-09-06T01:18:52.297959955Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.32.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:18:52.304770 env[1448]: time="2025-09-06T01:18:52.304706154Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:fe86d26bce3ccd5f0c4057c205b63fde1c8c752778025aea4605ffc3b0f80211,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:18:52.309409 env[1448]: time="2025-09-06T01:18:52.309361753Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.32.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:18:52.314747 env[1448]: time="2025-09-06T01:18:52.314698072Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:43c58bcbd1c7812dd19f8bfa5ae11093ebefd28699453ce86fc710869e155cd4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:18:52.315685 env[1448]: time="2025-09-06T01:18:52.315650032Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.8\" returns image reference \"sha256:fe86d26bce3ccd5f0c4057c205b63fde1c8c752778025aea4605ffc3b0f80211\"" Sep 6 01:18:52.316888 env[1448]: time="2025-09-06T01:18:52.316854192Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.8\"" Sep 6 01:18:53.610001 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount64929071.mount: Deactivated successfully. Sep 6 01:18:54.140232 env[1448]: time="2025-09-06T01:18:54.140170056Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.32.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:18:54.147115 env[1448]: time="2025-09-06T01:18:54.147072735Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2cf30e39f99f8f4ee1a736a4f3175cc2d8d3f58936d8fa83ec5523658fdc7b8b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:18:54.153377 env[1448]: time="2025-09-06T01:18:54.153340214Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.32.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:18:54.157118 env[1448]: time="2025-09-06T01:18:54.157080413Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:adc1335b480ddd833aac3b0bd20f68ff0f3c3cf7a0bd337933b006d9f5cec40a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:18:54.157427 env[1448]: time="2025-09-06T01:18:54.157391893Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.8\" returns image reference \"sha256:2cf30e39f99f8f4ee1a736a4f3175cc2d8d3f58936d8fa83ec5523658fdc7b8b\"" Sep 6 01:18:54.157926 env[1448]: time="2025-09-06T01:18:54.157890853Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Sep 6 01:18:54.829970 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4197224331.mount: Deactivated successfully. Sep 6 01:18:55.994681 env[1448]: time="2025-09-06T01:18:55.994634149Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:18:56.001087 env[1448]: time="2025-09-06T01:18:56.001049268Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:18:56.006667 env[1448]: time="2025-09-06T01:18:56.006627507Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:18:56.012061 env[1448]: time="2025-09-06T01:18:56.011993266Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:18:56.012956 env[1448]: time="2025-09-06T01:18:56.012920546Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4\"" Sep 6 01:18:56.013501 env[1448]: time="2025-09-06T01:18:56.013474666Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Sep 6 01:18:56.673951 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount751898271.mount: Deactivated successfully. Sep 6 01:18:56.702141 env[1448]: time="2025-09-06T01:18:56.702091416Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:18:56.711264 env[1448]: time="2025-09-06T01:18:56.711227735Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:18:56.715796 env[1448]: time="2025-09-06T01:18:56.715728934Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:18:56.721998 env[1448]: time="2025-09-06T01:18:56.721953133Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:18:56.722678 env[1448]: time="2025-09-06T01:18:56.722643013Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Sep 6 01:18:56.723662 env[1448]: time="2025-09-06T01:18:56.723627853Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\"" Sep 6 01:18:58.007268 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 5. Sep 6 01:18:58.007434 systemd[1]: Stopped kubelet.service. Sep 6 01:18:58.030672 kernel: kauditd_printk_skb: 88 callbacks suppressed Sep 6 01:18:58.030786 kernel: audit: type=1130 audit(1757121538.006:269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:18:58.006000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:18:58.008987 systemd[1]: Starting kubelet.service... Sep 6 01:18:58.006000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:18:58.047554 kernel: audit: type=1131 audit(1757121538.006:270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:18:58.104602 systemd[1]: Started kubelet.service. Sep 6 01:18:58.104000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:18:58.122855 kernel: audit: type=1130 audit(1757121538.104:271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:18:58.245041 kubelet[1954]: E0906 01:18:58.245001 1954 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 01:18:58.246812 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 01:18:58.246939 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 01:18:58.246000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 01:18:58.265803 kernel: audit: type=1131 audit(1757121538.246:272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 01:18:58.822659 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1703141159.mount: Deactivated successfully. Sep 6 01:19:01.141977 env[1448]: time="2025-09-06T01:19:01.141907036Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:01.162721 env[1448]: time="2025-09-06T01:19:01.162664194Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:01.167081 env[1448]: time="2025-09-06T01:19:01.167028914Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:01.207656 env[1448]: time="2025-09-06T01:19:01.207613790Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:c6a9d11cc5c04b114ccdef39a9265eeef818e3d02f5359be035ae784097fdec5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:01.208635 env[1448]: time="2025-09-06T01:19:01.208596350Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\" returns image reference \"sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82\"" Sep 6 01:19:06.528061 systemd[1]: Stopped kubelet.service. Sep 6 01:19:06.527000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:06.531252 systemd[1]: Starting kubelet.service... Sep 6 01:19:06.528000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:06.570769 kernel: audit: type=1130 audit(1757121546.527:273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:06.570900 kernel: audit: type=1131 audit(1757121546.528:274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:06.594173 systemd[1]: Reloading. Sep 6 01:19:06.681965 /usr/lib/systemd/system-generators/torcx-generator[2006]: time="2025-09-06T01:19:06Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 6 01:19:06.681995 /usr/lib/systemd/system-generators/torcx-generator[2006]: time="2025-09-06T01:19:06Z" level=info msg="torcx already run" Sep 6 01:19:06.760577 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 6 01:19:06.760794 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 6 01:19:06.777250 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 6 01:19:06.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.887637 kernel: audit: type=1400 audit(1757121546.849:275): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.887725 kernel: audit: type=1400 audit(1757121546.849:276): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.904464 kernel: audit: type=1400 audit(1757121546.849:277): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.925565 kernel: audit: type=1400 audit(1757121546.849:278): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.925691 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Sep 6 01:19:06.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.946468 kernel: audit: type=1400 audit(1757121546.849:279): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.946585 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Sep 6 01:19:06.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.969325 kernel: audit: type=1400 audit(1757121546.849:280): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.868000 audit: BPF prog-id=47 op=LOAD Sep 6 01:19:06.868000 audit: BPF prog-id=39 op=UNLOAD Sep 6 01:19:06.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.869000 audit: BPF prog-id=48 op=LOAD Sep 6 01:19:06.869000 audit: BPF prog-id=46 op=UNLOAD Sep 6 01:19:06.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.886000 audit: BPF prog-id=49 op=LOAD Sep 6 01:19:06.886000 audit: BPF prog-id=31 op=UNLOAD Sep 6 01:19:06.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.887000 audit: BPF prog-id=50 op=LOAD Sep 6 01:19:06.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.903000 audit: BPF prog-id=51 op=LOAD Sep 6 01:19:06.903000 audit: BPF prog-id=32 op=UNLOAD Sep 6 01:19:06.903000 audit: BPF prog-id=33 op=UNLOAD Sep 6 01:19:06.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.921000 audit: BPF prog-id=52 op=LOAD Sep 6 01:19:06.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit: BPF prog-id=56 op=LOAD Sep 6 01:19:06.970000 audit: BPF prog-id=41 op=UNLOAD Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit: BPF prog-id=57 op=LOAD Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.970000 audit: BPF prog-id=37 op=UNLOAD Sep 6 01:19:06.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:06.971000 audit: BPF prog-id=61 op=LOAD Sep 6 01:19:06.971000 audit: BPF prog-id=40 op=UNLOAD Sep 6 01:19:06.990000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 01:19:06.990987 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM Sep 6 01:19:06.991063 systemd[1]: kubelet.service: Failed with result 'signal'. Sep 6 01:19:06.991429 systemd[1]: Stopped kubelet.service. Sep 6 01:19:06.994617 systemd[1]: Starting kubelet.service... Sep 6 01:19:08.453000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:08.451796 systemd[1]: Started kubelet.service. Sep 6 01:19:08.499565 kubelet[2067]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 6 01:19:08.499565 kubelet[2067]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Sep 6 01:19:08.499565 kubelet[2067]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 6 01:19:08.499985 kubelet[2067]: I0906 01:19:08.499635 2067 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 6 01:19:09.348238 kubelet[2067]: I0906 01:19:09.348198 2067 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Sep 6 01:19:09.348404 kubelet[2067]: I0906 01:19:09.348394 2067 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 6 01:19:09.348755 kubelet[2067]: I0906 01:19:09.348726 2067 server.go:954] "Client rotation is on, will bootstrap in background" Sep 6 01:19:09.372119 kubelet[2067]: E0906 01:19:09.372064 2067 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.200.20.41:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.200.20.41:6443: connect: connection refused" logger="UnhandledError" Sep 6 01:19:09.373813 kubelet[2067]: I0906 01:19:09.373781 2067 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 6 01:19:09.382252 kubelet[2067]: E0906 01:19:09.382211 2067 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 6 01:19:09.382252 kubelet[2067]: I0906 01:19:09.382248 2067 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 6 01:19:09.385340 kubelet[2067]: I0906 01:19:09.385311 2067 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 6 01:19:09.386402 kubelet[2067]: I0906 01:19:09.386356 2067 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 6 01:19:09.386586 kubelet[2067]: I0906 01:19:09.386404 2067 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-3510.3.8-n-f2ea6194e4","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 6 01:19:09.386683 kubelet[2067]: I0906 01:19:09.386596 2067 topology_manager.go:138] "Creating topology manager with none policy" Sep 6 01:19:09.386683 kubelet[2067]: I0906 01:19:09.386605 2067 container_manager_linux.go:304] "Creating device plugin manager" Sep 6 01:19:09.386767 kubelet[2067]: I0906 01:19:09.386735 2067 state_mem.go:36] "Initialized new in-memory state store" Sep 6 01:19:09.389522 kubelet[2067]: I0906 01:19:09.389497 2067 kubelet.go:446] "Attempting to sync node with API server" Sep 6 01:19:09.389522 kubelet[2067]: I0906 01:19:09.389525 2067 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 6 01:19:09.389633 kubelet[2067]: I0906 01:19:09.389549 2067 kubelet.go:352] "Adding apiserver pod source" Sep 6 01:19:09.389633 kubelet[2067]: I0906 01:19:09.389564 2067 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 6 01:19:09.399180 kubelet[2067]: W0906 01:19:09.399048 2067 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.200.20.41:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.200.20.41:6443: connect: connection refused Sep 6 01:19:09.399180 kubelet[2067]: E0906 01:19:09.399131 2067 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.200.20.41:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.200.20.41:6443: connect: connection refused" logger="UnhandledError" Sep 6 01:19:09.399365 kubelet[2067]: W0906 01:19:09.399213 2067 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.200.20.41:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-f2ea6194e4&limit=500&resourceVersion=0": dial tcp 10.200.20.41:6443: connect: connection refused Sep 6 01:19:09.399365 kubelet[2067]: E0906 01:19:09.399246 2067 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.200.20.41:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-f2ea6194e4&limit=500&resourceVersion=0\": dial tcp 10.200.20.41:6443: connect: connection refused" logger="UnhandledError" Sep 6 01:19:09.399422 kubelet[2067]: I0906 01:19:09.399371 2067 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 6 01:19:09.399878 kubelet[2067]: I0906 01:19:09.399851 2067 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Sep 6 01:19:09.399941 kubelet[2067]: W0906 01:19:09.399915 2067 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Sep 6 01:19:09.401640 kubelet[2067]: I0906 01:19:09.401601 2067 watchdog_linux.go:99] "Systemd watchdog is not enabled" Sep 6 01:19:09.401640 kubelet[2067]: I0906 01:19:09.401642 2067 server.go:1287] "Started kubelet" Sep 6 01:19:09.406000 audit[2067]: AVC avc: denied { mac_admin } for pid=2067 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:09.406000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 01:19:09.406000 audit[2067]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400086eab0 a1=4000996240 a2=400086ea80 a3=25 items=0 ppid=1 pid=2067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:09.406000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 01:19:09.406000 audit[2067]: AVC avc: denied { mac_admin } for pid=2067 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:09.406000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 01:19:09.406000 audit[2067]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40009a5a80 a1=4000996258 a2=400086eb40 a3=25 items=0 ppid=1 pid=2067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:09.406000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 01:19:09.407527 kubelet[2067]: I0906 01:19:09.407109 2067 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Sep 6 01:19:09.407527 kubelet[2067]: I0906 01:19:09.407152 2067 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Sep 6 01:19:09.407527 kubelet[2067]: I0906 01:19:09.407229 2067 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 6 01:19:09.411618 kubelet[2067]: E0906 01:19:09.411472 2067 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.200.20.41:6443/api/v1/namespaces/default/events\": dial tcp 10.200.20.41:6443: connect: connection refused" event="&Event{ObjectMeta:{ci-3510.3.8-n-f2ea6194e4.18628cbd534492f9 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ci-3510.3.8-n-f2ea6194e4,UID:ci-3510.3.8-n-f2ea6194e4,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ci-3510.3.8-n-f2ea6194e4,},FirstTimestamp:2025-09-06 01:19:09.401625337 +0000 UTC m=+0.945246394,LastTimestamp:2025-09-06 01:19:09.401625337 +0000 UTC m=+0.945246394,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ci-3510.3.8-n-f2ea6194e4,}" Sep 6 01:19:09.411000 audit[2079]: NETFILTER_CFG table=mangle:29 family=2 entries=2 op=nft_register_chain pid=2079 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:19:09.411000 audit[2079]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff4218010 a2=0 a3=1 items=0 ppid=2067 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:09.411000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 6 01:19:09.412000 audit[2080]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_chain pid=2080 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:19:09.412000 audit[2080]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc0598dd0 a2=0 a3=1 items=0 ppid=2067 pid=2080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:09.412000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 6 01:19:09.414491 kubelet[2067]: I0906 01:19:09.414460 2067 volume_manager.go:297] "Starting Kubelet Volume Manager" Sep 6 01:19:09.414659 kubelet[2067]: I0906 01:19:09.414617 2067 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 6 01:19:09.414773 kubelet[2067]: E0906 01:19:09.414718 2067 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-f2ea6194e4\" not found" Sep 6 01:19:09.415083 kubelet[2067]: I0906 01:19:09.415060 2067 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 6 01:19:09.415389 kubelet[2067]: I0906 01:19:09.415370 2067 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 6 01:19:09.415000 audit[2082]: NETFILTER_CFG table=filter:31 family=2 entries=2 op=nft_register_chain pid=2082 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:19:09.415000 audit[2082]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd2733710 a2=0 a3=1 items=0 ppid=2067 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:09.415000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 6 01:19:09.417168 kubelet[2067]: E0906 01:19:09.417136 2067 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.41:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-f2ea6194e4?timeout=10s\": dial tcp 10.200.20.41:6443: connect: connection refused" interval="200ms" Sep 6 01:19:09.417503 kubelet[2067]: I0906 01:19:09.417480 2067 factory.go:221] Registration of the systemd container factory successfully Sep 6 01:19:09.417891 kubelet[2067]: I0906 01:19:09.417794 2067 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Sep 6 01:19:09.417891 kubelet[2067]: I0906 01:19:09.414448 2067 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Sep 6 01:19:09.418118 kubelet[2067]: I0906 01:19:09.418094 2067 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 6 01:19:09.419167 kubelet[2067]: I0906 01:19:09.418948 2067 server.go:479] "Adding debug handlers to kubelet server" Sep 6 01:19:09.419393 kubelet[2067]: I0906 01:19:09.419376 2067 factory.go:221] Registration of the containerd container factory successfully Sep 6 01:19:09.420099 kubelet[2067]: I0906 01:19:09.420072 2067 reconciler.go:26] "Reconciler: start to sync state" Sep 6 01:19:09.420000 audit[2084]: NETFILTER_CFG table=filter:32 family=2 entries=2 op=nft_register_chain pid=2084 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:19:09.420000 audit[2084]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe6ccb890 a2=0 a3=1 items=0 ppid=2067 pid=2084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:09.420000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 6 01:19:09.425657 kubelet[2067]: W0906 01:19:09.425600 2067 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.200.20.41:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.41:6443: connect: connection refused Sep 6 01:19:09.425903 kubelet[2067]: E0906 01:19:09.425883 2067 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.200.20.41:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.200.20.41:6443: connect: connection refused" logger="UnhandledError" Sep 6 01:19:09.426233 kubelet[2067]: E0906 01:19:09.426215 2067 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Sep 6 01:19:09.514823 kubelet[2067]: E0906 01:19:09.514792 2067 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-f2ea6194e4\" not found" Sep 6 01:19:09.515000 audit[2091]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=2091 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:19:09.515000 audit[2091]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffc5b0b690 a2=0 a3=1 items=0 ppid=2067 pid=2091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:09.515000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Sep 6 01:19:09.516551 kubelet[2067]: I0906 01:19:09.516513 2067 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Sep 6 01:19:09.516000 audit[2092]: NETFILTER_CFG table=mangle:34 family=10 entries=2 op=nft_register_chain pid=2092 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:19:09.516000 audit[2092]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffeadd8bb0 a2=0 a3=1 items=0 ppid=2067 pid=2092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:09.516000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 6 01:19:09.516000 audit[2093]: NETFILTER_CFG table=mangle:35 family=2 entries=1 op=nft_register_chain pid=2093 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:19:09.516000 audit[2093]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc8997870 a2=0 a3=1 items=0 ppid=2067 pid=2093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:09.516000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 6 01:19:09.518304 kubelet[2067]: I0906 01:19:09.518263 2067 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Sep 6 01:19:09.518304 kubelet[2067]: I0906 01:19:09.518303 2067 status_manager.go:227] "Starting to sync pod status with apiserver" Sep 6 01:19:09.518402 kubelet[2067]: I0906 01:19:09.518325 2067 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Sep 6 01:19:09.518402 kubelet[2067]: I0906 01:19:09.518331 2067 kubelet.go:2382] "Starting kubelet main sync loop" Sep 6 01:19:09.518402 kubelet[2067]: E0906 01:19:09.518372 2067 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Sep 6 01:19:09.519475 kubelet[2067]: W0906 01:19:09.519429 2067 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.200.20.41:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.41:6443: connect: connection refused Sep 6 01:19:09.519566 kubelet[2067]: E0906 01:19:09.519485 2067 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.200.20.41:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.200.20.41:6443: connect: connection refused" logger="UnhandledError" Sep 6 01:19:09.519000 audit[2095]: NETFILTER_CFG table=mangle:36 family=10 entries=1 op=nft_register_chain pid=2095 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:19:09.519000 audit[2095]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd96a59a0 a2=0 a3=1 items=0 ppid=2067 pid=2095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:09.519000 audit[2094]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_chain pid=2094 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:19:09.519000 audit[2094]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcd3b0460 a2=0 a3=1 items=0 ppid=2067 pid=2094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:09.519000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 6 01:19:09.519000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 6 01:19:09.521000 audit[2098]: NETFILTER_CFG table=nat:38 family=10 entries=2 op=nft_register_chain pid=2098 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:19:09.521000 audit[2098]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffd8e59680 a2=0 a3=1 items=0 ppid=2067 pid=2098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:09.521000 audit[2097]: NETFILTER_CFG table=filter:39 family=2 entries=1 op=nft_register_chain pid=2097 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:19:09.521000 audit[2097]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffeb1074c0 a2=0 a3=1 items=0 ppid=2067 pid=2097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:09.521000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 6 01:19:09.521000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 6 01:19:09.522000 audit[2099]: NETFILTER_CFG table=filter:40 family=10 entries=2 op=nft_register_chain pid=2099 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:19:09.522000 audit[2099]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe80e9cd0 a2=0 a3=1 items=0 ppid=2067 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:09.522000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 6 01:19:09.617670 kubelet[2067]: E0906 01:19:09.615794 2067 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-f2ea6194e4\" not found" Sep 6 01:19:09.618296 kubelet[2067]: E0906 01:19:09.618260 2067 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.41:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-f2ea6194e4?timeout=10s\": dial tcp 10.200.20.41:6443: connect: connection refused" interval="400ms" Sep 6 01:19:09.619409 kubelet[2067]: E0906 01:19:09.619392 2067 kubelet.go:2406] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Sep 6 01:19:09.714331 kubelet[2067]: I0906 01:19:09.714296 2067 cpu_manager.go:221] "Starting CPU manager" policy="none" Sep 6 01:19:09.714331 kubelet[2067]: I0906 01:19:09.714323 2067 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Sep 6 01:19:09.714468 kubelet[2067]: I0906 01:19:09.714344 2067 state_mem.go:36] "Initialized new in-memory state store" Sep 6 01:19:09.716815 kubelet[2067]: E0906 01:19:09.716784 2067 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-f2ea6194e4\" not found" Sep 6 01:19:09.720277 kubelet[2067]: I0906 01:19:09.720258 2067 policy_none.go:49] "None policy: Start" Sep 6 01:19:09.720334 kubelet[2067]: I0906 01:19:09.720282 2067 memory_manager.go:186] "Starting memorymanager" policy="None" Sep 6 01:19:09.720334 kubelet[2067]: I0906 01:19:09.720294 2067 state_mem.go:35] "Initializing new in-memory state store" Sep 6 01:19:09.728808 systemd[1]: Created slice kubepods.slice. Sep 6 01:19:09.733353 systemd[1]: Created slice kubepods-burstable.slice. Sep 6 01:19:09.736513 systemd[1]: Created slice kubepods-besteffort.slice. Sep 6 01:19:09.744593 kubelet[2067]: I0906 01:19:09.744565 2067 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Sep 6 01:19:09.743000 audit[2067]: AVC avc: denied { mac_admin } for pid=2067 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:09.743000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 01:19:09.743000 audit[2067]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400093e030 a1=4000a413c8 a2=400093e000 a3=25 items=0 ppid=1 pid=2067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:09.743000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 01:19:09.745050 kubelet[2067]: I0906 01:19:09.745032 2067 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Sep 6 01:19:09.745667 kubelet[2067]: I0906 01:19:09.745648 2067 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 6 01:19:09.745806 kubelet[2067]: I0906 01:19:09.745765 2067 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 6 01:19:09.746243 kubelet[2067]: I0906 01:19:09.746229 2067 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 6 01:19:09.747557 kubelet[2067]: E0906 01:19:09.747533 2067 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Sep 6 01:19:09.747696 kubelet[2067]: E0906 01:19:09.747683 2067 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.8-n-f2ea6194e4\" not found" Sep 6 01:19:09.829312 systemd[1]: Created slice kubepods-burstable-pod33cef4bdedbdb4f626917cf412f19563.slice. Sep 6 01:19:09.835573 kubelet[2067]: E0906 01:19:09.835537 2067 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-f2ea6194e4\" not found" node="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:09.838632 systemd[1]: Created slice kubepods-burstable-pod93e8b770d458423086e7188fdb131ff9.slice. Sep 6 01:19:09.844769 kubelet[2067]: E0906 01:19:09.844724 2067 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-f2ea6194e4\" not found" node="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:09.847180 systemd[1]: Created slice kubepods-burstable-pod08a382455f6a388689bba311cdbc8a12.slice. Sep 6 01:19:09.850082 kubelet[2067]: I0906 01:19:09.850058 2067 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:09.850238 kubelet[2067]: E0906 01:19:09.850211 2067 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-f2ea6194e4\" not found" node="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:09.850705 kubelet[2067]: E0906 01:19:09.850673 2067 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.200.20.41:6443/api/v1/nodes\": dial tcp 10.200.20.41:6443: connect: connection refused" node="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:09.922336 kubelet[2067]: I0906 01:19:09.921678 2067 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/08a382455f6a388689bba311cdbc8a12-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.8-n-f2ea6194e4\" (UID: \"08a382455f6a388689bba311cdbc8a12\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:09.922336 kubelet[2067]: I0906 01:19:09.921720 2067 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/33cef4bdedbdb4f626917cf412f19563-k8s-certs\") pod \"kube-apiserver-ci-3510.3.8-n-f2ea6194e4\" (UID: \"33cef4bdedbdb4f626917cf412f19563\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:09.922336 kubelet[2067]: I0906 01:19:09.921740 2067 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/08a382455f6a388689bba311cdbc8a12-ca-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-f2ea6194e4\" (UID: \"08a382455f6a388689bba311cdbc8a12\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:09.922336 kubelet[2067]: I0906 01:19:09.921774 2067 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/08a382455f6a388689bba311cdbc8a12-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-f2ea6194e4\" (UID: \"08a382455f6a388689bba311cdbc8a12\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:09.922336 kubelet[2067]: I0906 01:19:09.921791 2067 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/08a382455f6a388689bba311cdbc8a12-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.8-n-f2ea6194e4\" (UID: \"08a382455f6a388689bba311cdbc8a12\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:09.922591 kubelet[2067]: I0906 01:19:09.921808 2067 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/93e8b770d458423086e7188fdb131ff9-kubeconfig\") pod \"kube-scheduler-ci-3510.3.8-n-f2ea6194e4\" (UID: \"93e8b770d458423086e7188fdb131ff9\") " pod="kube-system/kube-scheduler-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:09.922591 kubelet[2067]: I0906 01:19:09.921823 2067 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/33cef4bdedbdb4f626917cf412f19563-ca-certs\") pod \"kube-apiserver-ci-3510.3.8-n-f2ea6194e4\" (UID: \"33cef4bdedbdb4f626917cf412f19563\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:09.922591 kubelet[2067]: I0906 01:19:09.921838 2067 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/33cef4bdedbdb4f626917cf412f19563-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.8-n-f2ea6194e4\" (UID: \"33cef4bdedbdb4f626917cf412f19563\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:09.922591 kubelet[2067]: I0906 01:19:09.921853 2067 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/08a382455f6a388689bba311cdbc8a12-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.8-n-f2ea6194e4\" (UID: \"08a382455f6a388689bba311cdbc8a12\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:10.019424 kubelet[2067]: E0906 01:19:10.019376 2067 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.41:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-f2ea6194e4?timeout=10s\": dial tcp 10.200.20.41:6443: connect: connection refused" interval="800ms" Sep 6 01:19:10.053422 kubelet[2067]: I0906 01:19:10.053389 2067 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:10.053817 kubelet[2067]: E0906 01:19:10.053787 2067 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.200.20.41:6443/api/v1/nodes\": dial tcp 10.200.20.41:6443: connect: connection refused" node="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:10.137355 env[1448]: time="2025-09-06T01:19:10.137317020Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.8-n-f2ea6194e4,Uid:33cef4bdedbdb4f626917cf412f19563,Namespace:kube-system,Attempt:0,}" Sep 6 01:19:10.147065 env[1448]: time="2025-09-06T01:19:10.147023626Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.8-n-f2ea6194e4,Uid:93e8b770d458423086e7188fdb131ff9,Namespace:kube-system,Attempt:0,}" Sep 6 01:19:10.151042 env[1448]: time="2025-09-06T01:19:10.151003309Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.8-n-f2ea6194e4,Uid:08a382455f6a388689bba311cdbc8a12,Namespace:kube-system,Attempt:0,}" Sep 6 01:19:10.455677 kubelet[2067]: I0906 01:19:10.455643 2067 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:10.456033 kubelet[2067]: E0906 01:19:10.455993 2067 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.200.20.41:6443/api/v1/nodes\": dial tcp 10.200.20.41:6443: connect: connection refused" node="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:10.590016 kubelet[2067]: W0906 01:19:10.589938 2067 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.200.20.41:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.41:6443: connect: connection refused Sep 6 01:19:10.590016 kubelet[2067]: E0906 01:19:10.589982 2067 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.200.20.41:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.200.20.41:6443: connect: connection refused" logger="UnhandledError" Sep 6 01:19:10.797319 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount812288340.mount: Deactivated successfully. Sep 6 01:19:10.820199 kubelet[2067]: E0906 01:19:10.820144 2067 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.41:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-f2ea6194e4?timeout=10s\": dial tcp 10.200.20.41:6443: connect: connection refused" interval="1.6s" Sep 6 01:19:10.828214 env[1448]: time="2025-09-06T01:19:10.828174223Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:10.847177 env[1448]: time="2025-09-06T01:19:10.847129155Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:10.852030 kubelet[2067]: W0906 01:19:10.851953 2067 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.200.20.41:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.41:6443: connect: connection refused Sep 6 01:19:10.852030 kubelet[2067]: E0906 01:19:10.851997 2067 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.200.20.41:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.200.20.41:6443: connect: connection refused" logger="UnhandledError" Sep 6 01:19:10.852634 env[1448]: time="2025-09-06T01:19:10.852582559Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:10.859925 env[1448]: time="2025-09-06T01:19:10.859876004Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:10.868369 env[1448]: time="2025-09-06T01:19:10.868330249Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:10.873626 env[1448]: time="2025-09-06T01:19:10.873588732Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:10.877598 env[1448]: time="2025-09-06T01:19:10.877560095Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:10.880928 env[1448]: time="2025-09-06T01:19:10.880878177Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:10.882907 kubelet[2067]: W0906 01:19:10.882812 2067 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.200.20.41:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-f2ea6194e4&limit=500&resourceVersion=0": dial tcp 10.200.20.41:6443: connect: connection refused Sep 6 01:19:10.882907 kubelet[2067]: E0906 01:19:10.882878 2067 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.200.20.41:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-f2ea6194e4&limit=500&resourceVersion=0\": dial tcp 10.200.20.41:6443: connect: connection refused" logger="UnhandledError" Sep 6 01:19:10.885396 env[1448]: time="2025-09-06T01:19:10.885363420Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:10.890322 env[1448]: time="2025-09-06T01:19:10.890282703Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:10.905018 env[1448]: time="2025-09-06T01:19:10.904976753Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:10.914871 env[1448]: time="2025-09-06T01:19:10.914832159Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:10.932448 kubelet[2067]: W0906 01:19:10.932349 2067 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.200.20.41:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.200.20.41:6443: connect: connection refused Sep 6 01:19:10.932448 kubelet[2067]: E0906 01:19:10.932415 2067 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.200.20.41:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.200.20.41:6443: connect: connection refused" logger="UnhandledError" Sep 6 01:19:10.983717 env[1448]: time="2025-09-06T01:19:10.978859720Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:19:10.983717 env[1448]: time="2025-09-06T01:19:10.978901280Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:19:10.983717 env[1448]: time="2025-09-06T01:19:10.978911720Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:19:10.983717 env[1448]: time="2025-09-06T01:19:10.979028120Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9662ed5eb56d92ec88f140a77c625506f2bbfe168ab983f24ce8aac4599af3d8 pid=2108 runtime=io.containerd.runc.v2 Sep 6 01:19:11.005819 systemd[1]: Started cri-containerd-9662ed5eb56d92ec88f140a77c625506f2bbfe168ab983f24ce8aac4599af3d8.scope. Sep 6 01:19:11.009458 env[1448]: time="2025-09-06T01:19:11.007855098Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:19:11.009458 env[1448]: time="2025-09-06T01:19:11.007895418Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:19:11.009458 env[1448]: time="2025-09-06T01:19:11.007905698Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:19:11.009458 env[1448]: time="2025-09-06T01:19:11.008013219Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d9f85d8ad0ee716aba50294617f80c643838b693f57eb31a5581962c081c967e pid=2134 runtime=io.containerd.runc.v2 Sep 6 01:19:11.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.017000 audit: BPF prog-id=62 op=LOAD Sep 6 01:19:11.018000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.018000 audit[2120]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000149b38 a2=10 a3=0 items=0 ppid=2108 pid=2120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:11.018000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936363265643565623536643932656338386631343061373763363235 Sep 6 01:19:11.018000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.018000 audit[2120]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001495a0 a2=3c a3=0 items=0 ppid=2108 pid=2120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:11.018000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936363265643565623536643932656338386631343061373763363235 Sep 6 01:19:11.018000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.018000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.018000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.018000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.018000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.018000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.018000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.018000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.018000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.018000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.018000 audit: BPF prog-id=63 op=LOAD Sep 6 01:19:11.018000 audit[2120]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001498e0 a2=78 a3=0 items=0 ppid=2108 pid=2120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:11.018000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936363265643565623536643932656338386631343061373763363235 Sep 6 01:19:11.019000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.019000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.019000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.019000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.019000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.019000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.019000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.019000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.019000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.019000 audit: BPF prog-id=64 op=LOAD Sep 6 01:19:11.019000 audit[2120]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000149670 a2=78 a3=0 items=0 ppid=2108 pid=2120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:11.019000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936363265643565623536643932656338386631343061373763363235 Sep 6 01:19:11.020000 audit: BPF prog-id=64 op=UNLOAD Sep 6 01:19:11.020000 audit: BPF prog-id=63 op=UNLOAD Sep 6 01:19:11.020000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.020000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.020000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.020000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.020000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.020000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.020000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.020000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.020000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.020000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.020000 audit: BPF prog-id=65 op=LOAD Sep 6 01:19:11.020000 audit[2120]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000149b40 a2=78 a3=0 items=0 ppid=2108 pid=2120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:11.020000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936363265643565623536643932656338386631343061373763363235 Sep 6 01:19:11.029790 env[1448]: time="2025-09-06T01:19:11.029664032Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:19:11.029790 env[1448]: time="2025-09-06T01:19:11.029718472Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:19:11.029790 env[1448]: time="2025-09-06T01:19:11.029762872Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:19:11.030245 env[1448]: time="2025-09-06T01:19:11.030195912Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/428f1057e0d3ecae6392a0bacec55ba73f6d6b2a8ac665661f040cf9023d31e5 pid=2166 runtime=io.containerd.runc.v2 Sep 6 01:19:11.034578 systemd[1]: Started cri-containerd-d9f85d8ad0ee716aba50294617f80c643838b693f57eb31a5581962c081c967e.scope. Sep 6 01:19:11.064225 systemd[1]: Started cri-containerd-428f1057e0d3ecae6392a0bacec55ba73f6d6b2a8ac665661f040cf9023d31e5.scope. Sep 6 01:19:11.071833 env[1448]: time="2025-09-06T01:19:11.071786618Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.8-n-f2ea6194e4,Uid:08a382455f6a388689bba311cdbc8a12,Namespace:kube-system,Attempt:0,} returns sandbox id \"9662ed5eb56d92ec88f140a77c625506f2bbfe168ab983f24ce8aac4599af3d8\"" Sep 6 01:19:11.075351 env[1448]: time="2025-09-06T01:19:11.075307781Z" level=info msg="CreateContainer within sandbox \"9662ed5eb56d92ec88f140a77c625506f2bbfe168ab983f24ce8aac4599af3d8\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Sep 6 01:19:11.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit: BPF prog-id=66 op=LOAD Sep 6 01:19:11.081000 audit[2154]: AVC avc: denied { bpf } for pid=2154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit[2154]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2134 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:11.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439663835643861643065653731366162613530323934363137663830 Sep 6 01:19:11.081000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit[2154]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2134 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:11.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439663835643861643065653731366162613530323934363137663830 Sep 6 01:19:11.081000 audit[2154]: AVC avc: denied { bpf } for pid=2154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit[2154]: AVC avc: denied { bpf } for pid=2154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit[2154]: AVC avc: denied { bpf } for pid=2154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit[2154]: AVC avc: denied { bpf } for pid=2154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit[2154]: AVC avc: denied { bpf } for pid=2154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit: BPF prog-id=67 op=LOAD Sep 6 01:19:11.081000 audit[2154]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2134 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:11.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439663835643861643065653731366162613530323934363137663830 Sep 6 01:19:11.081000 audit[2154]: AVC avc: denied { bpf } for pid=2154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit[2154]: AVC avc: denied { bpf } for pid=2154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit[2154]: AVC avc: denied { bpf } for pid=2154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit[2154]: AVC avc: denied { bpf } for pid=2154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit: BPF prog-id=68 op=LOAD Sep 6 01:19:11.081000 audit[2154]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2134 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:11.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439663835643861643065653731366162613530323934363137663830 Sep 6 01:19:11.081000 audit: BPF prog-id=68 op=UNLOAD Sep 6 01:19:11.081000 audit: BPF prog-id=67 op=UNLOAD Sep 6 01:19:11.081000 audit[2154]: AVC avc: denied { bpf } for pid=2154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit[2154]: AVC avc: denied { bpf } for pid=2154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit[2154]: AVC avc: denied { bpf } for pid=2154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit[2154]: AVC avc: denied { bpf } for pid=2154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit[2154]: AVC avc: denied { bpf } for pid=2154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.081000 audit: BPF prog-id=69 op=LOAD Sep 6 01:19:11.081000 audit[2154]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2134 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:11.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439663835643861643065653731366162613530323934363137663830 Sep 6 01:19:11.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.085000 audit: BPF prog-id=70 op=LOAD Sep 6 01:19:11.086000 audit[2181]: AVC avc: denied { bpf } for pid=2181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.086000 audit[2181]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=2166 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:11.086000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432386631303537653064336563616536333932613062616365633535 Sep 6 01:19:11.086000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.086000 audit[2181]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=2166 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:11.086000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432386631303537653064336563616536333932613062616365633535 Sep 6 01:19:11.087000 audit[2181]: AVC avc: denied { bpf } for pid=2181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.087000 audit[2181]: AVC avc: denied { bpf } for pid=2181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.087000 audit[2181]: AVC avc: denied { bpf } for pid=2181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.087000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.087000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.087000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.087000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.087000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.087000 audit[2181]: AVC avc: denied { bpf } for pid=2181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.087000 audit[2181]: AVC avc: denied { bpf } for pid=2181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.087000 audit: BPF prog-id=71 op=LOAD Sep 6 01:19:11.087000 audit[2181]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=2166 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:11.087000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432386631303537653064336563616536333932613062616365633535 Sep 6 01:19:11.087000 audit[2181]: AVC avc: denied { bpf } for pid=2181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.087000 audit[2181]: AVC avc: denied { bpf } for pid=2181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.087000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.087000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.087000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.087000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.087000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.087000 audit[2181]: AVC avc: denied { bpf } for pid=2181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.087000 audit[2181]: AVC avc: denied { bpf } for pid=2181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.087000 audit: BPF prog-id=72 op=LOAD Sep 6 01:19:11.087000 audit[2181]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=2166 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:11.087000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432386631303537653064336563616536333932613062616365633535 Sep 6 01:19:11.088000 audit: BPF prog-id=72 op=UNLOAD Sep 6 01:19:11.088000 audit: BPF prog-id=71 op=UNLOAD Sep 6 01:19:11.088000 audit[2181]: AVC avc: denied { bpf } for pid=2181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.088000 audit[2181]: AVC avc: denied { bpf } for pid=2181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.088000 audit[2181]: AVC avc: denied { bpf } for pid=2181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.088000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.088000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.088000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.088000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.088000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.088000 audit[2181]: AVC avc: denied { bpf } for pid=2181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.088000 audit[2181]: AVC avc: denied { bpf } for pid=2181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.088000 audit: BPF prog-id=73 op=LOAD Sep 6 01:19:11.088000 audit[2181]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=2166 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:11.088000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432386631303537653064336563616536333932613062616365633535 Sep 6 01:19:11.112076 env[1448]: time="2025-09-06T01:19:11.112022323Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.8-n-f2ea6194e4,Uid:93e8b770d458423086e7188fdb131ff9,Namespace:kube-system,Attempt:0,} returns sandbox id \"d9f85d8ad0ee716aba50294617f80c643838b693f57eb31a5581962c081c967e\"" Sep 6 01:19:11.114921 env[1448]: time="2025-09-06T01:19:11.114840285Z" level=info msg="CreateContainer within sandbox \"d9f85d8ad0ee716aba50294617f80c643838b693f57eb31a5581962c081c967e\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Sep 6 01:19:11.121700 env[1448]: time="2025-09-06T01:19:11.121649929Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.8-n-f2ea6194e4,Uid:33cef4bdedbdb4f626917cf412f19563,Namespace:kube-system,Attempt:0,} returns sandbox id \"428f1057e0d3ecae6392a0bacec55ba73f6d6b2a8ac665661f040cf9023d31e5\"" Sep 6 01:19:11.123680 env[1448]: time="2025-09-06T01:19:11.123640251Z" level=info msg="CreateContainer within sandbox \"9662ed5eb56d92ec88f140a77c625506f2bbfe168ab983f24ce8aac4599af3d8\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"cf52709f4cd3e136c7ed218d55ed81805ea5265fca8e51bd6f14df255c2ce20e\"" Sep 6 01:19:11.124978 env[1448]: time="2025-09-06T01:19:11.124942571Z" level=info msg="StartContainer for \"cf52709f4cd3e136c7ed218d55ed81805ea5265fca8e51bd6f14df255c2ce20e\"" Sep 6 01:19:11.125951 env[1448]: time="2025-09-06T01:19:11.125920332Z" level=info msg="CreateContainer within sandbox \"428f1057e0d3ecae6392a0bacec55ba73f6d6b2a8ac665661f040cf9023d31e5\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Sep 6 01:19:11.144069 systemd[1]: Started cri-containerd-cf52709f4cd3e136c7ed218d55ed81805ea5265fca8e51bd6f14df255c2ce20e.scope. Sep 6 01:19:11.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.160000 audit: BPF prog-id=74 op=LOAD Sep 6 01:19:11.160000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.160000 audit[2237]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000245b38 a2=10 a3=0 items=0 ppid=2108 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:11.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366353237303966346364336531333663376564323138643535656438 Sep 6 01:19:11.160000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.160000 audit[2237]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40002455a0 a2=3c a3=0 items=0 ppid=2108 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:11.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366353237303966346364336531333663376564323138643535656438 Sep 6 01:19:11.160000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.160000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.160000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.160000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.160000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.160000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.160000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.160000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.160000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.160000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.160000 audit: BPF prog-id=75 op=LOAD Sep 6 01:19:11.160000 audit[2237]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40002458e0 a2=78 a3=0 items=0 ppid=2108 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:11.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366353237303966346364336531333663376564323138643535656438 Sep 6 01:19:11.160000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.160000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.160000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.160000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.160000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.160000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.160000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.160000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.160000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.160000 audit: BPF prog-id=76 op=LOAD Sep 6 01:19:11.160000 audit[2237]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000245670 a2=78 a3=0 items=0 ppid=2108 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:11.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366353237303966346364336531333663376564323138643535656438 Sep 6 01:19:11.161000 audit: BPF prog-id=76 op=UNLOAD Sep 6 01:19:11.161000 audit: BPF prog-id=75 op=UNLOAD Sep 6 01:19:11.161000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.161000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.161000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.161000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.161000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.161000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.161000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.161000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.161000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.161000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.161000 audit: BPF prog-id=77 op=LOAD Sep 6 01:19:11.161000 audit[2237]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000245b40 a2=78 a3=0 items=0 ppid=2108 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:11.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366353237303966346364336531333663376564323138643535656438 Sep 6 01:19:11.185488 env[1448]: time="2025-09-06T01:19:11.185427809Z" level=info msg="CreateContainer within sandbox \"d9f85d8ad0ee716aba50294617f80c643838b693f57eb31a5581962c081c967e\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"f8d7d8e6fd9e34bd52798a985e6a0440b81410c10ace5dee3a44033ad75a892f\"" Sep 6 01:19:11.186543 env[1448]: time="2025-09-06T01:19:11.186511290Z" level=info msg="StartContainer for \"f8d7d8e6fd9e34bd52798a985e6a0440b81410c10ace5dee3a44033ad75a892f\"" Sep 6 01:19:11.197357 env[1448]: time="2025-09-06T01:19:11.197291017Z" level=info msg="CreateContainer within sandbox \"428f1057e0d3ecae6392a0bacec55ba73f6d6b2a8ac665661f040cf9023d31e5\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"e8adcab87c8fa6d100c253c51ec41056aa93114d165bff76462cc92f0962770e\"" Sep 6 01:19:11.198114 env[1448]: time="2025-09-06T01:19:11.198076217Z" level=info msg="StartContainer for \"e8adcab87c8fa6d100c253c51ec41056aa93114d165bff76462cc92f0962770e\"" Sep 6 01:19:11.208344 env[1448]: time="2025-09-06T01:19:11.208294383Z" level=info msg="StartContainer for \"cf52709f4cd3e136c7ed218d55ed81805ea5265fca8e51bd6f14df255c2ce20e\" returns successfully" Sep 6 01:19:11.220364 systemd[1]: Started cri-containerd-f8d7d8e6fd9e34bd52798a985e6a0440b81410c10ace5dee3a44033ad75a892f.scope. Sep 6 01:19:11.232602 systemd[1]: Started cri-containerd-e8adcab87c8fa6d100c253c51ec41056aa93114d165bff76462cc92f0962770e.scope. Sep 6 01:19:11.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit: BPF prog-id=78 op=LOAD Sep 6 01:19:11.250000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit[2286]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2166 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:11.250000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538616463616238376338666136643130306332353363353165633431 Sep 6 01:19:11.250000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit[2286]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2166 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:11.250000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538616463616238376338666136643130306332353363353165633431 Sep 6 01:19:11.250000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit: BPF prog-id=79 op=LOAD Sep 6 01:19:11.250000 audit[2286]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2166 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:11.250000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538616463616238376338666136643130306332353363353165633431 Sep 6 01:19:11.250000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit: BPF prog-id=80 op=LOAD Sep 6 01:19:11.250000 audit[2286]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2166 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:11.250000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538616463616238376338666136643130306332353363353165633431 Sep 6 01:19:11.250000 audit: BPF prog-id=80 op=UNLOAD Sep 6 01:19:11.250000 audit: BPF prog-id=79 op=UNLOAD Sep 6 01:19:11.250000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.250000 audit: BPF prog-id=81 op=LOAD Sep 6 01:19:11.250000 audit[2286]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2166 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:11.250000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538616463616238376338666136643130306332353363353165633431 Sep 6 01:19:11.258586 kubelet[2067]: I0906 01:19:11.258092 2067 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:11.258586 kubelet[2067]: E0906 01:19:11.258554 2067 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.200.20.41:6443/api/v1/nodes\": dial tcp 10.200.20.41:6443: connect: connection refused" node="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:11.271000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.271000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.271000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.271000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.271000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.271000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.271000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.271000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.271000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.271000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.271000 audit: BPF prog-id=82 op=LOAD Sep 6 01:19:11.272000 audit[2271]: AVC avc: denied { bpf } for pid=2271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.272000 audit[2271]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2134 pid=2271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:11.272000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638643764386536666439653334626435323739386139383565366130 Sep 6 01:19:11.272000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.272000 audit[2271]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2134 pid=2271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:11.272000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638643764386536666439653334626435323739386139383565366130 Sep 6 01:19:11.272000 audit[2271]: AVC avc: denied { bpf } for pid=2271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.272000 audit[2271]: AVC avc: denied { bpf } for pid=2271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.272000 audit[2271]: AVC avc: denied { bpf } for pid=2271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.272000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.272000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.272000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.272000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.272000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.272000 audit[2271]: AVC avc: denied { bpf } for pid=2271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.272000 audit[2271]: AVC avc: denied { bpf } for pid=2271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.272000 audit: BPF prog-id=83 op=LOAD Sep 6 01:19:11.272000 audit[2271]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2134 pid=2271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:11.272000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638643764386536666439653334626435323739386139383565366130 Sep 6 01:19:11.272000 audit[2271]: AVC avc: denied { bpf } for pid=2271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.272000 audit[2271]: AVC avc: denied { bpf } for pid=2271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.272000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.272000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.272000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.272000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.272000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.272000 audit[2271]: AVC avc: denied { bpf } for pid=2271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.272000 audit[2271]: AVC avc: denied { bpf } for pid=2271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.272000 audit: BPF prog-id=84 op=LOAD Sep 6 01:19:11.272000 audit[2271]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2134 pid=2271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:11.272000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638643764386536666439653334626435323739386139383565366130 Sep 6 01:19:11.272000 audit: BPF prog-id=84 op=UNLOAD Sep 6 01:19:11.272000 audit: BPF prog-id=83 op=UNLOAD Sep 6 01:19:11.272000 audit[2271]: AVC avc: denied { bpf } for pid=2271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.272000 audit[2271]: AVC avc: denied { bpf } for pid=2271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.272000 audit[2271]: AVC avc: denied { bpf } for pid=2271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.272000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.272000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.272000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.272000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.272000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.272000 audit[2271]: AVC avc: denied { bpf } for pid=2271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.272000 audit[2271]: AVC avc: denied { bpf } for pid=2271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:11.272000 audit: BPF prog-id=85 op=LOAD Sep 6 01:19:11.272000 audit[2271]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2134 pid=2271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:11.272000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638643764386536666439653334626435323739386139383565366130 Sep 6 01:19:11.281460 env[1448]: time="2025-09-06T01:19:11.281404509Z" level=info msg="StartContainer for \"e8adcab87c8fa6d100c253c51ec41056aa93114d165bff76462cc92f0962770e\" returns successfully" Sep 6 01:19:11.344909 env[1448]: time="2025-09-06T01:19:11.344798909Z" level=info msg="StartContainer for \"f8d7d8e6fd9e34bd52798a985e6a0440b81410c10ace5dee3a44033ad75a892f\" returns successfully" Sep 6 01:19:11.526970 kubelet[2067]: E0906 01:19:11.526926 2067 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-f2ea6194e4\" not found" node="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:11.530382 kubelet[2067]: E0906 01:19:11.530350 2067 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-f2ea6194e4\" not found" node="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:11.531608 kubelet[2067]: E0906 01:19:11.531582 2067 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-f2ea6194e4\" not found" node="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:12.533037 kubelet[2067]: E0906 01:19:12.533008 2067 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-f2ea6194e4\" not found" node="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:12.533964 kubelet[2067]: E0906 01:19:12.533881 2067 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-f2ea6194e4\" not found" node="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:12.860625 kubelet[2067]: I0906 01:19:12.860531 2067 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:13.396794 kernel: kauditd_printk_skb: 658 callbacks suppressed Sep 6 01:19:13.396951 kernel: audit: type=1400 audit(1757121553.370:521): avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:19:13.370000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:19:13.370000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=40044542a0 a2=fc6 a3=0 items=0 ppid=2166 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 key=(null) Sep 6 01:19:13.427600 kernel: audit: type=1300 audit(1757121553.370:521): arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=40044542a0 a2=fc6 a3=0 items=0 ppid=2166 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 key=(null) Sep 6 01:19:13.370000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:19:13.454310 kernel: audit: type=1327 audit(1757121553.370:521): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:19:13.396000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:19:13.484414 kernel: audit: type=1400 audit(1757121553.396:522): avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:19:13.396000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=4006b3eb20 a2=fc6 a3=0 items=0 ppid=2166 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 key=(null) Sep 6 01:19:13.519034 kernel: audit: type=1300 audit(1757121553.396:522): arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=4006b3eb20 a2=fc6 a3=0 items=0 ppid=2166 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 key=(null) Sep 6 01:19:13.396000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:19:13.554478 kernel: audit: type=1327 audit(1757121553.396:522): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:19:13.398000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:19:13.577948 kernel: audit: type=1400 audit(1757121553.398:523): avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:19:13.398000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=40044543c0 a2=fc6 a3=0 items=0 ppid=2166 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 key=(null) Sep 6 01:19:13.605989 kernel: audit: type=1300 audit(1757121553.398:523): arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=40044543c0 a2=fc6 a3=0 items=0 ppid=2166 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 key=(null) Sep 6 01:19:13.398000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:19:13.631710 kernel: audit: type=1327 audit(1757121553.398:523): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:19:13.631913 kernel: audit: type=1400 audit(1757121553.450:524): avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:19:13.450000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:19:13.450000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=49 a1=4004455050 a2=fc6 a3=0 items=0 ppid=2166 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 key=(null) Sep 6 01:19:13.450000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:19:13.560000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:19:13.560000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=4006f08500 a2=fc6 a3=0 items=0 ppid=2166 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 key=(null) Sep 6 01:19:13.560000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:19:13.560000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:19:13.560000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=40070e4870 a2=fc6 a3=0 items=0 ppid=2166 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 key=(null) Sep 6 01:19:13.560000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:19:13.850866 kubelet[2067]: E0906 01:19:13.850834 2067 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.8-n-f2ea6194e4\" not found" node="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:13.944462 kubelet[2067]: I0906 01:19:13.944348 2067 kubelet_node_status.go:78] "Successfully registered node" node="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:13.944631 kubelet[2067]: E0906 01:19:13.944616 2067 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"ci-3510.3.8-n-f2ea6194e4\": node \"ci-3510.3.8-n-f2ea6194e4\" not found" Sep 6 01:19:13.969000 audit[2247]: AVC avc: denied { watch } for pid=2247 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:19:13.969000 audit[2247]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000c92030 a2=fc6 a3=0 items=0 ppid=2108 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 key=(null) Sep 6 01:19:13.969000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:19:13.969000 audit[2247]: AVC avc: denied { watch } for pid=2247 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:19:13.969000 audit[2247]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000ca2060 a2=fc6 a3=0 items=0 ppid=2108 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 key=(null) Sep 6 01:19:13.969000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:19:14.015752 kubelet[2067]: I0906 01:19:14.015703 2067 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:14.030064 kubelet[2067]: E0906 01:19:14.030029 2067 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ci-3510.3.8-n-f2ea6194e4\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:14.030285 kubelet[2067]: I0906 01:19:14.030270 2067 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:14.033779 kubelet[2067]: E0906 01:19:14.033727 2067 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-ci-3510.3.8-n-f2ea6194e4\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:14.033967 kubelet[2067]: I0906 01:19:14.033954 2067 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:14.039708 kubelet[2067]: E0906 01:19:14.039674 2067 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-ci-3510.3.8-n-f2ea6194e4\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:14.413112 kubelet[2067]: I0906 01:19:14.413076 2067 apiserver.go:52] "Watching apiserver" Sep 6 01:19:14.418158 kubelet[2067]: I0906 01:19:14.418129 2067 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Sep 6 01:19:16.906573 systemd[1]: Reloading. Sep 6 01:19:16.956908 kubelet[2067]: I0906 01:19:16.956436 2067 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:16.965274 kubelet[2067]: W0906 01:19:16.965026 2067 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Sep 6 01:19:16.993958 /usr/lib/systemd/system-generators/torcx-generator[2364]: time="2025-09-06T01:19:16Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 6 01:19:16.994300 /usr/lib/systemd/system-generators/torcx-generator[2364]: time="2025-09-06T01:19:16Z" level=info msg="torcx already run" Sep 6 01:19:17.031990 kubelet[2067]: I0906 01:19:17.031955 2067 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:17.046170 kubelet[2067]: W0906 01:19:17.046117 2067 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Sep 6 01:19:17.101004 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 6 01:19:17.101027 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 6 01:19:17.118366 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 6 01:19:17.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.208000 audit: BPF prog-id=86 op=LOAD Sep 6 01:19:17.208000 audit: BPF prog-id=47 op=UNLOAD Sep 6 01:19:17.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.211000 audit: BPF prog-id=87 op=LOAD Sep 6 01:19:17.211000 audit: BPF prog-id=48 op=UNLOAD Sep 6 01:19:17.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit: BPF prog-id=88 op=LOAD Sep 6 01:19:17.214000 audit: BPF prog-id=49 op=UNLOAD Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit: BPF prog-id=89 op=LOAD Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit: BPF prog-id=90 op=LOAD Sep 6 01:19:17.214000 audit: BPF prog-id=50 op=UNLOAD Sep 6 01:19:17.214000 audit: BPF prog-id=51 op=UNLOAD Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.214000 audit: BPF prog-id=91 op=LOAD Sep 6 01:19:17.214000 audit: BPF prog-id=82 op=UNLOAD Sep 6 01:19:17.215000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.215000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.215000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.215000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.215000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.215000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.215000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.215000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.215000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.215000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.215000 audit: BPF prog-id=92 op=LOAD Sep 6 01:19:17.215000 audit: BPF prog-id=66 op=UNLOAD Sep 6 01:19:17.216000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.216000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.216000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.216000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.216000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.216000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.216000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.216000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.216000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.216000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.216000 audit: BPF prog-id=93 op=LOAD Sep 6 01:19:17.216000 audit: BPF prog-id=52 op=UNLOAD Sep 6 01:19:17.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.217000 audit: BPF prog-id=94 op=LOAD Sep 6 01:19:17.217000 audit: BPF prog-id=53 op=UNLOAD Sep 6 01:19:17.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.217000 audit: BPF prog-id=95 op=LOAD Sep 6 01:19:17.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.217000 audit: BPF prog-id=96 op=LOAD Sep 6 01:19:17.217000 audit: BPF prog-id=54 op=UNLOAD Sep 6 01:19:17.217000 audit: BPF prog-id=55 op=UNLOAD Sep 6 01:19:17.218000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.218000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.218000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.218000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.218000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.218000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.218000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.218000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.218000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.218000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.218000 audit: BPF prog-id=97 op=LOAD Sep 6 01:19:17.218000 audit: BPF prog-id=78 op=UNLOAD Sep 6 01:19:17.218000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.218000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.218000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.218000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.218000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.218000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.218000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.218000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.218000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.218000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.218000 audit: BPF prog-id=98 op=LOAD Sep 6 01:19:17.218000 audit: BPF prog-id=70 op=UNLOAD Sep 6 01:19:17.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.219000 audit: BPF prog-id=99 op=LOAD Sep 6 01:19:17.219000 audit: BPF prog-id=74 op=UNLOAD Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit: BPF prog-id=100 op=LOAD Sep 6 01:19:17.220000 audit: BPF prog-id=56 op=UNLOAD Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit: BPF prog-id=101 op=LOAD Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit: BPF prog-id=102 op=LOAD Sep 6 01:19:17.220000 audit: BPF prog-id=57 op=UNLOAD Sep 6 01:19:17.220000 audit: BPF prog-id=58 op=UNLOAD Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit: BPF prog-id=103 op=LOAD Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.220000 audit: BPF prog-id=104 op=LOAD Sep 6 01:19:17.220000 audit: BPF prog-id=59 op=UNLOAD Sep 6 01:19:17.220000 audit: BPF prog-id=60 op=UNLOAD Sep 6 01:19:17.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.222000 audit: BPF prog-id=105 op=LOAD Sep 6 01:19:17.222000 audit: BPF prog-id=61 op=UNLOAD Sep 6 01:19:17.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.222000 audit: BPF prog-id=106 op=LOAD Sep 6 01:19:17.222000 audit: BPF prog-id=62 op=UNLOAD Sep 6 01:19:17.236481 systemd[1]: Stopping kubelet.service... Sep 6 01:19:17.255048 systemd[1]: kubelet.service: Deactivated successfully. Sep 6 01:19:17.255254 systemd[1]: Stopped kubelet.service. Sep 6 01:19:17.254000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:17.255316 systemd[1]: kubelet.service: Consumed 1.302s CPU time. Sep 6 01:19:17.257660 systemd[1]: Starting kubelet.service... Sep 6 01:19:17.337000 audit[2247]: AVC avc: denied { watch } for pid=2247 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:19:17.337000 audit[2247]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40009fa2c0 a2=fc6 a3=0 items=0 ppid=2108 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 key=(null) Sep 6 01:19:17.337000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:19:17.338000 audit[2247]: AVC avc: denied { watch } for pid=2247 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:19:17.338000 audit[2247]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40009fa480 a2=fc6 a3=0 items=0 ppid=2108 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 key=(null) Sep 6 01:19:17.338000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:19:17.338000 audit[2247]: AVC avc: denied { watch } for pid=2247 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:19:17.338000 audit[2247]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40009fa640 a2=fc6 a3=0 items=0 ppid=2108 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 key=(null) Sep 6 01:19:17.338000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:19:17.339000 audit[2247]: AVC avc: denied { watch } for pid=2247 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:19:17.339000 audit[2247]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000aba4a0 a2=fc6 a3=0 items=0 ppid=2108 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 key=(null) Sep 6 01:19:17.339000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:19:17.360647 systemd[1]: Started kubelet.service. Sep 6 01:19:17.360000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:17.505824 kubelet[2427]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 6 01:19:17.505824 kubelet[2427]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Sep 6 01:19:17.505824 kubelet[2427]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 6 01:19:17.505824 kubelet[2427]: I0906 01:19:17.501563 2427 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 6 01:19:17.512494 kubelet[2427]: I0906 01:19:17.512449 2427 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Sep 6 01:19:17.512494 kubelet[2427]: I0906 01:19:17.512485 2427 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 6 01:19:17.512826 kubelet[2427]: I0906 01:19:17.512807 2427 server.go:954] "Client rotation is on, will bootstrap in background" Sep 6 01:19:17.514071 kubelet[2427]: I0906 01:19:17.514046 2427 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Sep 6 01:19:17.519402 kubelet[2427]: I0906 01:19:17.519366 2427 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 6 01:19:17.529280 kubelet[2427]: E0906 01:19:17.529157 2427 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 6 01:19:17.529535 kubelet[2427]: I0906 01:19:17.529512 2427 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 6 01:19:17.532497 kubelet[2427]: I0906 01:19:17.532468 2427 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 6 01:19:17.532729 kubelet[2427]: I0906 01:19:17.532697 2427 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 6 01:19:17.532918 kubelet[2427]: I0906 01:19:17.532730 2427 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-3510.3.8-n-f2ea6194e4","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 6 01:19:17.533024 kubelet[2427]: I0906 01:19:17.532929 2427 topology_manager.go:138] "Creating topology manager with none policy" Sep 6 01:19:17.533024 kubelet[2427]: I0906 01:19:17.532938 2427 container_manager_linux.go:304] "Creating device plugin manager" Sep 6 01:19:17.533024 kubelet[2427]: I0906 01:19:17.532981 2427 state_mem.go:36] "Initialized new in-memory state store" Sep 6 01:19:17.533121 kubelet[2427]: I0906 01:19:17.533105 2427 kubelet.go:446] "Attempting to sync node with API server" Sep 6 01:19:17.533154 kubelet[2427]: I0906 01:19:17.533122 2427 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 6 01:19:17.533154 kubelet[2427]: I0906 01:19:17.533139 2427 kubelet.go:352] "Adding apiserver pod source" Sep 6 01:19:17.541826 kubelet[2427]: I0906 01:19:17.541784 2427 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 6 01:19:17.543288 kubelet[2427]: I0906 01:19:17.543260 2427 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 6 01:19:17.543978 kubelet[2427]: I0906 01:19:17.543963 2427 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Sep 6 01:19:17.544587 kubelet[2427]: I0906 01:19:17.544575 2427 watchdog_linux.go:99] "Systemd watchdog is not enabled" Sep 6 01:19:17.544711 kubelet[2427]: I0906 01:19:17.544701 2427 server.go:1287] "Started kubelet" Sep 6 01:19:17.546000 audit[2427]: AVC avc: denied { mac_admin } for pid=2427 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.546000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 01:19:17.546000 audit[2427]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000055770 a1=4000a217e8 a2=40000556b0 a3=25 items=0 ppid=1 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:17.546000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 01:19:17.547997 kubelet[2427]: I0906 01:19:17.547972 2427 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Sep 6 01:19:17.547000 audit[2427]: AVC avc: denied { mac_admin } for pid=2427 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.547000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 01:19:17.547000 audit[2427]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000029300 a1=4000a21800 a2=4000055920 a3=25 items=0 ppid=1 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:17.547000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 01:19:17.548318 kubelet[2427]: I0906 01:19:17.548303 2427 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Sep 6 01:19:17.548412 kubelet[2427]: I0906 01:19:17.548401 2427 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 6 01:19:17.555299 kubelet[2427]: I0906 01:19:17.555254 2427 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Sep 6 01:19:17.556307 kubelet[2427]: I0906 01:19:17.556288 2427 server.go:479] "Adding debug handlers to kubelet server" Sep 6 01:19:17.557332 kubelet[2427]: I0906 01:19:17.557285 2427 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 6 01:19:17.557570 kubelet[2427]: I0906 01:19:17.557558 2427 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 6 01:19:17.557852 kubelet[2427]: I0906 01:19:17.557835 2427 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 6 01:19:17.560159 kubelet[2427]: I0906 01:19:17.560135 2427 volume_manager.go:297] "Starting Kubelet Volume Manager" Sep 6 01:19:17.560551 kubelet[2427]: E0906 01:19:17.560529 2427 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-f2ea6194e4\" not found" Sep 6 01:19:17.562393 kubelet[2427]: I0906 01:19:17.562372 2427 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Sep 6 01:19:17.562627 kubelet[2427]: I0906 01:19:17.562617 2427 reconciler.go:26] "Reconciler: start to sync state" Sep 6 01:19:17.571448 kubelet[2427]: I0906 01:19:17.571389 2427 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Sep 6 01:19:17.584015 kubelet[2427]: I0906 01:19:17.583984 2427 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Sep 6 01:19:17.584174 kubelet[2427]: I0906 01:19:17.584163 2427 status_manager.go:227] "Starting to sync pod status with apiserver" Sep 6 01:19:17.584277 kubelet[2427]: I0906 01:19:17.584267 2427 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Sep 6 01:19:17.584330 kubelet[2427]: I0906 01:19:17.584320 2427 kubelet.go:2382] "Starting kubelet main sync loop" Sep 6 01:19:17.584429 kubelet[2427]: E0906 01:19:17.584412 2427 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Sep 6 01:19:17.589639 kubelet[2427]: I0906 01:19:17.589583 2427 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 6 01:19:17.597186 kubelet[2427]: I0906 01:19:17.597133 2427 factory.go:221] Registration of the containerd container factory successfully Sep 6 01:19:17.597186 kubelet[2427]: I0906 01:19:17.597166 2427 factory.go:221] Registration of the systemd container factory successfully Sep 6 01:19:17.658233 kubelet[2427]: I0906 01:19:17.658200 2427 cpu_manager.go:221] "Starting CPU manager" policy="none" Sep 6 01:19:17.658233 kubelet[2427]: I0906 01:19:17.658224 2427 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Sep 6 01:19:17.658395 kubelet[2427]: I0906 01:19:17.658246 2427 state_mem.go:36] "Initialized new in-memory state store" Sep 6 01:19:17.658446 kubelet[2427]: I0906 01:19:17.658425 2427 state_mem.go:88] "Updated default CPUSet" cpuSet="" Sep 6 01:19:17.658475 kubelet[2427]: I0906 01:19:17.658442 2427 state_mem.go:96] "Updated CPUSet assignments" assignments={} Sep 6 01:19:17.658475 kubelet[2427]: I0906 01:19:17.658460 2427 policy_none.go:49] "None policy: Start" Sep 6 01:19:17.658475 kubelet[2427]: I0906 01:19:17.658469 2427 memory_manager.go:186] "Starting memorymanager" policy="None" Sep 6 01:19:17.658551 kubelet[2427]: I0906 01:19:17.658478 2427 state_mem.go:35] "Initializing new in-memory state store" Sep 6 01:19:17.658575 kubelet[2427]: I0906 01:19:17.658570 2427 state_mem.go:75] "Updated machine memory state" Sep 6 01:19:17.662052 kubelet[2427]: I0906 01:19:17.662018 2427 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Sep 6 01:19:17.661000 audit[2427]: AVC avc: denied { mac_admin } for pid=2427 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:17.661000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 01:19:17.661000 audit[2427]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000947710 a1=4000681da0 a2=40009476e0 a3=25 items=0 ppid=1 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:17.661000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 01:19:17.662378 kubelet[2427]: I0906 01:19:17.662092 2427 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Sep 6 01:19:17.662378 kubelet[2427]: I0906 01:19:17.662250 2427 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 6 01:19:17.662378 kubelet[2427]: I0906 01:19:17.662261 2427 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 6 01:19:17.662926 kubelet[2427]: I0906 01:19:17.662847 2427 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 6 01:19:17.666827 kubelet[2427]: E0906 01:19:17.666734 2427 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Sep 6 01:19:17.686588 kubelet[2427]: I0906 01:19:17.686541 2427 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:17.689829 kubelet[2427]: I0906 01:19:17.687046 2427 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:17.690182 kubelet[2427]: I0906 01:19:17.690162 2427 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:17.694072 kubelet[2427]: W0906 01:19:17.693650 2427 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Sep 6 01:19:17.699554 kubelet[2427]: W0906 01:19:17.699518 2427 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Sep 6 01:19:17.699554 kubelet[2427]: W0906 01:19:17.699518 2427 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Sep 6 01:19:17.699737 kubelet[2427]: E0906 01:19:17.699608 2427 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ci-3510.3.8-n-f2ea6194e4\" already exists" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:17.699737 kubelet[2427]: E0906 01:19:17.699695 2427 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-ci-3510.3.8-n-f2ea6194e4\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:17.769984 kubelet[2427]: I0906 01:19:17.769940 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/08a382455f6a388689bba311cdbc8a12-ca-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-f2ea6194e4\" (UID: \"08a382455f6a388689bba311cdbc8a12\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:17.770130 kubelet[2427]: I0906 01:19:17.769996 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/08a382455f6a388689bba311cdbc8a12-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.8-n-f2ea6194e4\" (UID: \"08a382455f6a388689bba311cdbc8a12\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:17.770130 kubelet[2427]: I0906 01:19:17.770019 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/08a382455f6a388689bba311cdbc8a12-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.8-n-f2ea6194e4\" (UID: \"08a382455f6a388689bba311cdbc8a12\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:17.770130 kubelet[2427]: I0906 01:19:17.770035 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/93e8b770d458423086e7188fdb131ff9-kubeconfig\") pod \"kube-scheduler-ci-3510.3.8-n-f2ea6194e4\" (UID: \"93e8b770d458423086e7188fdb131ff9\") " pod="kube-system/kube-scheduler-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:17.770130 kubelet[2427]: I0906 01:19:17.770053 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/33cef4bdedbdb4f626917cf412f19563-ca-certs\") pod \"kube-apiserver-ci-3510.3.8-n-f2ea6194e4\" (UID: \"33cef4bdedbdb4f626917cf412f19563\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:17.770130 kubelet[2427]: I0906 01:19:17.770068 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/33cef4bdedbdb4f626917cf412f19563-k8s-certs\") pod \"kube-apiserver-ci-3510.3.8-n-f2ea6194e4\" (UID: \"33cef4bdedbdb4f626917cf412f19563\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:17.770267 kubelet[2427]: I0906 01:19:17.770101 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/33cef4bdedbdb4f626917cf412f19563-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.8-n-f2ea6194e4\" (UID: \"33cef4bdedbdb4f626917cf412f19563\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:17.770267 kubelet[2427]: I0906 01:19:17.770116 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/08a382455f6a388689bba311cdbc8a12-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-f2ea6194e4\" (UID: \"08a382455f6a388689bba311cdbc8a12\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:17.770267 kubelet[2427]: I0906 01:19:17.770132 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/08a382455f6a388689bba311cdbc8a12-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.8-n-f2ea6194e4\" (UID: \"08a382455f6a388689bba311cdbc8a12\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:17.771782 kubelet[2427]: I0906 01:19:17.771740 2427 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:17.786548 kubelet[2427]: I0906 01:19:17.786518 2427 kubelet_node_status.go:124] "Node was previously registered" node="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:17.786812 kubelet[2427]: I0906 01:19:17.786800 2427 kubelet_node_status.go:78] "Successfully registered node" node="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:18.542695 kubelet[2427]: I0906 01:19:18.542664 2427 apiserver.go:52] "Watching apiserver" Sep 6 01:19:18.563100 kubelet[2427]: I0906 01:19:18.563051 2427 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Sep 6 01:19:18.589021 kubelet[2427]: I0906 01:19:18.588951 2427 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-f2ea6194e4" podStartSLOduration=2.588921227 podStartE2EDuration="2.588921227s" podCreationTimestamp="2025-09-06 01:19:16 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 01:19:18.57600034 +0000 UTC m=+1.211123195" watchObservedRunningTime="2025-09-06 01:19:18.588921227 +0000 UTC m=+1.224044082" Sep 6 01:19:18.606329 kubelet[2427]: I0906 01:19:18.606267 2427 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.8-n-f2ea6194e4" podStartSLOduration=1.606250476 podStartE2EDuration="1.606250476s" podCreationTimestamp="2025-09-06 01:19:17 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 01:19:18.605102395 +0000 UTC m=+1.240225250" watchObservedRunningTime="2025-09-06 01:19:18.606250476 +0000 UTC m=+1.241373331" Sep 6 01:19:18.606694 kubelet[2427]: I0906 01:19:18.606655 2427 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.8-n-f2ea6194e4" podStartSLOduration=1.606644556 podStartE2EDuration="1.606644556s" podCreationTimestamp="2025-09-06 01:19:17 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 01:19:18.589677027 +0000 UTC m=+1.224799882" watchObservedRunningTime="2025-09-06 01:19:18.606644556 +0000 UTC m=+1.241767411" Sep 6 01:19:18.637111 kubelet[2427]: I0906 01:19:18.637074 2427 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:18.637776 kubelet[2427]: I0906 01:19:18.637475 2427 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:18.662754 kubelet[2427]: W0906 01:19:18.662687 2427 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Sep 6 01:19:18.662886 kubelet[2427]: E0906 01:19:18.662774 2427 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-ci-3510.3.8-n-f2ea6194e4\" already exists" pod="kube-system/kube-scheduler-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:18.663283 kubelet[2427]: W0906 01:19:18.663256 2427 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Sep 6 01:19:18.663442 kubelet[2427]: E0906 01:19:18.663424 2427 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ci-3510.3.8-n-f2ea6194e4\" already exists" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-f2ea6194e4" Sep 6 01:19:21.539000 audit[2247]: AVC avc: denied { watch } for pid=2247 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Sep 6 01:19:21.545566 kernel: kauditd_printk_skb: 284 callbacks suppressed Sep 6 01:19:21.545775 kernel: audit: type=1400 audit(1757121561.539:782): avc: denied { watch } for pid=2247 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Sep 6 01:19:21.539000 audit[2247]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40016c2840 a2=fc6 a3=0 items=0 ppid=2108 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 key=(null) Sep 6 01:19:21.603343 kernel: audit: type=1300 audit(1757121561.539:782): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40016c2840 a2=fc6 a3=0 items=0 ppid=2108 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 key=(null) Sep 6 01:19:21.539000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:19:21.630849 kernel: audit: type=1327 audit(1757121561.539:782): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:19:21.708346 kubelet[2427]: I0906 01:19:21.708323 2427 kuberuntime_manager.go:1702] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Sep 6 01:19:21.709127 env[1448]: time="2025-09-06T01:19:21.709095888Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Sep 6 01:19:21.709695 kubelet[2427]: I0906 01:19:21.709677 2427 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Sep 6 01:19:22.673271 systemd[1]: Created slice kubepods-besteffort-pod5e35b963_7bed_4501_a585_0b335c88c0da.slice. Sep 6 01:19:22.795397 systemd[1]: Created slice kubepods-besteffort-pode6c72698_3118_47d5_b083_1866b3938ad8.slice. Sep 6 01:19:22.811463 kubelet[2427]: I0906 01:19:22.811430 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/5e35b963-7bed-4501-a585-0b335c88c0da-kube-proxy\") pod \"kube-proxy-l7zrd\" (UID: \"5e35b963-7bed-4501-a585-0b335c88c0da\") " pod="kube-system/kube-proxy-l7zrd" Sep 6 01:19:22.811969 kubelet[2427]: I0906 01:19:22.811951 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/5e35b963-7bed-4501-a585-0b335c88c0da-lib-modules\") pod \"kube-proxy-l7zrd\" (UID: \"5e35b963-7bed-4501-a585-0b335c88c0da\") " pod="kube-system/kube-proxy-l7zrd" Sep 6 01:19:22.812093 kubelet[2427]: I0906 01:19:22.812080 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/5e35b963-7bed-4501-a585-0b335c88c0da-xtables-lock\") pod \"kube-proxy-l7zrd\" (UID: \"5e35b963-7bed-4501-a585-0b335c88c0da\") " pod="kube-system/kube-proxy-l7zrd" Sep 6 01:19:22.812213 kubelet[2427]: I0906 01:19:22.812192 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5mlsz\" (UniqueName: \"kubernetes.io/projected/5e35b963-7bed-4501-a585-0b335c88c0da-kube-api-access-5mlsz\") pod \"kube-proxy-l7zrd\" (UID: \"5e35b963-7bed-4501-a585-0b335c88c0da\") " pod="kube-system/kube-proxy-l7zrd" Sep 6 01:19:22.913176 kubelet[2427]: I0906 01:19:22.913138 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8rnwb\" (UniqueName: \"kubernetes.io/projected/e6c72698-3118-47d5-b083-1866b3938ad8-kube-api-access-8rnwb\") pod \"tigera-operator-755d956888-tzbgg\" (UID: \"e6c72698-3118-47d5-b083-1866b3938ad8\") " pod="tigera-operator/tigera-operator-755d956888-tzbgg" Sep 6 01:19:22.913496 kubelet[2427]: I0906 01:19:22.913478 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/e6c72698-3118-47d5-b083-1866b3938ad8-var-lib-calico\") pod \"tigera-operator-755d956888-tzbgg\" (UID: \"e6c72698-3118-47d5-b083-1866b3938ad8\") " pod="tigera-operator/tigera-operator-755d956888-tzbgg" Sep 6 01:19:22.921251 kubelet[2427]: I0906 01:19:22.921219 2427 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Sep 6 01:19:22.982335 env[1448]: time="2025-09-06T01:19:22.981714443Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-l7zrd,Uid:5e35b963-7bed-4501-a585-0b335c88c0da,Namespace:kube-system,Attempt:0,}" Sep 6 01:19:23.036669 env[1448]: time="2025-09-06T01:19:23.036577948Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:19:23.036669 env[1448]: time="2025-09-06T01:19:23.036630988Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:19:23.036929 env[1448]: time="2025-09-06T01:19:23.036641748Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:19:23.036992 env[1448]: time="2025-09-06T01:19:23.036948428Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0d4b8514f4c9f80a725c970cbd7c6a4a83d36e026a00bfc68838e8adde16bda4 pid=2479 runtime=io.containerd.runc.v2 Sep 6 01:19:23.053129 systemd[1]: Started cri-containerd-0d4b8514f4c9f80a725c970cbd7c6a4a83d36e026a00bfc68838e8adde16bda4.scope. Sep 6 01:19:23.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.104949 kernel: audit: type=1400 audit(1757121563.068:783): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.105059 kernel: audit: type=1400 audit(1757121563.068:784): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.105354 env[1448]: time="2025-09-06T01:19:23.105320139Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-755d956888-tzbgg,Uid:e6c72698-3118-47d5-b083-1866b3938ad8,Namespace:tigera-operator,Attempt:0,}" Sep 6 01:19:23.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.123441 kernel: audit: type=1400 audit(1757121563.068:785): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.142858 kernel: audit: type=1400 audit(1757121563.068:786): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.178539 kernel: audit: type=1400 audit(1757121563.068:787): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.178629 kernel: audit: type=1400 audit(1757121563.068:788): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.086000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.086000 audit: BPF prog-id=107 op=LOAD Sep 6 01:19:23.105000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.105000 audit[2488]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2479 pid=2488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.198825 kernel: audit: type=1400 audit(1757121563.068:789): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.105000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064346238353134663463396638306137323563393730636264376336 Sep 6 01:19:23.105000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.105000 audit[2488]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2479 pid=2488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.105000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064346238353134663463396638306137323563393730636264376336 Sep 6 01:19:23.105000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.105000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.105000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.105000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.105000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.105000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.199574 env[1448]: time="2025-09-06T01:19:23.199524981Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-l7zrd,Uid:5e35b963-7bed-4501-a585-0b335c88c0da,Namespace:kube-system,Attempt:0,} returns sandbox id \"0d4b8514f4c9f80a725c970cbd7c6a4a83d36e026a00bfc68838e8adde16bda4\"" Sep 6 01:19:23.105000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.105000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.105000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.105000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.105000 audit: BPF prog-id=108 op=LOAD Sep 6 01:19:23.105000 audit[2488]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2479 pid=2488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.105000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064346238353134663463396638306137323563393730636264376336 Sep 6 01:19:23.105000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.105000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.105000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.105000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.105000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.105000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.105000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.105000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.105000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.105000 audit: BPF prog-id=109 op=LOAD Sep 6 01:19:23.105000 audit[2488]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2479 pid=2488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.105000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064346238353134663463396638306137323563393730636264376336 Sep 6 01:19:23.122000 audit: BPF prog-id=109 op=UNLOAD Sep 6 01:19:23.122000 audit: BPF prog-id=108 op=UNLOAD Sep 6 01:19:23.122000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.122000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.122000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.122000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.122000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.122000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.122000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.122000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.122000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.122000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.122000 audit: BPF prog-id=110 op=LOAD Sep 6 01:19:23.122000 audit[2488]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2479 pid=2488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.122000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064346238353134663463396638306137323563393730636264376336 Sep 6 01:19:23.231844 env[1448]: time="2025-09-06T01:19:23.231804956Z" level=info msg="CreateContainer within sandbox \"0d4b8514f4c9f80a725c970cbd7c6a4a83d36e026a00bfc68838e8adde16bda4\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Sep 6 01:19:23.274048 env[1448]: time="2025-09-06T01:19:23.273832095Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:19:23.274048 env[1448]: time="2025-09-06T01:19:23.273881695Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:19:23.274048 env[1448]: time="2025-09-06T01:19:23.273892655Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:19:23.279407 env[1448]: time="2025-09-06T01:19:23.274072335Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d238335819bcffc3025fd6aa2825d2c8d18d3b9ad621516d02c83b54db4a0876 pid=2522 runtime=io.containerd.runc.v2 Sep 6 01:19:23.292436 systemd[1]: Started cri-containerd-d238335819bcffc3025fd6aa2825d2c8d18d3b9ad621516d02c83b54db4a0876.scope. Sep 6 01:19:23.303110 env[1448]: time="2025-09-06T01:19:23.303051388Z" level=info msg="CreateContainer within sandbox \"0d4b8514f4c9f80a725c970cbd7c6a4a83d36e026a00bfc68838e8adde16bda4\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"d0bc138bb58e3d1cb288d380acf887f37fb27354930261c1a40deeb8bb966f29\"" Sep 6 01:19:23.305890 env[1448]: time="2025-09-06T01:19:23.305833629Z" level=info msg="StartContainer for \"d0bc138bb58e3d1cb288d380acf887f37fb27354930261c1a40deeb8bb966f29\"" Sep 6 01:19:23.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.309000 audit: BPF prog-id=111 op=LOAD Sep 6 01:19:23.310000 audit[2532]: AVC avc: denied { bpf } for pid=2532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.310000 audit[2532]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=2522 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.310000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432333833333538313962636666633330323566643661613238323564 Sep 6 01:19:23.310000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.310000 audit[2532]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2522 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.310000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432333833333538313962636666633330323566643661613238323564 Sep 6 01:19:23.310000 audit[2532]: AVC avc: denied { bpf } for pid=2532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.310000 audit[2532]: AVC avc: denied { bpf } for pid=2532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.310000 audit[2532]: AVC avc: denied { bpf } for pid=2532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.310000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.310000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.310000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.310000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.310000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.310000 audit[2532]: AVC avc: denied { bpf } for pid=2532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.310000 audit[2532]: AVC avc: denied { bpf } for pid=2532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.310000 audit: BPF prog-id=112 op=LOAD Sep 6 01:19:23.310000 audit[2532]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2522 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.310000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432333833333538313962636666633330323566643661613238323564 Sep 6 01:19:23.310000 audit[2532]: AVC avc: denied { bpf } for pid=2532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.310000 audit[2532]: AVC avc: denied { bpf } for pid=2532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.310000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.310000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.310000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.310000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.310000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.310000 audit[2532]: AVC avc: denied { bpf } for pid=2532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.310000 audit[2532]: AVC avc: denied { bpf } for pid=2532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.310000 audit: BPF prog-id=113 op=LOAD Sep 6 01:19:23.310000 audit[2532]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2522 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.310000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432333833333538313962636666633330323566643661613238323564 Sep 6 01:19:23.310000 audit: BPF prog-id=113 op=UNLOAD Sep 6 01:19:23.310000 audit: BPF prog-id=112 op=UNLOAD Sep 6 01:19:23.310000 audit[2532]: AVC avc: denied { bpf } for pid=2532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.310000 audit[2532]: AVC avc: denied { bpf } for pid=2532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.310000 audit[2532]: AVC avc: denied { bpf } for pid=2532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.310000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.310000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.310000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.310000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.310000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.310000 audit[2532]: AVC avc: denied { bpf } for pid=2532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.310000 audit[2532]: AVC avc: denied { bpf } for pid=2532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.310000 audit: BPF prog-id=114 op=LOAD Sep 6 01:19:23.310000 audit[2532]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2522 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.310000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432333833333538313962636666633330323566643661613238323564 Sep 6 01:19:23.327293 systemd[1]: Started cri-containerd-d0bc138bb58e3d1cb288d380acf887f37fb27354930261c1a40deeb8bb966f29.scope. Sep 6 01:19:23.343000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.343000 audit[2556]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2479 pid=2556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430626331333862623538653364316362323838643338306163663838 Sep 6 01:19:23.343000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.343000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.343000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.343000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.343000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.343000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.343000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.343000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.343000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.343000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.343000 audit: BPF prog-id=115 op=LOAD Sep 6 01:19:23.343000 audit[2556]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2479 pid=2556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430626331333862623538653364316362323838643338306163663838 Sep 6 01:19:23.344000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.344000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.344000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.344000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.344000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.344000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.344000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.344000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.344000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.344000 audit: BPF prog-id=116 op=LOAD Sep 6 01:19:23.344000 audit[2556]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2479 pid=2556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.344000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430626331333862623538653364316362323838643338306163663838 Sep 6 01:19:23.344000 audit: BPF prog-id=116 op=UNLOAD Sep 6 01:19:23.344000 audit: BPF prog-id=115 op=UNLOAD Sep 6 01:19:23.344000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.344000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.344000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.344000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.344000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.344000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.344000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.344000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.344000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.344000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:23.344000 audit: BPF prog-id=117 op=LOAD Sep 6 01:19:23.344000 audit[2556]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2479 pid=2556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.344000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430626331333862623538653364316362323838643338306163663838 Sep 6 01:19:23.348964 env[1448]: time="2025-09-06T01:19:23.348915809Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-755d956888-tzbgg,Uid:e6c72698-3118-47d5-b083-1866b3938ad8,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"d238335819bcffc3025fd6aa2825d2c8d18d3b9ad621516d02c83b54db4a0876\"" Sep 6 01:19:23.353596 env[1448]: time="2025-09-06T01:19:23.353530211Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\"" Sep 6 01:19:23.370097 env[1448]: time="2025-09-06T01:19:23.370050938Z" level=info msg="StartContainer for \"d0bc138bb58e3d1cb288d380acf887f37fb27354930261c1a40deeb8bb966f29\" returns successfully" Sep 6 01:19:23.494000 audit[2620]: NETFILTER_CFG table=mangle:41 family=2 entries=1 op=nft_register_chain pid=2620 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:19:23.494000 audit[2620]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc4385dc0 a2=0 a3=1 items=0 ppid=2565 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.494000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 6 01:19:23.499000 audit[2621]: NETFILTER_CFG table=mangle:42 family=10 entries=1 op=nft_register_chain pid=2621 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:19:23.499000 audit[2621]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff0899b60 a2=0 a3=1 items=0 ppid=2565 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.499000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 6 01:19:23.501000 audit[2622]: NETFILTER_CFG table=nat:43 family=2 entries=1 op=nft_register_chain pid=2622 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:19:23.501000 audit[2622]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc4ad1be0 a2=0 a3=1 items=0 ppid=2565 pid=2622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.501000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 6 01:19:23.502000 audit[2623]: NETFILTER_CFG table=nat:44 family=10 entries=1 op=nft_register_chain pid=2623 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:19:23.502000 audit[2623]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc0d6f030 a2=0 a3=1 items=0 ppid=2565 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.502000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 6 01:19:23.503000 audit[2624]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_chain pid=2624 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:19:23.503000 audit[2624]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc6980290 a2=0 a3=1 items=0 ppid=2565 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.503000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 6 01:19:23.504000 audit[2625]: NETFILTER_CFG table=filter:46 family=10 entries=1 op=nft_register_chain pid=2625 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:19:23.504000 audit[2625]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe06c2af0 a2=0 a3=1 items=0 ppid=2565 pid=2625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.504000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 6 01:19:23.597000 audit[2626]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2626 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:19:23.597000 audit[2626]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffd28eda90 a2=0 a3=1 items=0 ppid=2565 pid=2626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.597000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 6 01:19:23.600000 audit[2628]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2628 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:19:23.600000 audit[2628]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc58d3030 a2=0 a3=1 items=0 ppid=2565 pid=2628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.600000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Sep 6 01:19:23.603000 audit[2631]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_rule pid=2631 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:19:23.603000 audit[2631]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffea0a6ad0 a2=0 a3=1 items=0 ppid=2565 pid=2631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.603000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Sep 6 01:19:23.605000 audit[2632]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_chain pid=2632 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:19:23.605000 audit[2632]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdf5711c0 a2=0 a3=1 items=0 ppid=2565 pid=2632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.605000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 6 01:19:23.607000 audit[2634]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2634 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:19:23.607000 audit[2634]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd1f50dc0 a2=0 a3=1 items=0 ppid=2565 pid=2634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.607000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 6 01:19:23.608000 audit[2635]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2635 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:19:23.608000 audit[2635]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff4b6fce0 a2=0 a3=1 items=0 ppid=2565 pid=2635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.608000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 6 01:19:23.610000 audit[2637]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2637 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:19:23.610000 audit[2637]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff3474640 a2=0 a3=1 items=0 ppid=2565 pid=2637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.610000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 6 01:19:23.613000 audit[2640]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_rule pid=2640 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:19:23.613000 audit[2640]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe6b41790 a2=0 a3=1 items=0 ppid=2565 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.613000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Sep 6 01:19:23.614000 audit[2641]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_chain pid=2641 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:19:23.614000 audit[2641]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff5b99960 a2=0 a3=1 items=0 ppid=2565 pid=2641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.614000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 6 01:19:23.617000 audit[2643]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2643 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:19:23.617000 audit[2643]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc0828b80 a2=0 a3=1 items=0 ppid=2565 pid=2643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.617000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 6 01:19:23.618000 audit[2644]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_chain pid=2644 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:19:23.618000 audit[2644]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff41e72f0 a2=0 a3=1 items=0 ppid=2565 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.618000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 6 01:19:23.620000 audit[2646]: NETFILTER_CFG table=filter:58 family=2 entries=1 op=nft_register_rule pid=2646 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:19:23.620000 audit[2646]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe0b3c280 a2=0 a3=1 items=0 ppid=2565 pid=2646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.620000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 6 01:19:23.623000 audit[2649]: NETFILTER_CFG table=filter:59 family=2 entries=1 op=nft_register_rule pid=2649 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:19:23.623000 audit[2649]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff27f9e10 a2=0 a3=1 items=0 ppid=2565 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.623000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 6 01:19:23.627000 audit[2652]: NETFILTER_CFG table=filter:60 family=2 entries=1 op=nft_register_rule pid=2652 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:19:23.627000 audit[2652]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd1a49850 a2=0 a3=1 items=0 ppid=2565 pid=2652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.627000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 6 01:19:23.628000 audit[2653]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2653 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:19:23.628000 audit[2653]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc9c012b0 a2=0 a3=1 items=0 ppid=2565 pid=2653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.628000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 6 01:19:23.630000 audit[2655]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2655 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:19:23.630000 audit[2655]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffc5ade2c0 a2=0 a3=1 items=0 ppid=2565 pid=2655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.630000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 6 01:19:23.634000 audit[2658]: NETFILTER_CFG table=nat:63 family=2 entries=1 op=nft_register_rule pid=2658 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:19:23.634000 audit[2658]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc2d4f570 a2=0 a3=1 items=0 ppid=2565 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.634000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 6 01:19:23.635000 audit[2659]: NETFILTER_CFG table=nat:64 family=2 entries=1 op=nft_register_chain pid=2659 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:19:23.635000 audit[2659]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffc8b5910 a2=0 a3=1 items=0 ppid=2565 pid=2659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.635000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 6 01:19:23.637000 audit[2661]: NETFILTER_CFG table=nat:65 family=2 entries=1 op=nft_register_rule pid=2661 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:19:23.637000 audit[2661]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffe29bc910 a2=0 a3=1 items=0 ppid=2565 pid=2661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.637000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 6 01:19:23.736000 audit[2667]: NETFILTER_CFG table=filter:66 family=2 entries=8 op=nft_register_rule pid=2667 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:19:23.736000 audit[2667]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=fffff8451910 a2=0 a3=1 items=0 ppid=2565 pid=2667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.736000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:19:23.810000 audit[2667]: NETFILTER_CFG table=nat:67 family=2 entries=14 op=nft_register_chain pid=2667 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:19:23.810000 audit[2667]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=fffff8451910 a2=0 a3=1 items=0 ppid=2565 pid=2667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.810000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:19:23.812000 audit[2672]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2672 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:19:23.812000 audit[2672]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffff2152310 a2=0 a3=1 items=0 ppid=2565 pid=2672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.812000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 6 01:19:23.815000 audit[2674]: NETFILTER_CFG table=filter:69 family=10 entries=2 op=nft_register_chain pid=2674 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:19:23.815000 audit[2674]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffd452c610 a2=0 a3=1 items=0 ppid=2565 pid=2674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.815000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Sep 6 01:19:23.819000 audit[2677]: NETFILTER_CFG table=filter:70 family=10 entries=2 op=nft_register_chain pid=2677 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:19:23.819000 audit[2677]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffecb63690 a2=0 a3=1 items=0 ppid=2565 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.819000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Sep 6 01:19:23.820000 audit[2678]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_chain pid=2678 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:19:23.820000 audit[2678]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe94555d0 a2=0 a3=1 items=0 ppid=2565 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.820000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 6 01:19:23.822000 audit[2680]: NETFILTER_CFG table=filter:72 family=10 entries=1 op=nft_register_rule pid=2680 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:19:23.822000 audit[2680]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc0164770 a2=0 a3=1 items=0 ppid=2565 pid=2680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.822000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 6 01:19:23.823000 audit[2681]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2681 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:19:23.823000 audit[2681]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe6fa2480 a2=0 a3=1 items=0 ppid=2565 pid=2681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.823000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 6 01:19:23.826000 audit[2683]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2683 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:19:23.826000 audit[2683]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffc74172e0 a2=0 a3=1 items=0 ppid=2565 pid=2683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.826000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Sep 6 01:19:23.829000 audit[2686]: NETFILTER_CFG table=filter:75 family=10 entries=2 op=nft_register_chain pid=2686 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:19:23.829000 audit[2686]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffdb9864b0 a2=0 a3=1 items=0 ppid=2565 pid=2686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.829000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 6 01:19:23.830000 audit[2687]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_chain pid=2687 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:19:23.830000 audit[2687]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffa973dd0 a2=0 a3=1 items=0 ppid=2565 pid=2687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.830000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 6 01:19:23.832000 audit[2689]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2689 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:19:23.832000 audit[2689]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc0b48db0 a2=0 a3=1 items=0 ppid=2565 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.832000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 6 01:19:23.833000 audit[2690]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_chain pid=2690 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:19:23.833000 audit[2690]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcb982070 a2=0 a3=1 items=0 ppid=2565 pid=2690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.833000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 6 01:19:23.835000 audit[2692]: NETFILTER_CFG table=filter:79 family=10 entries=1 op=nft_register_rule pid=2692 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:19:23.835000 audit[2692]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffc40f7e0 a2=0 a3=1 items=0 ppid=2565 pid=2692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.835000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 6 01:19:23.839000 audit[2695]: NETFILTER_CFG table=filter:80 family=10 entries=1 op=nft_register_rule pid=2695 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:19:23.839000 audit[2695]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd747e090 a2=0 a3=1 items=0 ppid=2565 pid=2695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.839000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 6 01:19:23.842000 audit[2698]: NETFILTER_CFG table=filter:81 family=10 entries=1 op=nft_register_rule pid=2698 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:19:23.842000 audit[2698]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe2c9def0 a2=0 a3=1 items=0 ppid=2565 pid=2698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.842000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Sep 6 01:19:23.843000 audit[2699]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2699 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:19:23.843000 audit[2699]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd900a240 a2=0 a3=1 items=0 ppid=2565 pid=2699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.843000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 6 01:19:23.845000 audit[2701]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2701 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:19:23.845000 audit[2701]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffecf2bf70 a2=0 a3=1 items=0 ppid=2565 pid=2701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.845000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 6 01:19:23.848000 audit[2704]: NETFILTER_CFG table=nat:84 family=10 entries=2 op=nft_register_chain pid=2704 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:19:23.848000 audit[2704]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=fffff8d3e0f0 a2=0 a3=1 items=0 ppid=2565 pid=2704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.848000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 6 01:19:23.852000 audit[2705]: NETFILTER_CFG table=nat:85 family=10 entries=1 op=nft_register_chain pid=2705 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:19:23.852000 audit[2705]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe39630b0 a2=0 a3=1 items=0 ppid=2565 pid=2705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.852000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 6 01:19:23.854000 audit[2707]: NETFILTER_CFG table=nat:86 family=10 entries=2 op=nft_register_chain pid=2707 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:19:23.854000 audit[2707]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffc03865b0 a2=0 a3=1 items=0 ppid=2565 pid=2707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.854000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 6 01:19:23.855000 audit[2708]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_chain pid=2708 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:19:23.855000 audit[2708]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffe5d7cb0 a2=0 a3=1 items=0 ppid=2565 pid=2708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.855000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 6 01:19:23.857000 audit[2710]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_rule pid=2710 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:19:23.857000 audit[2710]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffea7ac360 a2=0 a3=1 items=0 ppid=2565 pid=2710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.857000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 6 01:19:23.860000 audit[2713]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_rule pid=2713 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:19:23.860000 audit[2713]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd6a27a50 a2=0 a3=1 items=0 ppid=2565 pid=2713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.860000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 6 01:19:23.863000 audit[2715]: NETFILTER_CFG table=filter:90 family=10 entries=3 op=nft_register_rule pid=2715 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 6 01:19:23.863000 audit[2715]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=ffffd78c11b0 a2=0 a3=1 items=0 ppid=2565 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.863000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:19:23.864000 audit[2715]: NETFILTER_CFG table=nat:91 family=10 entries=7 op=nft_register_chain pid=2715 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 6 01:19:23.864000 audit[2715]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffd78c11b0 a2=0 a3=1 items=0 ppid=2565 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:23.864000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:19:23.929053 systemd[1]: run-containerd-runc-k8s.io-0d4b8514f4c9f80a725c970cbd7c6a4a83d36e026a00bfc68838e8adde16bda4-runc.VKKNxp.mount: Deactivated successfully. Sep 6 01:19:24.229096 kubelet[2427]: I0906 01:19:24.228587 2427 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-l7zrd" podStartSLOduration=2.2285650439999998 podStartE2EDuration="2.228565044s" podCreationTimestamp="2025-09-06 01:19:22 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 01:19:23.66050343 +0000 UTC m=+6.295626285" watchObservedRunningTime="2025-09-06 01:19:24.228565044 +0000 UTC m=+6.863687859" Sep 6 01:19:27.543664 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1767246845.mount: Deactivated successfully. Sep 6 01:19:28.141371 env[1448]: time="2025-09-06T01:19:28.141314736Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:28.148870 env[1448]: time="2025-09-06T01:19:28.148820659Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dd2e197838b00861b08ae5f480dfbfb9a519722e35ced99346315722309cbe9f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:28.155274 env[1448]: time="2025-09-06T01:19:28.155222222Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:28.160575 env[1448]: time="2025-09-06T01:19:28.160534824Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:00a7a9b62f9b9a4e0856128b078539783b8352b07f707bff595cb604cc580f6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:28.161072 env[1448]: time="2025-09-06T01:19:28.161043184Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\" returns image reference \"sha256:dd2e197838b00861b08ae5f480dfbfb9a519722e35ced99346315722309cbe9f\"" Sep 6 01:19:28.165528 env[1448]: time="2025-09-06T01:19:28.165487306Z" level=info msg="CreateContainer within sandbox \"d238335819bcffc3025fd6aa2825d2c8d18d3b9ad621516d02c83b54db4a0876\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Sep 6 01:19:28.193920 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount808295591.mount: Deactivated successfully. Sep 6 01:19:28.210928 env[1448]: time="2025-09-06T01:19:28.210835484Z" level=info msg="CreateContainer within sandbox \"d238335819bcffc3025fd6aa2825d2c8d18d3b9ad621516d02c83b54db4a0876\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"6736ccb81f116525a78ef6b73cf47aa9311ab896dbf014a2adf8ad79395586fc\"" Sep 6 01:19:28.211724 env[1448]: time="2025-09-06T01:19:28.211696164Z" level=info msg="StartContainer for \"6736ccb81f116525a78ef6b73cf47aa9311ab896dbf014a2adf8ad79395586fc\"" Sep 6 01:19:28.227725 systemd[1]: Started cri-containerd-6736ccb81f116525a78ef6b73cf47aa9311ab896dbf014a2adf8ad79395586fc.scope. Sep 6 01:19:28.264348 kernel: kauditd_printk_skb: 303 callbacks suppressed Sep 6 01:19:28.264448 kernel: audit: type=1400 audit(1757121568.240:876): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.282539 kernel: audit: type=1400 audit(1757121568.240:877): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.301892 kernel: audit: type=1400 audit(1757121568.241:878): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.321970 kernel: audit: type=1400 audit(1757121568.241:879): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.341459 kernel: audit: type=1400 audit(1757121568.241:880): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.361246 kernel: audit: type=1400 audit(1757121568.241:881): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.379315 kernel: audit: type=1400 audit(1757121568.241:882): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.397483 kernel: audit: type=1400 audit(1757121568.241:883): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.415007 kernel: audit: type=1400 audit(1757121568.241:884): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.435879 kernel: audit: type=1400 audit(1757121568.246:885): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.246000 audit: BPF prog-id=118 op=LOAD Sep 6 01:19:28.247000 audit[2724]: AVC avc: denied { bpf } for pid=2724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.247000 audit[2724]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=2522 pid=2724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:28.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637333663636238316631313635323561373865663662373363663437 Sep 6 01:19:28.247000 audit[2724]: AVC avc: denied { perfmon } for pid=2724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.247000 audit[2724]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2522 pid=2724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:28.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637333663636238316631313635323561373865663662373363663437 Sep 6 01:19:28.247000 audit[2724]: AVC avc: denied { bpf } for pid=2724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.247000 audit[2724]: AVC avc: denied { bpf } for pid=2724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.247000 audit[2724]: AVC avc: denied { bpf } for pid=2724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.247000 audit[2724]: AVC avc: denied { perfmon } for pid=2724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.247000 audit[2724]: AVC avc: denied { perfmon } for pid=2724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.247000 audit[2724]: AVC avc: denied { perfmon } for pid=2724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.247000 audit[2724]: AVC avc: denied { perfmon } for pid=2724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.247000 audit[2724]: AVC avc: denied { perfmon } for pid=2724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.247000 audit[2724]: AVC avc: denied { bpf } for pid=2724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.247000 audit[2724]: AVC avc: denied { bpf } for pid=2724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.247000 audit: BPF prog-id=119 op=LOAD Sep 6 01:19:28.247000 audit[2724]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2522 pid=2724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:28.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637333663636238316631313635323561373865663662373363663437 Sep 6 01:19:28.263000 audit[2724]: AVC avc: denied { bpf } for pid=2724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.263000 audit[2724]: AVC avc: denied { bpf } for pid=2724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.263000 audit[2724]: AVC avc: denied { perfmon } for pid=2724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.263000 audit[2724]: AVC avc: denied { perfmon } for pid=2724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.263000 audit[2724]: AVC avc: denied { perfmon } for pid=2724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.263000 audit[2724]: AVC avc: denied { perfmon } for pid=2724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.263000 audit[2724]: AVC avc: denied { perfmon } for pid=2724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.263000 audit[2724]: AVC avc: denied { bpf } for pid=2724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.263000 audit[2724]: AVC avc: denied { bpf } for pid=2724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.263000 audit: BPF prog-id=120 op=LOAD Sep 6 01:19:28.263000 audit[2724]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2522 pid=2724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:28.263000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637333663636238316631313635323561373865663662373363663437 Sep 6 01:19:28.263000 audit: BPF prog-id=120 op=UNLOAD Sep 6 01:19:28.264000 audit: BPF prog-id=119 op=UNLOAD Sep 6 01:19:28.264000 audit[2724]: AVC avc: denied { bpf } for pid=2724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.264000 audit[2724]: AVC avc: denied { bpf } for pid=2724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.264000 audit[2724]: AVC avc: denied { bpf } for pid=2724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.264000 audit[2724]: AVC avc: denied { perfmon } for pid=2724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.264000 audit[2724]: AVC avc: denied { perfmon } for pid=2724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.264000 audit[2724]: AVC avc: denied { perfmon } for pid=2724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.264000 audit[2724]: AVC avc: denied { perfmon } for pid=2724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.264000 audit[2724]: AVC avc: denied { perfmon } for pid=2724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.264000 audit[2724]: AVC avc: denied { bpf } for pid=2724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.264000 audit[2724]: AVC avc: denied { bpf } for pid=2724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:28.264000 audit: BPF prog-id=121 op=LOAD Sep 6 01:19:28.264000 audit[2724]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2522 pid=2724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:28.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637333663636238316631313635323561373865663662373363663437 Sep 6 01:19:28.441520 env[1448]: time="2025-09-06T01:19:28.441463256Z" level=info msg="StartContainer for \"6736ccb81f116525a78ef6b73cf47aa9311ab896dbf014a2adf8ad79395586fc\" returns successfully" Sep 6 01:19:28.508043 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount430071970.mount: Deactivated successfully. Sep 6 01:19:29.454785 kubelet[2427]: I0906 01:19:29.454696 2427 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-755d956888-tzbgg" podStartSLOduration=2.6440313189999998 podStartE2EDuration="7.454675534s" podCreationTimestamp="2025-09-06 01:19:22 +0000 UTC" firstStartedPulling="2025-09-06 01:19:23.35193745 +0000 UTC m=+5.987060305" lastFinishedPulling="2025-09-06 01:19:28.162581665 +0000 UTC m=+10.797704520" observedRunningTime="2025-09-06 01:19:28.673626948 +0000 UTC m=+11.308749763" watchObservedRunningTime="2025-09-06 01:19:29.454675534 +0000 UTC m=+12.089798389" Sep 6 01:19:34.358284 sudo[1770]: pam_unix(sudo:session): session closed for user root Sep 6 01:19:34.385651 kernel: kauditd_printk_skb: 47 callbacks suppressed Sep 6 01:19:34.385807 kernel: audit: type=1106 audit(1757121574.357:894): pid=1770 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 01:19:34.357000 audit[1770]: USER_END pid=1770 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 01:19:34.357000 audit[1770]: CRED_DISP pid=1770 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 01:19:34.414273 kernel: audit: type=1104 audit(1757121574.357:895): pid=1770 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 01:19:34.474852 sshd[1767]: pam_unix(sshd:session): session closed for user core Sep 6 01:19:34.475000 audit[1767]: USER_END pid=1767 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:19:34.504732 systemd[1]: sshd@6-10.200.20.41:22-10.200.16.10:51448.service: Deactivated successfully. Sep 6 01:19:34.505502 systemd[1]: session-9.scope: Deactivated successfully. Sep 6 01:19:34.505654 systemd[1]: session-9.scope: Consumed 6.549s CPU time. Sep 6 01:19:34.506896 systemd-logind[1438]: Session 9 logged out. Waiting for processes to exit. Sep 6 01:19:34.507967 systemd-logind[1438]: Removed session 9. Sep 6 01:19:34.475000 audit[1767]: CRED_DISP pid=1767 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:19:34.534213 kernel: audit: type=1106 audit(1757121574.475:896): pid=1767 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:19:34.534320 kernel: audit: type=1104 audit(1757121574.475:897): pid=1767 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:19:34.504000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.41:22-10.200.16.10:51448 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:34.556851 kernel: audit: type=1131 audit(1757121574.504:898): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.41:22-10.200.16.10:51448 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:36.768000 audit[2797]: NETFILTER_CFG table=filter:92 family=2 entries=15 op=nft_register_rule pid=2797 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:19:36.768000 audit[2797]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffc6102d40 a2=0 a3=1 items=0 ppid=2565 pid=2797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:36.817318 kernel: audit: type=1325 audit(1757121576.768:899): table=filter:92 family=2 entries=15 op=nft_register_rule pid=2797 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:19:36.817435 kernel: audit: type=1300 audit(1757121576.768:899): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffc6102d40 a2=0 a3=1 items=0 ppid=2565 pid=2797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:36.768000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:19:36.841341 kernel: audit: type=1327 audit(1757121576.768:899): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:19:36.786000 audit[2797]: NETFILTER_CFG table=nat:93 family=2 entries=12 op=nft_register_rule pid=2797 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:19:36.859898 kernel: audit: type=1325 audit(1757121576.786:900): table=nat:93 family=2 entries=12 op=nft_register_rule pid=2797 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:19:36.786000 audit[2797]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc6102d40 a2=0 a3=1 items=0 ppid=2565 pid=2797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:36.889619 kernel: audit: type=1300 audit(1757121576.786:900): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc6102d40 a2=0 a3=1 items=0 ppid=2565 pid=2797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:36.786000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:19:36.823000 audit[2799]: NETFILTER_CFG table=filter:94 family=2 entries=16 op=nft_register_rule pid=2799 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:19:36.823000 audit[2799]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffce2e85c0 a2=0 a3=1 items=0 ppid=2565 pid=2799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:36.823000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:19:36.827000 audit[2799]: NETFILTER_CFG table=nat:95 family=2 entries=12 op=nft_register_rule pid=2799 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:19:36.827000 audit[2799]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffce2e85c0 a2=0 a3=1 items=0 ppid=2565 pid=2799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:36.827000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:19:41.746000 audit[2802]: NETFILTER_CFG table=filter:96 family=2 entries=17 op=nft_register_rule pid=2802 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:19:41.752196 kernel: kauditd_printk_skb: 7 callbacks suppressed Sep 6 01:19:41.752349 kernel: audit: type=1325 audit(1757121581.746:903): table=filter:96 family=2 entries=17 op=nft_register_rule pid=2802 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:19:41.746000 audit[2802]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffffd12cbd0 a2=0 a3=1 items=0 ppid=2565 pid=2802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:41.799463 kernel: audit: type=1300 audit(1757121581.746:903): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffffd12cbd0 a2=0 a3=1 items=0 ppid=2565 pid=2802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:41.746000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:19:41.817319 kernel: audit: type=1327 audit(1757121581.746:903): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:19:41.817000 audit[2802]: NETFILTER_CFG table=nat:97 family=2 entries=12 op=nft_register_rule pid=2802 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:19:41.834146 kernel: audit: type=1325 audit(1757121581.817:904): table=nat:97 family=2 entries=12 op=nft_register_rule pid=2802 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:19:41.817000 audit[2802]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffffd12cbd0 a2=0 a3=1 items=0 ppid=2565 pid=2802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:41.866040 kernel: audit: type=1300 audit(1757121581.817:904): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffffd12cbd0 a2=0 a3=1 items=0 ppid=2565 pid=2802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:41.875120 systemd[1]: Created slice kubepods-besteffort-pod681bb4ce_c4d0_4e9f_b4d0_5550fd39de43.slice. Sep 6 01:19:41.817000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:19:41.903367 kernel: audit: type=1327 audit(1757121581.817:904): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:19:41.933000 audit[2804]: NETFILTER_CFG table=filter:98 family=2 entries=18 op=nft_register_rule pid=2804 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:19:41.933000 audit[2804]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffe716c4f0 a2=0 a3=1 items=0 ppid=2565 pid=2804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:41.977767 kernel: audit: type=1325 audit(1757121581.933:905): table=filter:98 family=2 entries=18 op=nft_register_rule pid=2804 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:19:41.977895 kernel: audit: type=1300 audit(1757121581.933:905): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffe716c4f0 a2=0 a3=1 items=0 ppid=2565 pid=2804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:41.981024 kubelet[2427]: I0906 01:19:41.980993 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/681bb4ce-c4d0-4e9f-b4d0-5550fd39de43-typha-certs\") pod \"calico-typha-6b8f8989d8-87k2f\" (UID: \"681bb4ce-c4d0-4e9f-b4d0-5550fd39de43\") " pod="calico-system/calico-typha-6b8f8989d8-87k2f" Sep 6 01:19:41.981717 kubelet[2427]: I0906 01:19:41.981694 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/681bb4ce-c4d0-4e9f-b4d0-5550fd39de43-tigera-ca-bundle\") pod \"calico-typha-6b8f8989d8-87k2f\" (UID: \"681bb4ce-c4d0-4e9f-b4d0-5550fd39de43\") " pod="calico-system/calico-typha-6b8f8989d8-87k2f" Sep 6 01:19:41.981945 kubelet[2427]: I0906 01:19:41.981927 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-s9cfd\" (UniqueName: \"kubernetes.io/projected/681bb4ce-c4d0-4e9f-b4d0-5550fd39de43-kube-api-access-s9cfd\") pod \"calico-typha-6b8f8989d8-87k2f\" (UID: \"681bb4ce-c4d0-4e9f-b4d0-5550fd39de43\") " pod="calico-system/calico-typha-6b8f8989d8-87k2f" Sep 6 01:19:41.933000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:19:41.997510 kernel: audit: type=1327 audit(1757121581.933:905): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:19:41.985000 audit[2804]: NETFILTER_CFG table=nat:99 family=2 entries=12 op=nft_register_rule pid=2804 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:19:42.015154 kernel: audit: type=1325 audit(1757121581.985:906): table=nat:99 family=2 entries=12 op=nft_register_rule pid=2804 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:19:41.985000 audit[2804]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe716c4f0 a2=0 a3=1 items=0 ppid=2565 pid=2804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:41.985000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:19:42.118877 systemd[1]: Created slice kubepods-besteffort-podcac931b1_2500_4cea_a14e_fc163cd98762.slice. Sep 6 01:19:42.178634 env[1448]: time="2025-09-06T01:19:42.178248505Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6b8f8989d8-87k2f,Uid:681bb4ce-c4d0-4e9f-b4d0-5550fd39de43,Namespace:calico-system,Attempt:0,}" Sep 6 01:19:42.207237 kubelet[2427]: E0906 01:19:42.207185 2427 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-lcns4" podUID="35d6d670-3213-45cd-86fd-0fd88c7f3b82" Sep 6 01:19:42.232039 env[1448]: time="2025-09-06T01:19:42.231963601Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:19:42.232397 env[1448]: time="2025-09-06T01:19:42.232214321Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:19:42.232397 env[1448]: time="2025-09-06T01:19:42.232261641Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:19:42.232591 env[1448]: time="2025-09-06T01:19:42.232551681Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/030414abcefc61565cd0a2472915604f39b1536aebfb2dff39dac2b062202d93 pid=2815 runtime=io.containerd.runc.v2 Sep 6 01:19:42.259917 systemd[1]: Started cri-containerd-030414abcefc61565cd0a2472915604f39b1536aebfb2dff39dac2b062202d93.scope. Sep 6 01:19:42.285029 kubelet[2427]: I0906 01:19:42.284977 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/cac931b1-2500-4cea-a14e-fc163cd98762-flexvol-driver-host\") pod \"calico-node-76k5q\" (UID: \"cac931b1-2500-4cea-a14e-fc163cd98762\") " pod="calico-system/calico-node-76k5q" Sep 6 01:19:42.285029 kubelet[2427]: I0906 01:19:42.285025 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/cac931b1-2500-4cea-a14e-fc163cd98762-var-run-calico\") pod \"calico-node-76k5q\" (UID: \"cac931b1-2500-4cea-a14e-fc163cd98762\") " pod="calico-system/calico-node-76k5q" Sep 6 01:19:42.285209 kubelet[2427]: I0906 01:19:42.285047 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/cac931b1-2500-4cea-a14e-fc163cd98762-node-certs\") pod \"calico-node-76k5q\" (UID: \"cac931b1-2500-4cea-a14e-fc163cd98762\") " pod="calico-system/calico-node-76k5q" Sep 6 01:19:42.285209 kubelet[2427]: I0906 01:19:42.285064 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/cac931b1-2500-4cea-a14e-fc163cd98762-policysync\") pod \"calico-node-76k5q\" (UID: \"cac931b1-2500-4cea-a14e-fc163cd98762\") " pod="calico-system/calico-node-76k5q" Sep 6 01:19:42.285209 kubelet[2427]: I0906 01:19:42.285086 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/cac931b1-2500-4cea-a14e-fc163cd98762-tigera-ca-bundle\") pod \"calico-node-76k5q\" (UID: \"cac931b1-2500-4cea-a14e-fc163cd98762\") " pod="calico-system/calico-node-76k5q" Sep 6 01:19:42.285209 kubelet[2427]: I0906 01:19:42.285102 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/cac931b1-2500-4cea-a14e-fc163cd98762-lib-modules\") pod \"calico-node-76k5q\" (UID: \"cac931b1-2500-4cea-a14e-fc163cd98762\") " pod="calico-system/calico-node-76k5q" Sep 6 01:19:42.285209 kubelet[2427]: I0906 01:19:42.285117 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/cac931b1-2500-4cea-a14e-fc163cd98762-var-lib-calico\") pod \"calico-node-76k5q\" (UID: \"cac931b1-2500-4cea-a14e-fc163cd98762\") " pod="calico-system/calico-node-76k5q" Sep 6 01:19:42.285336 kubelet[2427]: I0906 01:19:42.285132 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-429dg\" (UniqueName: \"kubernetes.io/projected/cac931b1-2500-4cea-a14e-fc163cd98762-kube-api-access-429dg\") pod \"calico-node-76k5q\" (UID: \"cac931b1-2500-4cea-a14e-fc163cd98762\") " pod="calico-system/calico-node-76k5q" Sep 6 01:19:42.285336 kubelet[2427]: I0906 01:19:42.285148 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/cac931b1-2500-4cea-a14e-fc163cd98762-cni-log-dir\") pod \"calico-node-76k5q\" (UID: \"cac931b1-2500-4cea-a14e-fc163cd98762\") " pod="calico-system/calico-node-76k5q" Sep 6 01:19:42.285336 kubelet[2427]: I0906 01:19:42.285167 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/cac931b1-2500-4cea-a14e-fc163cd98762-cni-net-dir\") pod \"calico-node-76k5q\" (UID: \"cac931b1-2500-4cea-a14e-fc163cd98762\") " pod="calico-system/calico-node-76k5q" Sep 6 01:19:42.285336 kubelet[2427]: I0906 01:19:42.285184 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/cac931b1-2500-4cea-a14e-fc163cd98762-cni-bin-dir\") pod \"calico-node-76k5q\" (UID: \"cac931b1-2500-4cea-a14e-fc163cd98762\") " pod="calico-system/calico-node-76k5q" Sep 6 01:19:42.285336 kubelet[2427]: I0906 01:19:42.285199 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/cac931b1-2500-4cea-a14e-fc163cd98762-xtables-lock\") pod \"calico-node-76k5q\" (UID: \"cac931b1-2500-4cea-a14e-fc163cd98762\") " pod="calico-system/calico-node-76k5q" Sep 6 01:19:42.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit: BPF prog-id=122 op=LOAD Sep 6 01:19:42.326000 audit[2824]: AVC avc: denied { bpf } for pid=2824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit[2824]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2815 pid=2824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:42.326000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033303431346162636566633631353635636430613234373239313536 Sep 6 01:19:42.326000 audit[2824]: AVC avc: denied { perfmon } for pid=2824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit[2824]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2815 pid=2824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:42.326000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033303431346162636566633631353635636430613234373239313536 Sep 6 01:19:42.326000 audit[2824]: AVC avc: denied { bpf } for pid=2824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit[2824]: AVC avc: denied { bpf } for pid=2824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit[2824]: AVC avc: denied { bpf } for pid=2824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit[2824]: AVC avc: denied { perfmon } for pid=2824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit[2824]: AVC avc: denied { perfmon } for pid=2824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit[2824]: AVC avc: denied { perfmon } for pid=2824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit[2824]: AVC avc: denied { perfmon } for pid=2824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit[2824]: AVC avc: denied { perfmon } for pid=2824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit[2824]: AVC avc: denied { bpf } for pid=2824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit[2824]: AVC avc: denied { bpf } for pid=2824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit: BPF prog-id=123 op=LOAD Sep 6 01:19:42.326000 audit[2824]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2815 pid=2824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:42.326000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033303431346162636566633631353635636430613234373239313536 Sep 6 01:19:42.326000 audit[2824]: AVC avc: denied { bpf } for pid=2824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit[2824]: AVC avc: denied { bpf } for pid=2824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit[2824]: AVC avc: denied { perfmon } for pid=2824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit[2824]: AVC avc: denied { perfmon } for pid=2824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit[2824]: AVC avc: denied { perfmon } for pid=2824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit[2824]: AVC avc: denied { perfmon } for pid=2824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit[2824]: AVC avc: denied { perfmon } for pid=2824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit[2824]: AVC avc: denied { bpf } for pid=2824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit[2824]: AVC avc: denied { bpf } for pid=2824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit: BPF prog-id=124 op=LOAD Sep 6 01:19:42.326000 audit[2824]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2815 pid=2824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:42.326000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033303431346162636566633631353635636430613234373239313536 Sep 6 01:19:42.326000 audit: BPF prog-id=124 op=UNLOAD Sep 6 01:19:42.326000 audit: BPF prog-id=123 op=UNLOAD Sep 6 01:19:42.326000 audit[2824]: AVC avc: denied { bpf } for pid=2824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit[2824]: AVC avc: denied { bpf } for pid=2824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit[2824]: AVC avc: denied { bpf } for pid=2824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit[2824]: AVC avc: denied { perfmon } for pid=2824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit[2824]: AVC avc: denied { perfmon } for pid=2824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit[2824]: AVC avc: denied { perfmon } for pid=2824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit[2824]: AVC avc: denied { perfmon } for pid=2824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit[2824]: AVC avc: denied { perfmon } for pid=2824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit[2824]: AVC avc: denied { bpf } for pid=2824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit[2824]: AVC avc: denied { bpf } for pid=2824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.326000 audit: BPF prog-id=125 op=LOAD Sep 6 01:19:42.326000 audit[2824]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2815 pid=2824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:42.326000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033303431346162636566633631353635636430613234373239313536 Sep 6 01:19:42.381453 env[1448]: time="2025-09-06T01:19:42.381389883Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6b8f8989d8-87k2f,Uid:681bb4ce-c4d0-4e9f-b4d0-5550fd39de43,Namespace:calico-system,Attempt:0,} returns sandbox id \"030414abcefc61565cd0a2472915604f39b1536aebfb2dff39dac2b062202d93\"" Sep 6 01:19:42.383630 env[1448]: time="2025-09-06T01:19:42.383581164Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\"" Sep 6 01:19:42.385939 kubelet[2427]: I0906 01:19:42.385881 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/35d6d670-3213-45cd-86fd-0fd88c7f3b82-registration-dir\") pod \"csi-node-driver-lcns4\" (UID: \"35d6d670-3213-45cd-86fd-0fd88c7f3b82\") " pod="calico-system/csi-node-driver-lcns4" Sep 6 01:19:42.386036 kubelet[2427]: I0906 01:19:42.385964 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rcfmn\" (UniqueName: \"kubernetes.io/projected/35d6d670-3213-45cd-86fd-0fd88c7f3b82-kube-api-access-rcfmn\") pod \"csi-node-driver-lcns4\" (UID: \"35d6d670-3213-45cd-86fd-0fd88c7f3b82\") " pod="calico-system/csi-node-driver-lcns4" Sep 6 01:19:42.386117 kubelet[2427]: I0906 01:19:42.386073 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/35d6d670-3213-45cd-86fd-0fd88c7f3b82-kubelet-dir\") pod \"csi-node-driver-lcns4\" (UID: \"35d6d670-3213-45cd-86fd-0fd88c7f3b82\") " pod="calico-system/csi-node-driver-lcns4" Sep 6 01:19:42.386160 kubelet[2427]: I0906 01:19:42.386120 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/35d6d670-3213-45cd-86fd-0fd88c7f3b82-socket-dir\") pod \"csi-node-driver-lcns4\" (UID: \"35d6d670-3213-45cd-86fd-0fd88c7f3b82\") " pod="calico-system/csi-node-driver-lcns4" Sep 6 01:19:42.386368 kubelet[2427]: I0906 01:19:42.386338 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/35d6d670-3213-45cd-86fd-0fd88c7f3b82-varrun\") pod \"csi-node-driver-lcns4\" (UID: \"35d6d670-3213-45cd-86fd-0fd88c7f3b82\") " pod="calico-system/csi-node-driver-lcns4" Sep 6 01:19:42.386826 kubelet[2427]: E0906 01:19:42.386798 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.386826 kubelet[2427]: W0906 01:19:42.386819 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.386925 kubelet[2427]: E0906 01:19:42.386849 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.387119 kubelet[2427]: E0906 01:19:42.387087 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.387119 kubelet[2427]: W0906 01:19:42.387111 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.387205 kubelet[2427]: E0906 01:19:42.387126 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.387386 kubelet[2427]: E0906 01:19:42.387361 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.387386 kubelet[2427]: W0906 01:19:42.387378 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.387386 kubelet[2427]: E0906 01:19:42.387391 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.387621 kubelet[2427]: E0906 01:19:42.387593 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.387621 kubelet[2427]: W0906 01:19:42.387609 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.387700 kubelet[2427]: E0906 01:19:42.387623 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.389640 kubelet[2427]: E0906 01:19:42.388843 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.389640 kubelet[2427]: W0906 01:19:42.388879 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.389640 kubelet[2427]: E0906 01:19:42.388901 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.392449 kubelet[2427]: E0906 01:19:42.392406 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.392449 kubelet[2427]: W0906 01:19:42.392441 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.392619 kubelet[2427]: E0906 01:19:42.392557 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.392763 kubelet[2427]: E0906 01:19:42.392732 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.392816 kubelet[2427]: W0906 01:19:42.392763 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.392873 kubelet[2427]: E0906 01:19:42.392856 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.393892 kubelet[2427]: E0906 01:19:42.393855 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.393892 kubelet[2427]: W0906 01:19:42.393888 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.394043 kubelet[2427]: E0906 01:19:42.394015 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.395205 kubelet[2427]: E0906 01:19:42.395035 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.395205 kubelet[2427]: W0906 01:19:42.395068 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.395328 kubelet[2427]: E0906 01:19:42.395218 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.396583 kubelet[2427]: E0906 01:19:42.396549 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.396583 kubelet[2427]: W0906 01:19:42.396573 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.396822 kubelet[2427]: E0906 01:19:42.396803 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.397044 kubelet[2427]: E0906 01:19:42.397023 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.397044 kubelet[2427]: W0906 01:19:42.397040 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.397143 kubelet[2427]: E0906 01:19:42.397123 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.397318 kubelet[2427]: E0906 01:19:42.397300 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.397318 kubelet[2427]: W0906 01:19:42.397314 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.397420 kubelet[2427]: E0906 01:19:42.397400 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.397572 kubelet[2427]: E0906 01:19:42.397543 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.397572 kubelet[2427]: W0906 01:19:42.397566 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.397678 kubelet[2427]: E0906 01:19:42.397661 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.399922 kubelet[2427]: E0906 01:19:42.399886 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.399922 kubelet[2427]: W0906 01:19:42.399914 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.400075 kubelet[2427]: E0906 01:19:42.399943 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.400216 kubelet[2427]: E0906 01:19:42.400198 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.400259 kubelet[2427]: W0906 01:19:42.400214 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.400333 kubelet[2427]: E0906 01:19:42.400313 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.401919 kubelet[2427]: E0906 01:19:42.401879 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.401919 kubelet[2427]: W0906 01:19:42.401910 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.402054 kubelet[2427]: E0906 01:19:42.402027 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.402194 kubelet[2427]: E0906 01:19:42.402176 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.402194 kubelet[2427]: W0906 01:19:42.402189 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.402290 kubelet[2427]: E0906 01:19:42.402272 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.403902 kubelet[2427]: E0906 01:19:42.403866 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.403902 kubelet[2427]: W0906 01:19:42.403895 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.404068 kubelet[2427]: E0906 01:19:42.404048 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.405109 kubelet[2427]: E0906 01:19:42.405083 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.405109 kubelet[2427]: W0906 01:19:42.405105 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.405230 kubelet[2427]: E0906 01:19:42.405216 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.405377 kubelet[2427]: E0906 01:19:42.405359 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.405377 kubelet[2427]: W0906 01:19:42.405372 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.405475 kubelet[2427]: E0906 01:19:42.405457 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.405858 kubelet[2427]: E0906 01:19:42.405833 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.405927 kubelet[2427]: W0906 01:19:42.405862 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.405975 kubelet[2427]: E0906 01:19:42.405954 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.406166 kubelet[2427]: E0906 01:19:42.406149 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.406166 kubelet[2427]: W0906 01:19:42.406164 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.406271 kubelet[2427]: E0906 01:19:42.406252 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.407905 kubelet[2427]: E0906 01:19:42.407877 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.407905 kubelet[2427]: W0906 01:19:42.407899 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.408035 kubelet[2427]: E0906 01:19:42.408012 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.409977 kubelet[2427]: E0906 01:19:42.409938 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.409977 kubelet[2427]: W0906 01:19:42.409970 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.410132 kubelet[2427]: E0906 01:19:42.410111 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.410348 kubelet[2427]: E0906 01:19:42.410326 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.410400 kubelet[2427]: W0906 01:19:42.410352 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.410511 kubelet[2427]: E0906 01:19:42.410491 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.410662 kubelet[2427]: E0906 01:19:42.410635 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.410662 kubelet[2427]: W0906 01:19:42.410657 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.410794 kubelet[2427]: E0906 01:19:42.410774 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.411512 kubelet[2427]: E0906 01:19:42.411474 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.411512 kubelet[2427]: W0906 01:19:42.411508 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.411668 kubelet[2427]: E0906 01:19:42.411647 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.411854 kubelet[2427]: E0906 01:19:42.411831 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.411854 kubelet[2427]: W0906 01:19:42.411848 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.411985 kubelet[2427]: E0906 01:19:42.411966 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.412815 kubelet[2427]: E0906 01:19:42.412790 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.412815 kubelet[2427]: W0906 01:19:42.412811 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.412925 kubelet[2427]: E0906 01:19:42.412911 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.413071 kubelet[2427]: E0906 01:19:42.413047 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.413071 kubelet[2427]: W0906 01:19:42.413067 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.413199 kubelet[2427]: E0906 01:19:42.413180 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.413352 kubelet[2427]: E0906 01:19:42.413330 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.413411 kubelet[2427]: W0906 01:19:42.413346 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.413480 kubelet[2427]: E0906 01:19:42.413462 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.413846 kubelet[2427]: E0906 01:19:42.413824 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.413846 kubelet[2427]: W0906 01:19:42.413842 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.413998 kubelet[2427]: E0906 01:19:42.413862 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.414115 kubelet[2427]: E0906 01:19:42.414098 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.414115 kubelet[2427]: W0906 01:19:42.414113 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.414190 kubelet[2427]: E0906 01:19:42.414127 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.415935 kubelet[2427]: E0906 01:19:42.415904 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.415935 kubelet[2427]: W0906 01:19:42.415930 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.416085 kubelet[2427]: E0906 01:19:42.416065 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.416597 kubelet[2427]: E0906 01:19:42.416572 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.416597 kubelet[2427]: W0906 01:19:42.416592 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.416691 kubelet[2427]: E0906 01:19:42.416615 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.416960 kubelet[2427]: E0906 01:19:42.416937 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.416960 kubelet[2427]: W0906 01:19:42.416955 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.417054 kubelet[2427]: E0906 01:19:42.416974 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.417240 kubelet[2427]: E0906 01:19:42.417218 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.417240 kubelet[2427]: W0906 01:19:42.417236 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.417319 kubelet[2427]: E0906 01:19:42.417248 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.442951 kubelet[2427]: E0906 01:19:42.442884 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.442951 kubelet[2427]: W0906 01:19:42.442914 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.442951 kubelet[2427]: E0906 01:19:42.442955 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.510413 kubelet[2427]: E0906 01:19:42.510384 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.510588 kubelet[2427]: W0906 01:19:42.510572 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.510668 kubelet[2427]: E0906 01:19:42.510652 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.511055 kubelet[2427]: E0906 01:19:42.511040 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.511147 kubelet[2427]: W0906 01:19:42.511134 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.511220 kubelet[2427]: E0906 01:19:42.511207 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.511463 kubelet[2427]: E0906 01:19:42.511438 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.511463 kubelet[2427]: W0906 01:19:42.511457 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.511551 kubelet[2427]: E0906 01:19:42.511479 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.511880 kubelet[2427]: E0906 01:19:42.511795 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.511880 kubelet[2427]: W0906 01:19:42.511818 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.511880 kubelet[2427]: E0906 01:19:42.511835 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.515861 kubelet[2427]: E0906 01:19:42.515822 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.515861 kubelet[2427]: W0906 01:19:42.515852 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.516014 kubelet[2427]: E0906 01:19:42.515888 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.516436 kubelet[2427]: E0906 01:19:42.516411 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.516436 kubelet[2427]: W0906 01:19:42.516431 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.516563 kubelet[2427]: E0906 01:19:42.516542 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.518000 kubelet[2427]: E0906 01:19:42.517971 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.518064 kubelet[2427]: W0906 01:19:42.518000 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.518150 kubelet[2427]: E0906 01:19:42.518130 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.518397 kubelet[2427]: E0906 01:19:42.518375 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.518397 kubelet[2427]: W0906 01:19:42.518392 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.518486 kubelet[2427]: E0906 01:19:42.518411 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.518645 kubelet[2427]: E0906 01:19:42.518623 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.518645 kubelet[2427]: W0906 01:19:42.518638 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.518728 kubelet[2427]: E0906 01:19:42.518657 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.519050 kubelet[2427]: E0906 01:19:42.519029 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.519050 kubelet[2427]: W0906 01:19:42.519047 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.519136 kubelet[2427]: E0906 01:19:42.519065 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.519348 kubelet[2427]: E0906 01:19:42.519326 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.519348 kubelet[2427]: W0906 01:19:42.519342 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.519458 kubelet[2427]: E0906 01:19:42.519441 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.519841 kubelet[2427]: E0906 01:19:42.519817 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.519841 kubelet[2427]: W0906 01:19:42.519836 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.519959 kubelet[2427]: E0906 01:19:42.519938 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.520380 kubelet[2427]: E0906 01:19:42.520355 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.520380 kubelet[2427]: W0906 01:19:42.520378 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.520462 kubelet[2427]: E0906 01:19:42.520400 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.520689 kubelet[2427]: E0906 01:19:42.520667 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.520689 kubelet[2427]: W0906 01:19:42.520685 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.520787 kubelet[2427]: E0906 01:19:42.520710 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.520986 kubelet[2427]: E0906 01:19:42.520965 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.520986 kubelet[2427]: W0906 01:19:42.520981 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.521070 kubelet[2427]: E0906 01:19:42.521004 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.521292 kubelet[2427]: E0906 01:19:42.521273 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.521292 kubelet[2427]: W0906 01:19:42.521289 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.521387 kubelet[2427]: E0906 01:19:42.521376 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.521796 kubelet[2427]: E0906 01:19:42.521766 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.521796 kubelet[2427]: W0906 01:19:42.521792 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.521935 kubelet[2427]: E0906 01:19:42.521913 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.522910 kubelet[2427]: E0906 01:19:42.522883 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.522910 kubelet[2427]: W0906 01:19:42.522904 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.523022 kubelet[2427]: E0906 01:19:42.522931 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.523195 kubelet[2427]: E0906 01:19:42.523175 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.523195 kubelet[2427]: W0906 01:19:42.523192 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.523287 kubelet[2427]: E0906 01:19:42.523214 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.523870 kubelet[2427]: E0906 01:19:42.523843 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.523870 kubelet[2427]: W0906 01:19:42.523867 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.523989 kubelet[2427]: E0906 01:19:42.523968 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.524256 kubelet[2427]: E0906 01:19:42.524235 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.524256 kubelet[2427]: W0906 01:19:42.524252 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.524387 kubelet[2427]: E0906 01:19:42.524269 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.525434 kubelet[2427]: E0906 01:19:42.525408 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.525434 kubelet[2427]: W0906 01:19:42.525430 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.525611 kubelet[2427]: E0906 01:19:42.525460 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.525805 kubelet[2427]: E0906 01:19:42.525783 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.525805 kubelet[2427]: W0906 01:19:42.525801 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.525907 kubelet[2427]: E0906 01:19:42.525884 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.526330 kubelet[2427]: E0906 01:19:42.526309 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.526330 kubelet[2427]: W0906 01:19:42.526326 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.526823 kubelet[2427]: E0906 01:19:42.526802 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.527243 kubelet[2427]: E0906 01:19:42.527211 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.527243 kubelet[2427]: W0906 01:19:42.527230 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.527319 kubelet[2427]: E0906 01:19:42.527243 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.540871 kubelet[2427]: E0906 01:19:42.540831 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:42.540871 kubelet[2427]: W0906 01:19:42.540861 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:42.541054 kubelet[2427]: E0906 01:19:42.540884 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:42.722486 env[1448]: time="2025-09-06T01:19:42.722444500Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-76k5q,Uid:cac931b1-2500-4cea-a14e-fc163cd98762,Namespace:calico-system,Attempt:0,}" Sep 6 01:19:42.778674 env[1448]: time="2025-09-06T01:19:42.775884875Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:19:42.779033 env[1448]: time="2025-09-06T01:19:42.778995956Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:19:42.779141 env[1448]: time="2025-09-06T01:19:42.779119356Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:19:42.779431 env[1448]: time="2025-09-06T01:19:42.779382436Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c43045634138cbed91b4f00c7c94893d25bfa317f91baf9e874a65d331c63f63 pid=2922 runtime=io.containerd.runc.v2 Sep 6 01:19:42.805144 systemd[1]: Started cri-containerd-c43045634138cbed91b4f00c7c94893d25bfa317f91baf9e874a65d331c63f63.scope. Sep 6 01:19:42.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit: BPF prog-id=126 op=LOAD Sep 6 01:19:42.824000 audit[2933]: AVC avc: denied { bpf } for pid=2933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit[2933]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2922 pid=2933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:42.824000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334333034353633343133386362656439316234663030633763393438 Sep 6 01:19:42.824000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit[2933]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2922 pid=2933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:42.824000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334333034353633343133386362656439316234663030633763393438 Sep 6 01:19:42.824000 audit[2933]: AVC avc: denied { bpf } for pid=2933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit[2933]: AVC avc: denied { bpf } for pid=2933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit[2933]: AVC avc: denied { bpf } for pid=2933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit[2933]: AVC avc: denied { bpf } for pid=2933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit[2933]: AVC avc: denied { bpf } for pid=2933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit: BPF prog-id=127 op=LOAD Sep 6 01:19:42.824000 audit[2933]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2922 pid=2933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:42.824000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334333034353633343133386362656439316234663030633763393438 Sep 6 01:19:42.824000 audit[2933]: AVC avc: denied { bpf } for pid=2933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit[2933]: AVC avc: denied { bpf } for pid=2933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit[2933]: AVC avc: denied { bpf } for pid=2933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit[2933]: AVC avc: denied { bpf } for pid=2933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit: BPF prog-id=128 op=LOAD Sep 6 01:19:42.824000 audit[2933]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2922 pid=2933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:42.824000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334333034353633343133386362656439316234663030633763393438 Sep 6 01:19:42.824000 audit: BPF prog-id=128 op=UNLOAD Sep 6 01:19:42.824000 audit: BPF prog-id=127 op=UNLOAD Sep 6 01:19:42.824000 audit[2933]: AVC avc: denied { bpf } for pid=2933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit[2933]: AVC avc: denied { bpf } for pid=2933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit[2933]: AVC avc: denied { bpf } for pid=2933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit[2933]: AVC avc: denied { perfmon } for pid=2933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit[2933]: AVC avc: denied { bpf } for pid=2933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit[2933]: AVC avc: denied { bpf } for pid=2933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:42.824000 audit: BPF prog-id=129 op=LOAD Sep 6 01:19:42.824000 audit[2933]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2922 pid=2933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:42.824000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334333034353633343133386362656439316234663030633763393438 Sep 6 01:19:42.844564 env[1448]: time="2025-09-06T01:19:42.844521255Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-76k5q,Uid:cac931b1-2500-4cea-a14e-fc163cd98762,Namespace:calico-system,Attempt:0,} returns sandbox id \"c43045634138cbed91b4f00c7c94893d25bfa317f91baf9e874a65d331c63f63\"" Sep 6 01:19:42.995000 audit[2955]: NETFILTER_CFG table=filter:100 family=2 entries=20 op=nft_register_rule pid=2955 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:19:42.995000 audit[2955]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffdf5e9190 a2=0 a3=1 items=0 ppid=2565 pid=2955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:42.995000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:19:43.000000 audit[2955]: NETFILTER_CFG table=nat:101 family=2 entries=12 op=nft_register_rule pid=2955 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:19:43.000000 audit[2955]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdf5e9190 a2=0 a3=1 items=0 ppid=2565 pid=2955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:43.000000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:19:43.093725 systemd[1]: run-containerd-runc-k8s.io-030414abcefc61565cd0a2472915604f39b1536aebfb2dff39dac2b062202d93-runc.scyF6V.mount: Deactivated successfully. Sep 6 01:19:43.586547 kubelet[2427]: E0906 01:19:43.585369 2427 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-lcns4" podUID="35d6d670-3213-45cd-86fd-0fd88c7f3b82" Sep 6 01:19:43.752767 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1964014095.mount: Deactivated successfully. Sep 6 01:19:44.016000 audit[2958]: NETFILTER_CFG table=filter:102 family=2 entries=22 op=nft_register_rule pid=2958 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:19:44.016000 audit[2958]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffe06639f0 a2=0 a3=1 items=0 ppid=2565 pid=2958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:44.016000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:19:44.023000 audit[2958]: NETFILTER_CFG table=nat:103 family=2 entries=12 op=nft_register_rule pid=2958 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:19:44.023000 audit[2958]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe06639f0 a2=0 a3=1 items=0 ppid=2565 pid=2958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:44.023000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:19:44.788719 env[1448]: time="2025-09-06T01:19:44.788675152Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:44.796716 env[1448]: time="2025-09-06T01:19:44.796673834Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6a1496fdc48cc0b9ab3c10aef777497484efac5df9efbfbbdf9775e9583645cb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:44.802540 env[1448]: time="2025-09-06T01:19:44.802500956Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:44.807669 env[1448]: time="2025-09-06T01:19:44.807610157Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:f4a3d61ffda9c98a53adeb412c5af404ca3727a3cc2d0b4ef28d197bdd47ecaa,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:44.808429 env[1448]: time="2025-09-06T01:19:44.808397157Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\" returns image reference \"sha256:6a1496fdc48cc0b9ab3c10aef777497484efac5df9efbfbbdf9775e9583645cb\"" Sep 6 01:19:44.816208 env[1448]: time="2025-09-06T01:19:44.816168399Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\"" Sep 6 01:19:44.823806 env[1448]: time="2025-09-06T01:19:44.823721681Z" level=info msg="CreateContainer within sandbox \"030414abcefc61565cd0a2472915604f39b1536aebfb2dff39dac2b062202d93\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Sep 6 01:19:44.859588 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount404036200.mount: Deactivated successfully. Sep 6 01:19:44.875931 env[1448]: time="2025-09-06T01:19:44.875882736Z" level=info msg="CreateContainer within sandbox \"030414abcefc61565cd0a2472915604f39b1536aebfb2dff39dac2b062202d93\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"5fb50da1c63691430f9b9eaa522c9628c8aa2148e18ce477d70dfab038849dd8\"" Sep 6 01:19:44.876891 env[1448]: time="2025-09-06T01:19:44.876838496Z" level=info msg="StartContainer for \"5fb50da1c63691430f9b9eaa522c9628c8aa2148e18ce477d70dfab038849dd8\"" Sep 6 01:19:44.904554 systemd[1]: Started cri-containerd-5fb50da1c63691430f9b9eaa522c9628c8aa2148e18ce477d70dfab038849dd8.scope. Sep 6 01:19:44.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.918000 audit: BPF prog-id=130 op=LOAD Sep 6 01:19:44.918000 audit[2970]: AVC avc: denied { bpf } for pid=2970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.918000 audit[2970]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2815 pid=2970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:44.918000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566623530646131633633363931343330663962396561613532326339 Sep 6 01:19:44.918000 audit[2970]: AVC avc: denied { perfmon } for pid=2970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.918000 audit[2970]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2815 pid=2970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:44.918000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566623530646131633633363931343330663962396561613532326339 Sep 6 01:19:44.919000 audit[2970]: AVC avc: denied { bpf } for pid=2970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.919000 audit[2970]: AVC avc: denied { bpf } for pid=2970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.919000 audit[2970]: AVC avc: denied { bpf } for pid=2970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.919000 audit[2970]: AVC avc: denied { perfmon } for pid=2970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.919000 audit[2970]: AVC avc: denied { perfmon } for pid=2970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.919000 audit[2970]: AVC avc: denied { perfmon } for pid=2970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.919000 audit[2970]: AVC avc: denied { perfmon } for pid=2970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.919000 audit[2970]: AVC avc: denied { perfmon } for pid=2970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.919000 audit[2970]: AVC avc: denied { bpf } for pid=2970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.919000 audit[2970]: AVC avc: denied { bpf } for pid=2970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.919000 audit: BPF prog-id=131 op=LOAD Sep 6 01:19:44.919000 audit[2970]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2815 pid=2970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:44.919000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566623530646131633633363931343330663962396561613532326339 Sep 6 01:19:44.920000 audit[2970]: AVC avc: denied { bpf } for pid=2970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.920000 audit[2970]: AVC avc: denied { bpf } for pid=2970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.920000 audit[2970]: AVC avc: denied { perfmon } for pid=2970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.920000 audit[2970]: AVC avc: denied { perfmon } for pid=2970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.920000 audit[2970]: AVC avc: denied { perfmon } for pid=2970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.920000 audit[2970]: AVC avc: denied { perfmon } for pid=2970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.920000 audit[2970]: AVC avc: denied { perfmon } for pid=2970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.920000 audit[2970]: AVC avc: denied { bpf } for pid=2970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.920000 audit[2970]: AVC avc: denied { bpf } for pid=2970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.920000 audit: BPF prog-id=132 op=LOAD Sep 6 01:19:44.920000 audit[2970]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2815 pid=2970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:44.920000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566623530646131633633363931343330663962396561613532326339 Sep 6 01:19:44.920000 audit: BPF prog-id=132 op=UNLOAD Sep 6 01:19:44.920000 audit: BPF prog-id=131 op=UNLOAD Sep 6 01:19:44.920000 audit[2970]: AVC avc: denied { bpf } for pid=2970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.920000 audit[2970]: AVC avc: denied { bpf } for pid=2970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.920000 audit[2970]: AVC avc: denied { bpf } for pid=2970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.920000 audit[2970]: AVC avc: denied { perfmon } for pid=2970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.920000 audit[2970]: AVC avc: denied { perfmon } for pid=2970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.920000 audit[2970]: AVC avc: denied { perfmon } for pid=2970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.920000 audit[2970]: AVC avc: denied { perfmon } for pid=2970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.920000 audit[2970]: AVC avc: denied { perfmon } for pid=2970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.920000 audit[2970]: AVC avc: denied { bpf } for pid=2970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.920000 audit[2970]: AVC avc: denied { bpf } for pid=2970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:44.920000 audit: BPF prog-id=133 op=LOAD Sep 6 01:19:44.920000 audit[2970]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2815 pid=2970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:44.920000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566623530646131633633363931343330663962396561613532326339 Sep 6 01:19:44.950124 env[1448]: time="2025-09-06T01:19:44.950061636Z" level=info msg="StartContainer for \"5fb50da1c63691430f9b9eaa522c9628c8aa2148e18ce477d70dfab038849dd8\" returns successfully" Sep 6 01:19:45.586372 kubelet[2427]: E0906 01:19:45.585985 2427 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-lcns4" podUID="35d6d670-3213-45cd-86fd-0fd88c7f3b82" Sep 6 01:19:45.709028 kubelet[2427]: E0906 01:19:45.708990 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.709028 kubelet[2427]: W0906 01:19:45.709019 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.709219 kubelet[2427]: E0906 01:19:45.709043 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.709219 kubelet[2427]: E0906 01:19:45.709189 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.709280 kubelet[2427]: W0906 01:19:45.709197 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.709280 kubelet[2427]: E0906 01:19:45.709236 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.709382 kubelet[2427]: E0906 01:19:45.709359 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.709382 kubelet[2427]: W0906 01:19:45.709375 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.709450 kubelet[2427]: E0906 01:19:45.709386 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.709520 kubelet[2427]: E0906 01:19:45.709504 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.709520 kubelet[2427]: W0906 01:19:45.709517 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.709586 kubelet[2427]: E0906 01:19:45.709525 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.709672 kubelet[2427]: E0906 01:19:45.709656 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.709672 kubelet[2427]: W0906 01:19:45.709669 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.709738 kubelet[2427]: E0906 01:19:45.709677 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.709818 kubelet[2427]: E0906 01:19:45.709803 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.709818 kubelet[2427]: W0906 01:19:45.709815 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.709905 kubelet[2427]: E0906 01:19:45.709823 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.709954 kubelet[2427]: E0906 01:19:45.709937 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.709954 kubelet[2427]: W0906 01:19:45.709949 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.710011 kubelet[2427]: E0906 01:19:45.709956 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.710088 kubelet[2427]: E0906 01:19:45.710070 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.710088 kubelet[2427]: W0906 01:19:45.710083 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.710156 kubelet[2427]: E0906 01:19:45.710090 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.710235 kubelet[2427]: E0906 01:19:45.710218 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.710235 kubelet[2427]: W0906 01:19:45.710232 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.710299 kubelet[2427]: E0906 01:19:45.710239 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.710359 kubelet[2427]: E0906 01:19:45.710343 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.710359 kubelet[2427]: W0906 01:19:45.710357 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.710428 kubelet[2427]: E0906 01:19:45.710364 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.710488 kubelet[2427]: E0906 01:19:45.710472 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.710488 kubelet[2427]: W0906 01:19:45.710484 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.710555 kubelet[2427]: E0906 01:19:45.710492 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.710621 kubelet[2427]: E0906 01:19:45.710606 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.710621 kubelet[2427]: W0906 01:19:45.710618 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.710701 kubelet[2427]: E0906 01:19:45.710625 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.710777 kubelet[2427]: E0906 01:19:45.710739 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.710827 kubelet[2427]: W0906 01:19:45.710770 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.710827 kubelet[2427]: E0906 01:19:45.710794 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.710941 kubelet[2427]: E0906 01:19:45.710922 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.710941 kubelet[2427]: W0906 01:19:45.710935 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.711008 kubelet[2427]: E0906 01:19:45.710944 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.711082 kubelet[2427]: E0906 01:19:45.711064 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.711082 kubelet[2427]: W0906 01:19:45.711077 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.711153 kubelet[2427]: E0906 01:19:45.711086 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.743566 kubelet[2427]: E0906 01:19:45.743535 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.743566 kubelet[2427]: W0906 01:19:45.743556 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.743566 kubelet[2427]: E0906 01:19:45.743572 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.743779 kubelet[2427]: E0906 01:19:45.743728 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.743779 kubelet[2427]: W0906 01:19:45.743735 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.743779 kubelet[2427]: E0906 01:19:45.743773 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.743949 kubelet[2427]: E0906 01:19:45.743923 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.743949 kubelet[2427]: W0906 01:19:45.743938 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.743949 kubelet[2427]: E0906 01:19:45.743950 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.744190 kubelet[2427]: E0906 01:19:45.744173 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.744190 kubelet[2427]: W0906 01:19:45.744186 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.744190 kubelet[2427]: E0906 01:19:45.744200 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.744350 kubelet[2427]: E0906 01:19:45.744337 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.744350 kubelet[2427]: W0906 01:19:45.744349 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.744428 kubelet[2427]: E0906 01:19:45.744362 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.744514 kubelet[2427]: E0906 01:19:45.744498 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.744514 kubelet[2427]: W0906 01:19:45.744510 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.744588 kubelet[2427]: E0906 01:19:45.744519 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.744687 kubelet[2427]: E0906 01:19:45.744671 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.744687 kubelet[2427]: W0906 01:19:45.744683 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.744831 kubelet[2427]: E0906 01:19:45.744699 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.745058 kubelet[2427]: E0906 01:19:45.745043 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.745058 kubelet[2427]: W0906 01:19:45.745056 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.745151 kubelet[2427]: E0906 01:19:45.745114 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.745234 kubelet[2427]: E0906 01:19:45.745221 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.745234 kubelet[2427]: W0906 01:19:45.745232 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.745314 kubelet[2427]: E0906 01:19:45.745297 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.745414 kubelet[2427]: E0906 01:19:45.745400 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.745414 kubelet[2427]: W0906 01:19:45.745411 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.745477 kubelet[2427]: E0906 01:19:45.745424 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.745568 kubelet[2427]: E0906 01:19:45.745546 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.745568 kubelet[2427]: W0906 01:19:45.745558 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.745568 kubelet[2427]: E0906 01:19:45.745567 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.745692 kubelet[2427]: E0906 01:19:45.745680 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.745692 kubelet[2427]: W0906 01:19:45.745691 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.745813 kubelet[2427]: E0906 01:19:45.745703 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.746002 kubelet[2427]: E0906 01:19:45.745985 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.746002 kubelet[2427]: W0906 01:19:45.745999 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.746082 kubelet[2427]: E0906 01:19:45.746015 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.746353 kubelet[2427]: E0906 01:19:45.746285 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.746353 kubelet[2427]: W0906 01:19:45.746298 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.746353 kubelet[2427]: E0906 01:19:45.746323 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.746493 kubelet[2427]: E0906 01:19:45.746472 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.746493 kubelet[2427]: W0906 01:19:45.746489 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.746561 kubelet[2427]: E0906 01:19:45.746506 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.746694 kubelet[2427]: E0906 01:19:45.746679 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.746694 kubelet[2427]: W0906 01:19:45.746693 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.746782 kubelet[2427]: E0906 01:19:45.746701 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.746913 kubelet[2427]: E0906 01:19:45.746897 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.746913 kubelet[2427]: W0906 01:19:45.746912 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.746974 kubelet[2427]: E0906 01:19:45.746922 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:45.747269 kubelet[2427]: E0906 01:19:45.747252 2427 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:19:45.747269 kubelet[2427]: W0906 01:19:45.747267 2427 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:19:45.747341 kubelet[2427]: E0906 01:19:45.747278 2427 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:19:46.474507 env[1448]: time="2025-09-06T01:19:46.474459559Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:46.481370 env[1448]: time="2025-09-06T01:19:46.481327561Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:29e6f31ad72882b1b817dd257df6b7981e4d7d31d872b7fe2cf102c6e2af27a5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:46.487122 env[1448]: time="2025-09-06T01:19:46.487072402Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:46.491558 env[1448]: time="2025-09-06T01:19:46.491518483Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:81bdfcd9dbd36624dc35354e8c181c75631ba40e6c7df5820f5f56cea36f0ef9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:46.491957 env[1448]: time="2025-09-06T01:19:46.491924164Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\" returns image reference \"sha256:29e6f31ad72882b1b817dd257df6b7981e4d7d31d872b7fe2cf102c6e2af27a5\"" Sep 6 01:19:46.496444 env[1448]: time="2025-09-06T01:19:46.496389245Z" level=info msg="CreateContainer within sandbox \"c43045634138cbed91b4f00c7c94893d25bfa317f91baf9e874a65d331c63f63\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Sep 6 01:19:46.525584 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3691568819.mount: Deactivated successfully. Sep 6 01:19:46.542597 env[1448]: time="2025-09-06T01:19:46.542528777Z" level=info msg="CreateContainer within sandbox \"c43045634138cbed91b4f00c7c94893d25bfa317f91baf9e874a65d331c63f63\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"f6432e465064c3d4cd2057ea537d22de9c9dfcb855def5a55b753e1650e79e47\"" Sep 6 01:19:46.543125 env[1448]: time="2025-09-06T01:19:46.543099377Z" level=info msg="StartContainer for \"f6432e465064c3d4cd2057ea537d22de9c9dfcb855def5a55b753e1650e79e47\"" Sep 6 01:19:46.563795 systemd[1]: Started cri-containerd-f6432e465064c3d4cd2057ea537d22de9c9dfcb855def5a55b753e1650e79e47.scope. Sep 6 01:19:46.581000 audit[3044]: AVC avc: denied { perfmon } for pid=3044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:46.581000 audit[3044]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2922 pid=3044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:46.581000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636343332653436353036346333643463643230353765613533376432 Sep 6 01:19:46.582000 audit[3044]: AVC avc: denied { bpf } for pid=3044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:46.582000 audit[3044]: AVC avc: denied { bpf } for pid=3044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:46.582000 audit[3044]: AVC avc: denied { bpf } for pid=3044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:46.582000 audit[3044]: AVC avc: denied { perfmon } for pid=3044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:46.582000 audit[3044]: AVC avc: denied { perfmon } for pid=3044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:46.582000 audit[3044]: AVC avc: denied { perfmon } for pid=3044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:46.582000 audit[3044]: AVC avc: denied { perfmon } for pid=3044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:46.582000 audit[3044]: AVC avc: denied { perfmon } for pid=3044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:46.582000 audit[3044]: AVC avc: denied { bpf } for pid=3044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:46.582000 audit[3044]: AVC avc: denied { bpf } for pid=3044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:46.582000 audit: BPF prog-id=134 op=LOAD Sep 6 01:19:46.582000 audit[3044]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2922 pid=3044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:46.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636343332653436353036346333643463643230353765613533376432 Sep 6 01:19:46.582000 audit[3044]: AVC avc: denied { bpf } for pid=3044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:46.582000 audit[3044]: AVC avc: denied { bpf } for pid=3044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:46.582000 audit[3044]: AVC avc: denied { perfmon } for pid=3044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:46.582000 audit[3044]: AVC avc: denied { perfmon } for pid=3044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:46.582000 audit[3044]: AVC avc: denied { perfmon } for pid=3044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:46.582000 audit[3044]: AVC avc: denied { perfmon } for pid=3044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:46.582000 audit[3044]: AVC avc: denied { perfmon } for pid=3044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:46.582000 audit[3044]: AVC avc: denied { bpf } for pid=3044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:46.582000 audit[3044]: AVC avc: denied { bpf } for pid=3044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:46.582000 audit: BPF prog-id=135 op=LOAD Sep 6 01:19:46.582000 audit[3044]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2922 pid=3044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:46.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636343332653436353036346333643463643230353765613533376432 Sep 6 01:19:46.582000 audit: BPF prog-id=135 op=UNLOAD Sep 6 01:19:46.582000 audit: BPF prog-id=134 op=UNLOAD Sep 6 01:19:46.582000 audit[3044]: AVC avc: denied { bpf } for pid=3044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:46.582000 audit[3044]: AVC avc: denied { bpf } for pid=3044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:46.582000 audit[3044]: AVC avc: denied { bpf } for pid=3044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:46.582000 audit[3044]: AVC avc: denied { perfmon } for pid=3044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:46.582000 audit[3044]: AVC avc: denied { perfmon } for pid=3044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:46.582000 audit[3044]: AVC avc: denied { perfmon } for pid=3044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:46.582000 audit[3044]: AVC avc: denied { perfmon } for pid=3044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:46.582000 audit[3044]: AVC avc: denied { perfmon } for pid=3044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:46.582000 audit[3044]: AVC avc: denied { bpf } for pid=3044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:46.582000 audit[3044]: AVC avc: denied { bpf } for pid=3044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:46.582000 audit: BPF prog-id=136 op=LOAD Sep 6 01:19:46.582000 audit[3044]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2922 pid=3044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:46.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636343332653436353036346333643463643230353765613533376432 Sep 6 01:19:46.602572 env[1448]: time="2025-09-06T01:19:46.602507432Z" level=info msg="StartContainer for \"f6432e465064c3d4cd2057ea537d22de9c9dfcb855def5a55b753e1650e79e47\" returns successfully" Sep 6 01:19:46.613324 systemd[1]: cri-containerd-f6432e465064c3d4cd2057ea537d22de9c9dfcb855def5a55b753e1650e79e47.scope: Deactivated successfully. Sep 6 01:19:46.617000 audit: BPF prog-id=136 op=UNLOAD Sep 6 01:19:46.690005 kubelet[2427]: I0906 01:19:46.689972 2427 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 6 01:19:46.711253 kubelet[2427]: I0906 01:19:46.711189 2427 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-6b8f8989d8-87k2f" podStartSLOduration=3.284416227 podStartE2EDuration="5.711170621s" podCreationTimestamp="2025-09-06 01:19:41 +0000 UTC" firstStartedPulling="2025-09-06 01:19:42.382892444 +0000 UTC m=+25.018015299" lastFinishedPulling="2025-09-06 01:19:44.809646838 +0000 UTC m=+27.444769693" observedRunningTime="2025-09-06 01:19:45.704465597 +0000 UTC m=+28.339588452" watchObservedRunningTime="2025-09-06 01:19:46.711170621 +0000 UTC m=+29.346293476" Sep 6 01:19:46.814489 systemd[1]: run-containerd-runc-k8s.io-f6432e465064c3d4cd2057ea537d22de9c9dfcb855def5a55b753e1650e79e47-runc.roReuU.mount: Deactivated successfully. Sep 6 01:19:46.814594 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f6432e465064c3d4cd2057ea537d22de9c9dfcb855def5a55b753e1650e79e47-rootfs.mount: Deactivated successfully. Sep 6 01:19:47.585202 kubelet[2427]: E0906 01:19:47.585147 2427 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-lcns4" podUID="35d6d670-3213-45cd-86fd-0fd88c7f3b82" Sep 6 01:19:47.641724 env[1448]: time="2025-09-06T01:19:47.641665219Z" level=info msg="shim disconnected" id=f6432e465064c3d4cd2057ea537d22de9c9dfcb855def5a55b753e1650e79e47 Sep 6 01:19:47.642130 env[1448]: time="2025-09-06T01:19:47.642109139Z" level=warning msg="cleaning up after shim disconnected" id=f6432e465064c3d4cd2057ea537d22de9c9dfcb855def5a55b753e1650e79e47 namespace=k8s.io Sep 6 01:19:47.642213 env[1448]: time="2025-09-06T01:19:47.642199699Z" level=info msg="cleaning up dead shim" Sep 6 01:19:47.654232 env[1448]: time="2025-09-06T01:19:47.654187303Z" level=warning msg="cleanup warnings time=\"2025-09-06T01:19:47Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3087 runtime=io.containerd.runc.v2\n" Sep 6 01:19:47.699770 env[1448]: time="2025-09-06T01:19:47.699567674Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\"" Sep 6 01:19:49.585320 kubelet[2427]: E0906 01:19:49.584982 2427 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-lcns4" podUID="35d6d670-3213-45cd-86fd-0fd88c7f3b82" Sep 6 01:19:51.510209 env[1448]: time="2025-09-06T01:19:51.510154443Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:51.516414 env[1448]: time="2025-09-06T01:19:51.516365324Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7077a1dc632ee598cbfa626f9e3c9bca5b20c0d1e1e557995890125b2e8d2e23,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:51.520142 env[1448]: time="2025-09-06T01:19:51.520089085Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:51.524605 env[1448]: time="2025-09-06T01:19:51.524551366Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:73d1e391050490d54e5bee8ff2b1a50a8be1746c98dc530361b00e8c0ab63f87,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:19:51.525345 env[1448]: time="2025-09-06T01:19:51.525309566Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\" returns image reference \"sha256:7077a1dc632ee598cbfa626f9e3c9bca5b20c0d1e1e557995890125b2e8d2e23\"" Sep 6 01:19:51.530791 env[1448]: time="2025-09-06T01:19:51.530495487Z" level=info msg="CreateContainer within sandbox \"c43045634138cbed91b4f00c7c94893d25bfa317f91baf9e874a65d331c63f63\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Sep 6 01:19:51.571937 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1909299612.mount: Deactivated successfully. Sep 6 01:19:51.587238 kubelet[2427]: E0906 01:19:51.585944 2427 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-lcns4" podUID="35d6d670-3213-45cd-86fd-0fd88c7f3b82" Sep 6 01:19:51.590417 env[1448]: time="2025-09-06T01:19:51.590365261Z" level=info msg="CreateContainer within sandbox \"c43045634138cbed91b4f00c7c94893d25bfa317f91baf9e874a65d331c63f63\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"1fe941f26e2e36559e563fbfa6ecb25414ca7785125cd4defeeeee7032026c1c\"" Sep 6 01:19:51.591005 env[1448]: time="2025-09-06T01:19:51.590976262Z" level=info msg="StartContainer for \"1fe941f26e2e36559e563fbfa6ecb25414ca7785125cd4defeeeee7032026c1c\"" Sep 6 01:19:51.623237 systemd[1]: Started cri-containerd-1fe941f26e2e36559e563fbfa6ecb25414ca7785125cd4defeeeee7032026c1c.scope. Sep 6 01:19:51.668291 kernel: kauditd_printk_skb: 229 callbacks suppressed Sep 6 01:19:51.668442 kernel: audit: type=1400 audit(1757121591.638:972): avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.638000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.638000 audit[3110]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001975a0 a2=3c a3=0 items=0 ppid=2922 pid=3110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:51.698578 kernel: audit: type=1300 audit(1757121591.638:972): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001975a0 a2=3c a3=0 items=0 ppid=2922 pid=3110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:51.638000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166653934316632366532653336353539653536336662666136656362 Sep 6 01:19:51.727384 kernel: audit: type=1327 audit(1757121591.638:972): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166653934316632366532653336353539653536336662666136656362 Sep 6 01:19:51.639000 audit[3110]: AVC avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.747602 kernel: audit: type=1400 audit(1757121591.639:973): avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.639000 audit[3110]: AVC avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.767042 kernel: audit: type=1400 audit(1757121591.639:973): avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.639000 audit[3110]: AVC avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.774847 env[1448]: time="2025-09-06T01:19:51.774799225Z" level=info msg="StartContainer for \"1fe941f26e2e36559e563fbfa6ecb25414ca7785125cd4defeeeee7032026c1c\" returns successfully" Sep 6 01:19:51.786499 kernel: audit: type=1400 audit(1757121591.639:973): avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.639000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.807303 kernel: audit: type=1400 audit(1757121591.639:973): avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.807860 kernel: audit: type=1400 audit(1757121591.639:973): avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.639000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.639000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.846922 kernel: audit: type=1400 audit(1757121591.639:973): avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.639000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.866304 kernel: audit: type=1400 audit(1757121591.639:973): avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.639000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.639000 audit[3110]: AVC avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.639000 audit[3110]: AVC avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.639000 audit: BPF prog-id=137 op=LOAD Sep 6 01:19:51.639000 audit[3110]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001978e0 a2=78 a3=0 items=0 ppid=2922 pid=3110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:51.639000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166653934316632366532653336353539653536336662666136656362 Sep 6 01:19:51.644000 audit[3110]: AVC avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.644000 audit[3110]: AVC avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.644000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.644000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.644000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.644000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.644000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.644000 audit[3110]: AVC avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.644000 audit[3110]: AVC avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.644000 audit: BPF prog-id=138 op=LOAD Sep 6 01:19:51.644000 audit[3110]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000197670 a2=78 a3=0 items=0 ppid=2922 pid=3110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:51.644000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166653934316632366532653336353539653536336662666136656362 Sep 6 01:19:51.665000 audit: BPF prog-id=138 op=UNLOAD Sep 6 01:19:51.665000 audit: BPF prog-id=137 op=UNLOAD Sep 6 01:19:51.665000 audit[3110]: AVC avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.665000 audit[3110]: AVC avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.665000 audit[3110]: AVC avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.665000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.665000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.665000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.665000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.665000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.665000 audit[3110]: AVC avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.665000 audit[3110]: AVC avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:19:51.665000 audit: BPF prog-id=139 op=LOAD Sep 6 01:19:51.665000 audit[3110]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000197b40 a2=78 a3=0 items=0 ppid=2922 pid=3110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:51.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166653934316632366532653336353539653536336662666136656362 Sep 6 01:19:52.567563 systemd[1]: run-containerd-runc-k8s.io-1fe941f26e2e36559e563fbfa6ecb25414ca7785125cd4defeeeee7032026c1c-runc.fcqq9n.mount: Deactivated successfully. Sep 6 01:19:53.080341 env[1448]: time="2025-09-06T01:19:53.080270445Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 6 01:19:53.082971 systemd[1]: cri-containerd-1fe941f26e2e36559e563fbfa6ecb25414ca7785125cd4defeeeee7032026c1c.scope: Deactivated successfully. Sep 6 01:19:53.086000 audit: BPF prog-id=139 op=UNLOAD Sep 6 01:19:53.102250 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1fe941f26e2e36559e563fbfa6ecb25414ca7785125cd4defeeeee7032026c1c-rootfs.mount: Deactivated successfully. Sep 6 01:19:53.168059 kubelet[2427]: I0906 01:19:53.168027 2427 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Sep 6 01:19:53.466274 kubelet[2427]: I0906 01:19:53.208497 2427 status_manager.go:890] "Failed to get status for pod" podUID="91cf3a26-dfb6-4f8b-b9c3-46758ab8c6b5" pod="calico-system/calico-kube-controllers-5ddcbb448c-gvtjx" err="pods \"calico-kube-controllers-5ddcbb448c-gvtjx\" is forbidden: User \"system:node:ci-3510.3.8-n-f2ea6194e4\" cannot get resource \"pods\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ci-3510.3.8-n-f2ea6194e4' and this object" Sep 6 01:19:53.466274 kubelet[2427]: I0906 01:19:53.318888 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/dba07540-0822-4517-bf04-2806ca166e6d-whisker-ca-bundle\") pod \"whisker-665b77cb9-5hlcs\" (UID: \"dba07540-0822-4517-bf04-2806ca166e6d\") " pod="calico-system/whisker-665b77cb9-5hlcs" Sep 6 01:19:53.466274 kubelet[2427]: I0906 01:19:53.318969 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qc4nt\" (UniqueName: \"kubernetes.io/projected/a953d4fa-4bab-4981-889d-f180a79cf853-kube-api-access-qc4nt\") pod \"goldmane-54d579b49d-7r8jm\" (UID: \"a953d4fa-4bab-4981-889d-f180a79cf853\") " pod="calico-system/goldmane-54d579b49d-7r8jm" Sep 6 01:19:53.466274 kubelet[2427]: I0906 01:19:53.319008 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/4fedc3f0-ce49-4a1c-95c7-fd08b3ad94b4-calico-apiserver-certs\") pod \"calico-apiserver-58578c4b6-bdq9h\" (UID: \"4fedc3f0-ce49-4a1c-95c7-fd08b3ad94b4\") " pod="calico-apiserver/calico-apiserver-58578c4b6-bdq9h" Sep 6 01:19:53.466274 kubelet[2427]: I0906 01:19:53.319037 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-clkjn\" (UniqueName: \"kubernetes.io/projected/91cf3a26-dfb6-4f8b-b9c3-46758ab8c6b5-kube-api-access-clkjn\") pod \"calico-kube-controllers-5ddcbb448c-gvtjx\" (UID: \"91cf3a26-dfb6-4f8b-b9c3-46758ab8c6b5\") " pod="calico-system/calico-kube-controllers-5ddcbb448c-gvtjx" Sep 6 01:19:53.209783 systemd[1]: Created slice kubepods-besteffort-pod91cf3a26_dfb6_4f8b_b9c3_46758ab8c6b5.slice. Sep 6 01:19:53.466641 kubelet[2427]: I0906 01:19:53.319080 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/a953d4fa-4bab-4981-889d-f180a79cf853-config\") pod \"goldmane-54d579b49d-7r8jm\" (UID: \"a953d4fa-4bab-4981-889d-f180a79cf853\") " pod="calico-system/goldmane-54d579b49d-7r8jm" Sep 6 01:19:53.466641 kubelet[2427]: I0906 01:19:53.319222 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/79dc05b9-4f40-4daa-8331-0dd36a50ea4a-calico-apiserver-certs\") pod \"calico-apiserver-58578c4b6-hf7h8\" (UID: \"79dc05b9-4f40-4daa-8331-0dd36a50ea4a\") " pod="calico-apiserver/calico-apiserver-58578c4b6-hf7h8" Sep 6 01:19:53.466641 kubelet[2427]: I0906 01:19:53.319255 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2jqpl\" (UniqueName: \"kubernetes.io/projected/a5d30df2-fe35-44e2-8d6b-667a4a2edd11-kube-api-access-2jqpl\") pod \"coredns-668d6bf9bc-hhptn\" (UID: \"a5d30df2-fe35-44e2-8d6b-667a4a2edd11\") " pod="kube-system/coredns-668d6bf9bc-hhptn" Sep 6 01:19:53.466641 kubelet[2427]: I0906 01:19:53.319307 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/dba07540-0822-4517-bf04-2806ca166e6d-whisker-backend-key-pair\") pod \"whisker-665b77cb9-5hlcs\" (UID: \"dba07540-0822-4517-bf04-2806ca166e6d\") " pod="calico-system/whisker-665b77cb9-5hlcs" Sep 6 01:19:53.466641 kubelet[2427]: I0906 01:19:53.319325 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-m7q6g\" (UniqueName: \"kubernetes.io/projected/dba07540-0822-4517-bf04-2806ca166e6d-kube-api-access-m7q6g\") pod \"whisker-665b77cb9-5hlcs\" (UID: \"dba07540-0822-4517-bf04-2806ca166e6d\") " pod="calico-system/whisker-665b77cb9-5hlcs" Sep 6 01:19:53.218237 systemd[1]: Created slice kubepods-burstable-poda5d30df2_fe35_44e2_8d6b_667a4a2edd11.slice. Sep 6 01:19:53.466863 kubelet[2427]: I0906 01:19:53.319383 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/a953d4fa-4bab-4981-889d-f180a79cf853-goldmane-key-pair\") pod \"goldmane-54d579b49d-7r8jm\" (UID: \"a953d4fa-4bab-4981-889d-f180a79cf853\") " pod="calico-system/goldmane-54d579b49d-7r8jm" Sep 6 01:19:53.466863 kubelet[2427]: I0906 01:19:53.319404 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/334dc78e-f61b-4bc4-8334-ccf4d158c00f-config-volume\") pod \"coredns-668d6bf9bc-lg85q\" (UID: \"334dc78e-f61b-4bc4-8334-ccf4d158c00f\") " pod="kube-system/coredns-668d6bf9bc-lg85q" Sep 6 01:19:53.466863 kubelet[2427]: I0906 01:19:53.319422 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rhkzs\" (UniqueName: \"kubernetes.io/projected/79dc05b9-4f40-4daa-8331-0dd36a50ea4a-kube-api-access-rhkzs\") pod \"calico-apiserver-58578c4b6-hf7h8\" (UID: \"79dc05b9-4f40-4daa-8331-0dd36a50ea4a\") " pod="calico-apiserver/calico-apiserver-58578c4b6-hf7h8" Sep 6 01:19:53.466863 kubelet[2427]: I0906 01:19:53.320374 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qkkll\" (UniqueName: \"kubernetes.io/projected/334dc78e-f61b-4bc4-8334-ccf4d158c00f-kube-api-access-qkkll\") pod \"coredns-668d6bf9bc-lg85q\" (UID: \"334dc78e-f61b-4bc4-8334-ccf4d158c00f\") " pod="kube-system/coredns-668d6bf9bc-lg85q" Sep 6 01:19:53.466863 kubelet[2427]: I0906 01:19:53.320405 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/91cf3a26-dfb6-4f8b-b9c3-46758ab8c6b5-tigera-ca-bundle\") pod \"calico-kube-controllers-5ddcbb448c-gvtjx\" (UID: \"91cf3a26-dfb6-4f8b-b9c3-46758ab8c6b5\") " pod="calico-system/calico-kube-controllers-5ddcbb448c-gvtjx" Sep 6 01:19:53.229173 systemd[1]: Created slice kubepods-burstable-pod334dc78e_f61b_4bc4_8334_ccf4d158c00f.slice. Sep 6 01:19:53.467079 kubelet[2427]: I0906 01:19:53.320450 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/a5d30df2-fe35-44e2-8d6b-667a4a2edd11-config-volume\") pod \"coredns-668d6bf9bc-hhptn\" (UID: \"a5d30df2-fe35-44e2-8d6b-667a4a2edd11\") " pod="kube-system/coredns-668d6bf9bc-hhptn" Sep 6 01:19:53.467079 kubelet[2427]: I0906 01:19:53.320471 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-74zn8\" (UniqueName: \"kubernetes.io/projected/4fedc3f0-ce49-4a1c-95c7-fd08b3ad94b4-kube-api-access-74zn8\") pod \"calico-apiserver-58578c4b6-bdq9h\" (UID: \"4fedc3f0-ce49-4a1c-95c7-fd08b3ad94b4\") " pod="calico-apiserver/calico-apiserver-58578c4b6-bdq9h" Sep 6 01:19:53.467079 kubelet[2427]: I0906 01:19:53.320494 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/a953d4fa-4bab-4981-889d-f180a79cf853-goldmane-ca-bundle\") pod \"goldmane-54d579b49d-7r8jm\" (UID: \"a953d4fa-4bab-4981-889d-f180a79cf853\") " pod="calico-system/goldmane-54d579b49d-7r8jm" Sep 6 01:19:53.237670 systemd[1]: Created slice kubepods-besteffort-pod79dc05b9_4f40_4daa_8331_0dd36a50ea4a.slice. Sep 6 01:19:53.246363 systemd[1]: Created slice kubepods-besteffort-poddba07540_0822_4517_bf04_2806ca166e6d.slice. Sep 6 01:19:53.255165 systemd[1]: Created slice kubepods-besteffort-poda953d4fa_4bab_4981_889d_f180a79cf853.slice. Sep 6 01:19:53.262781 systemd[1]: Created slice kubepods-besteffort-pod4fedc3f0_ce49_4a1c_95c7_fd08b3ad94b4.slice. Sep 6 01:19:53.591497 systemd[1]: Created slice kubepods-besteffort-pod35d6d670_3213_45cd_86fd_0fd88c7f3b82.slice. Sep 6 01:19:53.594326 env[1448]: time="2025-09-06T01:19:53.593952520Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-lcns4,Uid:35d6d670-3213-45cd-86fd-0fd88c7f3b82,Namespace:calico-system,Attempt:0,}" Sep 6 01:19:53.767873 env[1448]: time="2025-09-06T01:19:53.767823279Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5ddcbb448c-gvtjx,Uid:91cf3a26-dfb6-4f8b-b9c3-46758ab8c6b5,Namespace:calico-system,Attempt:0,}" Sep 6 01:19:53.775194 env[1448]: time="2025-09-06T01:19:53.774918401Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-58578c4b6-hf7h8,Uid:79dc05b9-4f40-4daa-8331-0dd36a50ea4a,Namespace:calico-apiserver,Attempt:0,}" Sep 6 01:19:53.775194 env[1448]: time="2025-09-06T01:19:53.774988121Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-665b77cb9-5hlcs,Uid:dba07540-0822-4517-bf04-2806ca166e6d,Namespace:calico-system,Attempt:0,}" Sep 6 01:19:53.775194 env[1448]: time="2025-09-06T01:19:53.774917081Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-58578c4b6-bdq9h,Uid:4fedc3f0-ce49-4a1c-95c7-fd08b3ad94b4,Namespace:calico-apiserver,Attempt:0,}" Sep 6 01:19:53.776025 env[1448]: time="2025-09-06T01:19:53.775821121Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-lg85q,Uid:334dc78e-f61b-4bc4-8334-ccf4d158c00f,Namespace:kube-system,Attempt:0,}" Sep 6 01:19:53.784037 env[1448]: time="2025-09-06T01:19:53.783985043Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-hhptn,Uid:a5d30df2-fe35-44e2-8d6b-667a4a2edd11,Namespace:kube-system,Attempt:0,}" Sep 6 01:19:53.784716 env[1448]: time="2025-09-06T01:19:53.784530163Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-7r8jm,Uid:a953d4fa-4bab-4981-889d-f180a79cf853,Namespace:calico-system,Attempt:0,}" Sep 6 01:19:53.936708 env[1448]: time="2025-09-06T01:19:53.936655077Z" level=info msg="shim disconnected" id=1fe941f26e2e36559e563fbfa6ecb25414ca7785125cd4defeeeee7032026c1c Sep 6 01:19:53.936708 env[1448]: time="2025-09-06T01:19:53.936704717Z" level=warning msg="cleaning up after shim disconnected" id=1fe941f26e2e36559e563fbfa6ecb25414ca7785125cd4defeeeee7032026c1c namespace=k8s.io Sep 6 01:19:53.936708 env[1448]: time="2025-09-06T01:19:53.936714717Z" level=info msg="cleaning up dead shim" Sep 6 01:19:53.945246 env[1448]: time="2025-09-06T01:19:53.945187199Z" level=warning msg="cleanup warnings time=\"2025-09-06T01:19:53Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3182 runtime=io.containerd.runc.v2\n" Sep 6 01:19:54.313793 env[1448]: time="2025-09-06T01:19:54.313701401Z" level=error msg="Failed to destroy network for sandbox \"1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.314648 env[1448]: time="2025-09-06T01:19:54.314589521Z" level=error msg="encountered an error cleaning up failed sandbox \"1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.314730 env[1448]: time="2025-09-06T01:19:54.314661481Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-58578c4b6-hf7h8,Uid:79dc05b9-4f40-4daa-8331-0dd36a50ea4a,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.315411 kubelet[2427]: E0906 01:19:54.314958 2427 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.315411 kubelet[2427]: E0906 01:19:54.315029 2427 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-58578c4b6-hf7h8" Sep 6 01:19:54.315411 kubelet[2427]: E0906 01:19:54.315050 2427 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-58578c4b6-hf7h8" Sep 6 01:19:54.317581 kubelet[2427]: E0906 01:19:54.315093 2427 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-58578c4b6-hf7h8_calico-apiserver(79dc05b9-4f40-4daa-8331-0dd36a50ea4a)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-58578c4b6-hf7h8_calico-apiserver(79dc05b9-4f40-4daa-8331-0dd36a50ea4a)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-58578c4b6-hf7h8" podUID="79dc05b9-4f40-4daa-8331-0dd36a50ea4a" Sep 6 01:19:54.337935 env[1448]: time="2025-09-06T01:19:54.337865406Z" level=error msg="Failed to destroy network for sandbox \"207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.338285 env[1448]: time="2025-09-06T01:19:54.338248366Z" level=error msg="encountered an error cleaning up failed sandbox \"207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.338406 env[1448]: time="2025-09-06T01:19:54.338369286Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-lg85q,Uid:334dc78e-f61b-4bc4-8334-ccf4d158c00f,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.339872 kubelet[2427]: E0906 01:19:54.338594 2427 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.339872 kubelet[2427]: E0906 01:19:54.338658 2427 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-lg85q" Sep 6 01:19:54.339872 kubelet[2427]: E0906 01:19:54.338678 2427 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-lg85q" Sep 6 01:19:54.340078 kubelet[2427]: E0906 01:19:54.338718 2427 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-lg85q_kube-system(334dc78e-f61b-4bc4-8334-ccf4d158c00f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-lg85q_kube-system(334dc78e-f61b-4bc4-8334-ccf4d158c00f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-lg85q" podUID="334dc78e-f61b-4bc4-8334-ccf4d158c00f" Sep 6 01:19:54.373874 env[1448]: time="2025-09-06T01:19:54.373805174Z" level=error msg="Failed to destroy network for sandbox \"86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.374242 env[1448]: time="2025-09-06T01:19:54.374198934Z" level=error msg="encountered an error cleaning up failed sandbox \"86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.374300 env[1448]: time="2025-09-06T01:19:54.374257734Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-665b77cb9-5hlcs,Uid:dba07540-0822-4517-bf04-2806ca166e6d,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.375623 kubelet[2427]: E0906 01:19:54.374481 2427 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.375623 kubelet[2427]: E0906 01:19:54.374541 2427 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-665b77cb9-5hlcs" Sep 6 01:19:54.375623 kubelet[2427]: E0906 01:19:54.374559 2427 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-665b77cb9-5hlcs" Sep 6 01:19:54.375849 kubelet[2427]: E0906 01:19:54.374593 2427 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-665b77cb9-5hlcs_calico-system(dba07540-0822-4517-bf04-2806ca166e6d)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-665b77cb9-5hlcs_calico-system(dba07540-0822-4517-bf04-2806ca166e6d)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-665b77cb9-5hlcs" podUID="dba07540-0822-4517-bf04-2806ca166e6d" Sep 6 01:19:54.383686 env[1448]: time="2025-09-06T01:19:54.383601376Z" level=error msg="Failed to destroy network for sandbox \"a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.384111 env[1448]: time="2025-09-06T01:19:54.384069136Z" level=error msg="encountered an error cleaning up failed sandbox \"a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.384180 env[1448]: time="2025-09-06T01:19:54.384142656Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-lcns4,Uid:35d6d670-3213-45cd-86fd-0fd88c7f3b82,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.384281 env[1448]: time="2025-09-06T01:19:54.384249536Z" level=error msg="Failed to destroy network for sandbox \"2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.384595 env[1448]: time="2025-09-06T01:19:54.384555696Z" level=error msg="encountered an error cleaning up failed sandbox \"2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.384660 env[1448]: time="2025-09-06T01:19:54.384608896Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5ddcbb448c-gvtjx,Uid:91cf3a26-dfb6-4f8b-b9c3-46758ab8c6b5,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.385072 kubelet[2427]: E0906 01:19:54.384841 2427 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.385072 kubelet[2427]: E0906 01:19:54.384908 2427 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-lcns4" Sep 6 01:19:54.385072 kubelet[2427]: E0906 01:19:54.384931 2427 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-lcns4" Sep 6 01:19:54.385072 kubelet[2427]: E0906 01:19:54.384841 2427 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.387002 kubelet[2427]: E0906 01:19:54.384969 2427 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-lcns4_calico-system(35d6d670-3213-45cd-86fd-0fd88c7f3b82)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-lcns4_calico-system(35d6d670-3213-45cd-86fd-0fd88c7f3b82)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-lcns4" podUID="35d6d670-3213-45cd-86fd-0fd88c7f3b82" Sep 6 01:19:54.387002 kubelet[2427]: E0906 01:19:54.384973 2427 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-5ddcbb448c-gvtjx" Sep 6 01:19:54.387002 kubelet[2427]: E0906 01:19:54.385009 2427 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-5ddcbb448c-gvtjx" Sep 6 01:19:54.387244 kubelet[2427]: E0906 01:19:54.385035 2427 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-5ddcbb448c-gvtjx_calico-system(91cf3a26-dfb6-4f8b-b9c3-46758ab8c6b5)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-5ddcbb448c-gvtjx_calico-system(91cf3a26-dfb6-4f8b-b9c3-46758ab8c6b5)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-5ddcbb448c-gvtjx" podUID="91cf3a26-dfb6-4f8b-b9c3-46758ab8c6b5" Sep 6 01:19:54.412171 env[1448]: time="2025-09-06T01:19:54.412107942Z" level=error msg="Failed to destroy network for sandbox \"cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.412723 env[1448]: time="2025-09-06T01:19:54.412676142Z" level=error msg="encountered an error cleaning up failed sandbox \"cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.412884 env[1448]: time="2025-09-06T01:19:54.412856302Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-hhptn,Uid:a5d30df2-fe35-44e2-8d6b-667a4a2edd11,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.413232 kubelet[2427]: E0906 01:19:54.413185 2427 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.413320 kubelet[2427]: E0906 01:19:54.413261 2427 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-hhptn" Sep 6 01:19:54.413320 kubelet[2427]: E0906 01:19:54.413284 2427 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-hhptn" Sep 6 01:19:54.413379 kubelet[2427]: E0906 01:19:54.413338 2427 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-hhptn_kube-system(a5d30df2-fe35-44e2-8d6b-667a4a2edd11)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-hhptn_kube-system(a5d30df2-fe35-44e2-8d6b-667a4a2edd11)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-hhptn" podUID="a5d30df2-fe35-44e2-8d6b-667a4a2edd11" Sep 6 01:19:54.415509 env[1448]: time="2025-09-06T01:19:54.415443583Z" level=error msg="Failed to destroy network for sandbox \"995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.416026 env[1448]: time="2025-09-06T01:19:54.415991303Z" level=error msg="encountered an error cleaning up failed sandbox \"995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.416239 env[1448]: time="2025-09-06T01:19:54.416203743Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-58578c4b6-bdq9h,Uid:4fedc3f0-ce49-4a1c-95c7-fd08b3ad94b4,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.418249 kubelet[2427]: E0906 01:19:54.417983 2427 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.418249 kubelet[2427]: E0906 01:19:54.418042 2427 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-58578c4b6-bdq9h" Sep 6 01:19:54.418249 kubelet[2427]: E0906 01:19:54.418067 2427 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-58578c4b6-bdq9h" Sep 6 01:19:54.418430 kubelet[2427]: E0906 01:19:54.418110 2427 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-58578c4b6-bdq9h_calico-apiserver(4fedc3f0-ce49-4a1c-95c7-fd08b3ad94b4)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-58578c4b6-bdq9h_calico-apiserver(4fedc3f0-ce49-4a1c-95c7-fd08b3ad94b4)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-58578c4b6-bdq9h" podUID="4fedc3f0-ce49-4a1c-95c7-fd08b3ad94b4" Sep 6 01:19:54.431625 env[1448]: time="2025-09-06T01:19:54.431551827Z" level=error msg="Failed to destroy network for sandbox \"626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.432002 env[1448]: time="2025-09-06T01:19:54.431960507Z" level=error msg="encountered an error cleaning up failed sandbox \"626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.432062 env[1448]: time="2025-09-06T01:19:54.432025427Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-7r8jm,Uid:a953d4fa-4bab-4981-889d-f180a79cf853,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.433485 kubelet[2427]: E0906 01:19:54.432271 2427 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.433485 kubelet[2427]: E0906 01:19:54.432338 2427 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-54d579b49d-7r8jm" Sep 6 01:19:54.433485 kubelet[2427]: E0906 01:19:54.432359 2427 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-54d579b49d-7r8jm" Sep 6 01:19:54.433691 kubelet[2427]: E0906 01:19:54.432406 2427 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-54d579b49d-7r8jm_calico-system(a953d4fa-4bab-4981-889d-f180a79cf853)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-54d579b49d-7r8jm_calico-system(a953d4fa-4bab-4981-889d-f180a79cf853)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-54d579b49d-7r8jm" podUID="a953d4fa-4bab-4981-889d-f180a79cf853" Sep 6 01:19:54.569338 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43-shm.mount: Deactivated successfully. Sep 6 01:19:54.569441 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b-shm.mount: Deactivated successfully. Sep 6 01:19:54.715638 kubelet[2427]: I0906 01:19:54.715599 2427 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" Sep 6 01:19:54.716674 env[1448]: time="2025-09-06T01:19:54.716626369Z" level=info msg="StopPodSandbox for \"86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845\"" Sep 6 01:19:54.721454 env[1448]: time="2025-09-06T01:19:54.721413650Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\"" Sep 6 01:19:54.728222 kubelet[2427]: I0906 01:19:54.728057 2427 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" Sep 6 01:19:54.730762 env[1448]: time="2025-09-06T01:19:54.730698532Z" level=info msg="StopPodSandbox for \"207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43\"" Sep 6 01:19:54.732205 kubelet[2427]: I0906 01:19:54.731852 2427 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" Sep 6 01:19:54.732755 env[1448]: time="2025-09-06T01:19:54.732565453Z" level=info msg="StopPodSandbox for \"1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b\"" Sep 6 01:19:54.737368 kubelet[2427]: I0906 01:19:54.736963 2427 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" Sep 6 01:19:54.737963 env[1448]: time="2025-09-06T01:19:54.737928094Z" level=info msg="StopPodSandbox for \"2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249\"" Sep 6 01:19:54.740115 kubelet[2427]: I0906 01:19:54.739611 2427 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" Sep 6 01:19:54.740677 env[1448]: time="2025-09-06T01:19:54.740646295Z" level=info msg="StopPodSandbox for \"626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79\"" Sep 6 01:19:54.742461 kubelet[2427]: I0906 01:19:54.742100 2427 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" Sep 6 01:19:54.742796 env[1448]: time="2025-09-06T01:19:54.742762135Z" level=info msg="StopPodSandbox for \"995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4\"" Sep 6 01:19:54.748131 kubelet[2427]: I0906 01:19:54.747727 2427 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" Sep 6 01:19:54.749705 env[1448]: time="2025-09-06T01:19:54.749660017Z" level=info msg="StopPodSandbox for \"cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995\"" Sep 6 01:19:54.763329 kubelet[2427]: I0906 01:19:54.762740 2427 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" Sep 6 01:19:54.767577 env[1448]: time="2025-09-06T01:19:54.767525141Z" level=info msg="StopPodSandbox for \"a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628\"" Sep 6 01:19:54.798998 env[1448]: time="2025-09-06T01:19:54.798933388Z" level=error msg="StopPodSandbox for \"86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845\" failed" error="failed to destroy network for sandbox \"86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.799833 kubelet[2427]: E0906 01:19:54.799617 2427 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" Sep 6 01:19:54.799833 kubelet[2427]: E0906 01:19:54.799681 2427 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845"} Sep 6 01:19:54.799833 kubelet[2427]: E0906 01:19:54.799763 2427 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"dba07540-0822-4517-bf04-2806ca166e6d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 01:19:54.799833 kubelet[2427]: E0906 01:19:54.799786 2427 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"dba07540-0822-4517-bf04-2806ca166e6d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-665b77cb9-5hlcs" podUID="dba07540-0822-4517-bf04-2806ca166e6d" Sep 6 01:19:54.836099 env[1448]: time="2025-09-06T01:19:54.835378116Z" level=error msg="StopPodSandbox for \"995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4\" failed" error="failed to destroy network for sandbox \"995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.836400 kubelet[2427]: E0906 01:19:54.836350 2427 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" Sep 6 01:19:54.836519 kubelet[2427]: E0906 01:19:54.836495 2427 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4"} Sep 6 01:19:54.836603 kubelet[2427]: E0906 01:19:54.836589 2427 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"4fedc3f0-ce49-4a1c-95c7-fd08b3ad94b4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 01:19:54.836733 kubelet[2427]: E0906 01:19:54.836699 2427 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"4fedc3f0-ce49-4a1c-95c7-fd08b3ad94b4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-58578c4b6-bdq9h" podUID="4fedc3f0-ce49-4a1c-95c7-fd08b3ad94b4" Sep 6 01:19:54.891926 env[1448]: time="2025-09-06T01:19:54.891857808Z" level=error msg="StopPodSandbox for \"1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b\" failed" error="failed to destroy network for sandbox \"1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.892353 kubelet[2427]: E0906 01:19:54.892202 2427 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" Sep 6 01:19:54.892353 kubelet[2427]: E0906 01:19:54.892252 2427 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b"} Sep 6 01:19:54.892353 kubelet[2427]: E0906 01:19:54.892286 2427 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"79dc05b9-4f40-4daa-8331-0dd36a50ea4a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 01:19:54.892353 kubelet[2427]: E0906 01:19:54.892311 2427 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"79dc05b9-4f40-4daa-8331-0dd36a50ea4a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-58578c4b6-hf7h8" podUID="79dc05b9-4f40-4daa-8331-0dd36a50ea4a" Sep 6 01:19:54.904083 env[1448]: time="2025-09-06T01:19:54.904021371Z" level=error msg="StopPodSandbox for \"626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79\" failed" error="failed to destroy network for sandbox \"626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.904618 kubelet[2427]: E0906 01:19:54.904470 2427 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" Sep 6 01:19:54.904618 kubelet[2427]: E0906 01:19:54.904520 2427 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79"} Sep 6 01:19:54.904618 kubelet[2427]: E0906 01:19:54.904553 2427 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a953d4fa-4bab-4981-889d-f180a79cf853\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 01:19:54.904618 kubelet[2427]: E0906 01:19:54.904575 2427 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a953d4fa-4bab-4981-889d-f180a79cf853\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-54d579b49d-7r8jm" podUID="a953d4fa-4bab-4981-889d-f180a79cf853" Sep 6 01:19:54.907333 env[1448]: time="2025-09-06T01:19:54.907265531Z" level=error msg="StopPodSandbox for \"cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995\" failed" error="failed to destroy network for sandbox \"cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.907601 kubelet[2427]: E0906 01:19:54.907537 2427 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" Sep 6 01:19:54.907670 kubelet[2427]: E0906 01:19:54.907612 2427 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995"} Sep 6 01:19:54.907670 kubelet[2427]: E0906 01:19:54.907663 2427 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a5d30df2-fe35-44e2-8d6b-667a4a2edd11\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 01:19:54.907804 kubelet[2427]: E0906 01:19:54.907686 2427 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a5d30df2-fe35-44e2-8d6b-667a4a2edd11\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-hhptn" podUID="a5d30df2-fe35-44e2-8d6b-667a4a2edd11" Sep 6 01:19:54.908104 env[1448]: time="2025-09-06T01:19:54.908049972Z" level=error msg="StopPodSandbox for \"2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249\" failed" error="failed to destroy network for sandbox \"2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.908373 kubelet[2427]: E0906 01:19:54.908263 2427 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" Sep 6 01:19:54.908373 kubelet[2427]: E0906 01:19:54.908302 2427 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249"} Sep 6 01:19:54.908373 kubelet[2427]: E0906 01:19:54.908328 2427 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"91cf3a26-dfb6-4f8b-b9c3-46758ab8c6b5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 01:19:54.908373 kubelet[2427]: E0906 01:19:54.908347 2427 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"91cf3a26-dfb6-4f8b-b9c3-46758ab8c6b5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-5ddcbb448c-gvtjx" podUID="91cf3a26-dfb6-4f8b-b9c3-46758ab8c6b5" Sep 6 01:19:54.912366 env[1448]: time="2025-09-06T01:19:54.912290972Z" level=error msg="StopPodSandbox for \"a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628\" failed" error="failed to destroy network for sandbox \"a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.912727 kubelet[2427]: E0906 01:19:54.912579 2427 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" Sep 6 01:19:54.912727 kubelet[2427]: E0906 01:19:54.912640 2427 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628"} Sep 6 01:19:54.912727 kubelet[2427]: E0906 01:19:54.912673 2427 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"35d6d670-3213-45cd-86fd-0fd88c7f3b82\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 01:19:54.912727 kubelet[2427]: E0906 01:19:54.912694 2427 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"35d6d670-3213-45cd-86fd-0fd88c7f3b82\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-lcns4" podUID="35d6d670-3213-45cd-86fd-0fd88c7f3b82" Sep 6 01:19:54.916213 env[1448]: time="2025-09-06T01:19:54.916150893Z" level=error msg="StopPodSandbox for \"207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43\" failed" error="failed to destroy network for sandbox \"207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:19:54.916572 kubelet[2427]: E0906 01:19:54.916429 2427 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" Sep 6 01:19:54.916572 kubelet[2427]: E0906 01:19:54.916481 2427 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43"} Sep 6 01:19:54.916572 kubelet[2427]: E0906 01:19:54.916513 2427 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"334dc78e-f61b-4bc4-8334-ccf4d158c00f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 01:19:54.916572 kubelet[2427]: E0906 01:19:54.916542 2427 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"334dc78e-f61b-4bc4-8334-ccf4d158c00f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-lg85q" podUID="334dc78e-f61b-4bc4-8334-ccf4d158c00f" Sep 6 01:20:01.986482 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2563156478.mount: Deactivated successfully. Sep 6 01:20:02.186118 env[1448]: time="2025-09-06T01:20:02.186060936Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:02.194456 env[1448]: time="2025-09-06T01:20:02.194413497Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2b8abd2140fc4464ed664d225fe38e5b90bbfcf62996b484b0fc0e0537b6a4a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:02.198974 env[1448]: time="2025-09-06T01:20:02.198936618Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:02.203105 env[1448]: time="2025-09-06T01:20:02.203064739Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:bcb8146fcaeced1e1c88fad3eaa697f1680746bd23c3e7e8d4535bc484c6f2a1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:02.203408 env[1448]: time="2025-09-06T01:20:02.203376739Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\" returns image reference \"sha256:2b8abd2140fc4464ed664d225fe38e5b90bbfcf62996b484b0fc0e0537b6a4a9\"" Sep 6 01:20:02.221350 env[1448]: time="2025-09-06T01:20:02.221292182Z" level=info msg="CreateContainer within sandbox \"c43045634138cbed91b4f00c7c94893d25bfa317f91baf9e874a65d331c63f63\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Sep 6 01:20:02.265371 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1061022048.mount: Deactivated successfully. Sep 6 01:20:02.288694 env[1448]: time="2025-09-06T01:20:02.288625195Z" level=info msg="CreateContainer within sandbox \"c43045634138cbed91b4f00c7c94893d25bfa317f91baf9e874a65d331c63f63\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"a227574c5c403141d2aed21f34bcc55f4c62fb221103616b6ecd00bd5e122d17\"" Sep 6 01:20:02.290232 env[1448]: time="2025-09-06T01:20:02.290128315Z" level=info msg="StartContainer for \"a227574c5c403141d2aed21f34bcc55f4c62fb221103616b6ecd00bd5e122d17\"" Sep 6 01:20:02.311997 systemd[1]: Started cri-containerd-a227574c5c403141d2aed21f34bcc55f4c62fb221103616b6ecd00bd5e122d17.scope. Sep 6 01:20:02.367612 kernel: kauditd_printk_skb: 34 callbacks suppressed Sep 6 01:20:02.367821 kernel: audit: type=1400 audit(1757121602.339:979): avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.339000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.339000 audit[3536]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=2922 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:02.397973 kernel: audit: type=1300 audit(1757121602.339:979): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=2922 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:02.339000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132323735373463356334303331343164326165643231663334626363 Sep 6 01:20:02.339000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.450542 kernel: audit: type=1327 audit(1757121602.339:979): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132323735373463356334303331343164326165643231663334626363 Sep 6 01:20:02.450663 kernel: audit: type=1400 audit(1757121602.339:980): avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.339000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.471843 env[1448]: time="2025-09-06T01:20:02.466301669Z" level=info msg="StartContainer for \"a227574c5c403141d2aed21f34bcc55f4c62fb221103616b6ecd00bd5e122d17\" returns successfully" Sep 6 01:20:02.339000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.493483 kernel: audit: type=1400 audit(1757121602.339:980): avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.493635 kernel: audit: type=1400 audit(1757121602.339:980): avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.339000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.514550 kernel: audit: type=1400 audit(1757121602.339:980): avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.339000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.535335 kernel: audit: type=1400 audit(1757121602.339:980): avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.339000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.553573 kernel: audit: type=1400 audit(1757121602.339:980): avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.339000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.574177 kernel: audit: type=1400 audit(1757121602.339:980): avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.339000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.339000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.339000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.339000 audit: BPF prog-id=140 op=LOAD Sep 6 01:20:02.339000 audit[3536]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=2922 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:02.339000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132323735373463356334303331343164326165643231663334626363 Sep 6 01:20:02.345000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.345000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.345000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.345000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.345000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.345000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.345000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.345000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.345000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.345000 audit: BPF prog-id=141 op=LOAD Sep 6 01:20:02.345000 audit[3536]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=2922 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:02.345000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132323735373463356334303331343164326165643231663334626363 Sep 6 01:20:02.366000 audit: BPF prog-id=141 op=UNLOAD Sep 6 01:20:02.366000 audit: BPF prog-id=140 op=UNLOAD Sep 6 01:20:02.366000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.366000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.366000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.366000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.366000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.366000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.366000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.366000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.366000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.366000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:02.366000 audit: BPF prog-id=142 op=LOAD Sep 6 01:20:02.366000 audit[3536]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=2922 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:02.366000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132323735373463356334303331343164326165643231663334626363 Sep 6 01:20:02.735675 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Sep 6 01:20:02.735856 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Sep 6 01:20:02.877568 kubelet[2427]: I0906 01:20:02.877413 2427 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-76k5q" podStartSLOduration=1.518773543 podStartE2EDuration="20.877391026s" podCreationTimestamp="2025-09-06 01:19:42 +0000 UTC" firstStartedPulling="2025-09-06 01:19:42.846269936 +0000 UTC m=+25.481392791" lastFinishedPulling="2025-09-06 01:20:02.204887419 +0000 UTC m=+44.840010274" observedRunningTime="2025-09-06 01:20:02.803946053 +0000 UTC m=+45.439068948" watchObservedRunningTime="2025-09-06 01:20:02.877391026 +0000 UTC m=+45.512513881" Sep 6 01:20:02.879473 env[1448]: time="2025-09-06T01:20:02.879067587Z" level=info msg="StopPodSandbox for \"86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845\"" Sep 6 01:20:03.042185 env[1448]: 2025-09-06 01:20:02.963 [INFO][3588] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" Sep 6 01:20:03.042185 env[1448]: 2025-09-06 01:20:02.963 [INFO][3588] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" iface="eth0" netns="/var/run/netns/cni-96e0c109-746d-d562-18b7-6b43b21af17c" Sep 6 01:20:03.042185 env[1448]: 2025-09-06 01:20:02.963 [INFO][3588] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" iface="eth0" netns="/var/run/netns/cni-96e0c109-746d-d562-18b7-6b43b21af17c" Sep 6 01:20:03.042185 env[1448]: 2025-09-06 01:20:02.963 [INFO][3588] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" iface="eth0" netns="/var/run/netns/cni-96e0c109-746d-d562-18b7-6b43b21af17c" Sep 6 01:20:03.042185 env[1448]: 2025-09-06 01:20:02.963 [INFO][3588] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" Sep 6 01:20:03.042185 env[1448]: 2025-09-06 01:20:02.963 [INFO][3588] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" Sep 6 01:20:03.042185 env[1448]: 2025-09-06 01:20:03.010 [INFO][3595] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" HandleID="k8s-pod-network.86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-whisker--665b77cb9--5hlcs-eth0" Sep 6 01:20:03.042185 env[1448]: 2025-09-06 01:20:03.010 [INFO][3595] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:03.042185 env[1448]: 2025-09-06 01:20:03.010 [INFO][3595] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:03.042185 env[1448]: 2025-09-06 01:20:03.025 [WARNING][3595] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" HandleID="k8s-pod-network.86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-whisker--665b77cb9--5hlcs-eth0" Sep 6 01:20:03.042185 env[1448]: 2025-09-06 01:20:03.028 [INFO][3595] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" HandleID="k8s-pod-network.86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-whisker--665b77cb9--5hlcs-eth0" Sep 6 01:20:03.042185 env[1448]: 2025-09-06 01:20:03.038 [INFO][3595] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:03.042185 env[1448]: 2025-09-06 01:20:03.040 [INFO][3588] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" Sep 6 01:20:03.045102 systemd[1]: run-netns-cni\x2d96e0c109\x2d746d\x2dd562\x2d18b7\x2d6b43b21af17c.mount: Deactivated successfully. Sep 6 01:20:03.046318 env[1448]: time="2025-09-06T01:20:03.046273298Z" level=info msg="TearDown network for sandbox \"86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845\" successfully" Sep 6 01:20:03.046418 env[1448]: time="2025-09-06T01:20:03.046398698Z" level=info msg="StopPodSandbox for \"86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845\" returns successfully" Sep 6 01:20:03.084910 kubelet[2427]: I0906 01:20:03.084866 2427 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/dba07540-0822-4517-bf04-2806ca166e6d-whisker-backend-key-pair\") pod \"dba07540-0822-4517-bf04-2806ca166e6d\" (UID: \"dba07540-0822-4517-bf04-2806ca166e6d\") " Sep 6 01:20:03.084910 kubelet[2427]: I0906 01:20:03.084918 2427 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-m7q6g\" (UniqueName: \"kubernetes.io/projected/dba07540-0822-4517-bf04-2806ca166e6d-kube-api-access-m7q6g\") pod \"dba07540-0822-4517-bf04-2806ca166e6d\" (UID: \"dba07540-0822-4517-bf04-2806ca166e6d\") " Sep 6 01:20:03.085203 kubelet[2427]: I0906 01:20:03.085001 2427 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/dba07540-0822-4517-bf04-2806ca166e6d-whisker-ca-bundle\") pod \"dba07540-0822-4517-bf04-2806ca166e6d\" (UID: \"dba07540-0822-4517-bf04-2806ca166e6d\") " Sep 6 01:20:03.085416 kubelet[2427]: I0906 01:20:03.085381 2427 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/dba07540-0822-4517-bf04-2806ca166e6d-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "dba07540-0822-4517-bf04-2806ca166e6d" (UID: "dba07540-0822-4517-bf04-2806ca166e6d"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Sep 6 01:20:03.092607 systemd[1]: var-lib-kubelet-pods-dba07540\x2d0822\x2d4517\x2dbf04\x2d2806ca166e6d-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Sep 6 01:20:03.097443 systemd[1]: var-lib-kubelet-pods-dba07540\x2d0822\x2d4517\x2dbf04\x2d2806ca166e6d-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dm7q6g.mount: Deactivated successfully. Sep 6 01:20:03.098230 kubelet[2427]: I0906 01:20:03.098094 2427 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/dba07540-0822-4517-bf04-2806ca166e6d-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "dba07540-0822-4517-bf04-2806ca166e6d" (UID: "dba07540-0822-4517-bf04-2806ca166e6d"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Sep 6 01:20:03.099503 kubelet[2427]: I0906 01:20:03.098962 2427 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/dba07540-0822-4517-bf04-2806ca166e6d-kube-api-access-m7q6g" (OuterVolumeSpecName: "kube-api-access-m7q6g") pod "dba07540-0822-4517-bf04-2806ca166e6d" (UID: "dba07540-0822-4517-bf04-2806ca166e6d"). InnerVolumeSpecName "kube-api-access-m7q6g". PluginName "kubernetes.io/projected", VolumeGIDValue "" Sep 6 01:20:03.185870 kubelet[2427]: I0906 01:20:03.185755 2427 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-m7q6g\" (UniqueName: \"kubernetes.io/projected/dba07540-0822-4517-bf04-2806ca166e6d-kube-api-access-m7q6g\") on node \"ci-3510.3.8-n-f2ea6194e4\" DevicePath \"\"" Sep 6 01:20:03.185870 kubelet[2427]: I0906 01:20:03.185792 2427 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/dba07540-0822-4517-bf04-2806ca166e6d-whisker-ca-bundle\") on node \"ci-3510.3.8-n-f2ea6194e4\" DevicePath \"\"" Sep 6 01:20:03.185870 kubelet[2427]: I0906 01:20:03.185803 2427 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/dba07540-0822-4517-bf04-2806ca166e6d-whisker-backend-key-pair\") on node \"ci-3510.3.8-n-f2ea6194e4\" DevicePath \"\"" Sep 6 01:20:03.590989 systemd[1]: Removed slice kubepods-besteffort-poddba07540_0822_4517_bf04_2806ca166e6d.slice. Sep 6 01:20:03.847682 systemd[1]: Created slice kubepods-besteffort-pod1fb006aa_9c24_4332_848d_594a328cf434.slice. Sep 6 01:20:03.888871 kubelet[2427]: I0906 01:20:03.888825 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1fb006aa-9c24-4332-848d-594a328cf434-whisker-ca-bundle\") pod \"whisker-56499599bd-6sm55\" (UID: \"1fb006aa-9c24-4332-848d-594a328cf434\") " pod="calico-system/whisker-56499599bd-6sm55" Sep 6 01:20:03.889232 kubelet[2427]: I0906 01:20:03.888887 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/1fb006aa-9c24-4332-848d-594a328cf434-whisker-backend-key-pair\") pod \"whisker-56499599bd-6sm55\" (UID: \"1fb006aa-9c24-4332-848d-594a328cf434\") " pod="calico-system/whisker-56499599bd-6sm55" Sep 6 01:20:03.889232 kubelet[2427]: I0906 01:20:03.888912 2427 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-cq8pn\" (UniqueName: \"kubernetes.io/projected/1fb006aa-9c24-4332-848d-594a328cf434-kube-api-access-cq8pn\") pod \"whisker-56499599bd-6sm55\" (UID: \"1fb006aa-9c24-4332-848d-594a328cf434\") " pod="calico-system/whisker-56499599bd-6sm55" Sep 6 01:20:04.152246 env[1448]: time="2025-09-06T01:20:04.152130783Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-56499599bd-6sm55,Uid:1fb006aa-9c24-4332-848d-594a328cf434,Namespace:calico-system,Attempt:0,}" Sep 6 01:20:04.264000 audit[3668]: AVC avc: denied { write } for pid=3668 comm="tee" name="fd" dev="proc" ino=25766 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 01:20:04.264000 audit[3668]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe0ce77cb a2=241 a3=1b6 items=1 ppid=3633 pid=3668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:04.264000 audit: CWD cwd="/etc/service/enabled/confd/log" Sep 6 01:20:04.264000 audit: PATH item=0 name="/dev/fd/63" inode=25755 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:04.264000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 01:20:04.286000 audit[3688]: AVC avc: denied { write } for pid=3688 comm="tee" name="fd" dev="proc" ino=25788 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 01:20:04.288000 audit[3690]: AVC avc: denied { write } for pid=3690 comm="tee" name="fd" dev="proc" ino=25791 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 01:20:04.288000 audit[3690]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffed3207cc a2=241 a3=1b6 items=1 ppid=3636 pid=3690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:04.288000 audit: CWD cwd="/etc/service/enabled/bird/log" Sep 6 01:20:04.288000 audit: PATH item=0 name="/dev/fd/63" inode=25779 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:04.288000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 01:20:04.286000 audit[3688]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe0bb37cd a2=241 a3=1b6 items=1 ppid=3628 pid=3688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:04.286000 audit: CWD cwd="/etc/service/enabled/cni/log" Sep 6 01:20:04.286000 audit: PATH item=0 name="/dev/fd/63" inode=25778 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:04.286000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 01:20:04.303000 audit[3693]: AVC avc: denied { write } for pid=3693 comm="tee" name="fd" dev="proc" ino=25800 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 01:20:04.303000 audit[3693]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffee8077bb a2=241 a3=1b6 items=1 ppid=3632 pid=3693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:04.303000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Sep 6 01:20:04.303000 audit: PATH item=0 name="/dev/fd/63" inode=25780 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:04.303000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 01:20:04.309000 audit[3696]: AVC avc: denied { write } for pid=3696 comm="tee" name="fd" dev="proc" ino=25804 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 01:20:04.313000 audit[3701]: AVC avc: denied { write } for pid=3701 comm="tee" name="fd" dev="proc" ino=25807 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 01:20:04.313000 audit[3701]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe34ab7bc a2=241 a3=1b6 items=1 ppid=3635 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:04.313000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Sep 6 01:20:04.313000 audit: PATH item=0 name="/dev/fd/63" inode=25783 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:04.313000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 01:20:04.309000 audit[3696]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc2ce87cb a2=241 a3=1b6 items=1 ppid=3629 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:04.309000 audit: CWD cwd="/etc/service/enabled/felix/log" Sep 6 01:20:04.309000 audit: PATH item=0 name="/dev/fd/63" inode=25040 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:04.309000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 01:20:04.330000 audit[3710]: AVC avc: denied { write } for pid=3710 comm="tee" name="fd" dev="proc" ino=25044 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 01:20:04.330000 audit[3710]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffcc1247cb a2=241 a3=1b6 items=1 ppid=3624 pid=3710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:04.330000 audit: CWD cwd="/etc/service/enabled/bird6/log" Sep 6 01:20:04.330000 audit: PATH item=0 name="/dev/fd/63" inode=25041 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:04.330000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 01:20:05.034772 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali1e62cdcaa20: link becomes ready Sep 6 01:20:05.041255 systemd-networkd[1603]: cali1e62cdcaa20: Link UP Sep 6 01:20:05.041459 systemd-networkd[1603]: cali1e62cdcaa20: Gained carrier Sep 6 01:20:05.048919 env[1448]: 2025-09-06 01:20:04.517 [INFO][3645] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Sep 6 01:20:05.048919 env[1448]: 2025-09-06 01:20:04.658 [INFO][3645] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--f2ea6194e4-k8s-whisker--56499599bd--6sm55-eth0 whisker-56499599bd- calico-system 1fb006aa-9c24-4332-848d-594a328cf434 882 0 2025-09-06 01:20:03 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:56499599bd projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s ci-3510.3.8-n-f2ea6194e4 whisker-56499599bd-6sm55 eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali1e62cdcaa20 [] [] }} ContainerID="57b38ba72db77ae2c64387165895b52cd886fc7cde0e92e0e45f6c728ab7132f" Namespace="calico-system" Pod="whisker-56499599bd-6sm55" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-whisker--56499599bd--6sm55-" Sep 6 01:20:05.048919 env[1448]: 2025-09-06 01:20:04.659 [INFO][3645] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="57b38ba72db77ae2c64387165895b52cd886fc7cde0e92e0e45f6c728ab7132f" Namespace="calico-system" Pod="whisker-56499599bd-6sm55" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-whisker--56499599bd--6sm55-eth0" Sep 6 01:20:05.048919 env[1448]: 2025-09-06 01:20:04.685 [INFO][3720] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="57b38ba72db77ae2c64387165895b52cd886fc7cde0e92e0e45f6c728ab7132f" HandleID="k8s-pod-network.57b38ba72db77ae2c64387165895b52cd886fc7cde0e92e0e45f6c728ab7132f" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-whisker--56499599bd--6sm55-eth0" Sep 6 01:20:05.048919 env[1448]: 2025-09-06 01:20:04.685 [INFO][3720] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="57b38ba72db77ae2c64387165895b52cd886fc7cde0e92e0e45f6c728ab7132f" HandleID="k8s-pod-network.57b38ba72db77ae2c64387165895b52cd886fc7cde0e92e0e45f6c728ab7132f" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-whisker--56499599bd--6sm55-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d3680), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-f2ea6194e4", "pod":"whisker-56499599bd-6sm55", "timestamp":"2025-09-06 01:20:04.685154841 +0000 UTC"}, Hostname:"ci-3510.3.8-n-f2ea6194e4", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 01:20:05.048919 env[1448]: 2025-09-06 01:20:04.685 [INFO][3720] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:05.048919 env[1448]: 2025-09-06 01:20:04.685 [INFO][3720] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:05.048919 env[1448]: 2025-09-06 01:20:04.685 [INFO][3720] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-f2ea6194e4' Sep 6 01:20:05.048919 env[1448]: 2025-09-06 01:20:04.695 [INFO][3720] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.57b38ba72db77ae2c64387165895b52cd886fc7cde0e92e0e45f6c728ab7132f" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:05.048919 env[1448]: 2025-09-06 01:20:04.701 [INFO][3720] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:05.048919 env[1448]: 2025-09-06 01:20:04.709 [INFO][3720] ipam/ipam.go 511: Trying affinity for 192.168.5.128/26 host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:05.048919 env[1448]: 2025-09-06 01:20:04.711 [INFO][3720] ipam/ipam.go 158: Attempting to load block cidr=192.168.5.128/26 host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:05.048919 env[1448]: 2025-09-06 01:20:04.713 [INFO][3720] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.5.128/26 host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:05.048919 env[1448]: 2025-09-06 01:20:04.713 [INFO][3720] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.5.128/26 handle="k8s-pod-network.57b38ba72db77ae2c64387165895b52cd886fc7cde0e92e0e45f6c728ab7132f" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:05.048919 env[1448]: 2025-09-06 01:20:04.715 [INFO][3720] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.57b38ba72db77ae2c64387165895b52cd886fc7cde0e92e0e45f6c728ab7132f Sep 6 01:20:05.048919 env[1448]: 2025-09-06 01:20:04.720 [INFO][3720] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.5.128/26 handle="k8s-pod-network.57b38ba72db77ae2c64387165895b52cd886fc7cde0e92e0e45f6c728ab7132f" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:05.048919 env[1448]: 2025-09-06 01:20:04.727 [INFO][3720] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.5.129/26] block=192.168.5.128/26 handle="k8s-pod-network.57b38ba72db77ae2c64387165895b52cd886fc7cde0e92e0e45f6c728ab7132f" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:05.048919 env[1448]: 2025-09-06 01:20:04.727 [INFO][3720] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.5.129/26] handle="k8s-pod-network.57b38ba72db77ae2c64387165895b52cd886fc7cde0e92e0e45f6c728ab7132f" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:05.048919 env[1448]: 2025-09-06 01:20:04.727 [INFO][3720] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:05.048919 env[1448]: 2025-09-06 01:20:04.727 [INFO][3720] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.5.129/26] IPv6=[] ContainerID="57b38ba72db77ae2c64387165895b52cd886fc7cde0e92e0e45f6c728ab7132f" HandleID="k8s-pod-network.57b38ba72db77ae2c64387165895b52cd886fc7cde0e92e0e45f6c728ab7132f" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-whisker--56499599bd--6sm55-eth0" Sep 6 01:20:05.049678 env[1448]: 2025-09-06 01:20:04.729 [INFO][3645] cni-plugin/k8s.go 418: Populated endpoint ContainerID="57b38ba72db77ae2c64387165895b52cd886fc7cde0e92e0e45f6c728ab7132f" Namespace="calico-system" Pod="whisker-56499599bd-6sm55" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-whisker--56499599bd--6sm55-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--f2ea6194e4-k8s-whisker--56499599bd--6sm55-eth0", GenerateName:"whisker-56499599bd-", Namespace:"calico-system", SelfLink:"", UID:"1fb006aa-9c24-4332-848d-594a328cf434", ResourceVersion:"882", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 20, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"56499599bd", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-f2ea6194e4", ContainerID:"", Pod:"whisker-56499599bd-6sm55", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.5.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali1e62cdcaa20", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:20:05.049678 env[1448]: 2025-09-06 01:20:04.729 [INFO][3645] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.5.129/32] ContainerID="57b38ba72db77ae2c64387165895b52cd886fc7cde0e92e0e45f6c728ab7132f" Namespace="calico-system" Pod="whisker-56499599bd-6sm55" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-whisker--56499599bd--6sm55-eth0" Sep 6 01:20:05.049678 env[1448]: 2025-09-06 01:20:04.729 [INFO][3645] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali1e62cdcaa20 ContainerID="57b38ba72db77ae2c64387165895b52cd886fc7cde0e92e0e45f6c728ab7132f" Namespace="calico-system" Pod="whisker-56499599bd-6sm55" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-whisker--56499599bd--6sm55-eth0" Sep 6 01:20:05.049678 env[1448]: 2025-09-06 01:20:05.022 [INFO][3645] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="57b38ba72db77ae2c64387165895b52cd886fc7cde0e92e0e45f6c728ab7132f" Namespace="calico-system" Pod="whisker-56499599bd-6sm55" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-whisker--56499599bd--6sm55-eth0" Sep 6 01:20:05.049678 env[1448]: 2025-09-06 01:20:05.023 [INFO][3645] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="57b38ba72db77ae2c64387165895b52cd886fc7cde0e92e0e45f6c728ab7132f" Namespace="calico-system" Pod="whisker-56499599bd-6sm55" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-whisker--56499599bd--6sm55-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--f2ea6194e4-k8s-whisker--56499599bd--6sm55-eth0", GenerateName:"whisker-56499599bd-", Namespace:"calico-system", SelfLink:"", UID:"1fb006aa-9c24-4332-848d-594a328cf434", ResourceVersion:"882", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 20, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"56499599bd", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-f2ea6194e4", ContainerID:"57b38ba72db77ae2c64387165895b52cd886fc7cde0e92e0e45f6c728ab7132f", Pod:"whisker-56499599bd-6sm55", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.5.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali1e62cdcaa20", MAC:"be:fc:46:45:03:27", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:20:05.049678 env[1448]: 2025-09-06 01:20:05.044 [INFO][3645] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="57b38ba72db77ae2c64387165895b52cd886fc7cde0e92e0e45f6c728ab7132f" Namespace="calico-system" Pod="whisker-56499599bd-6sm55" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-whisker--56499599bd--6sm55-eth0" Sep 6 01:20:05.065939 env[1448]: time="2025-09-06T01:20:05.065733430Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:20:05.065939 env[1448]: time="2025-09-06T01:20:05.065788430Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:20:05.065939 env[1448]: time="2025-09-06T01:20:05.065799390Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:20:05.066808 env[1448]: time="2025-09-06T01:20:05.066206790Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/57b38ba72db77ae2c64387165895b52cd886fc7cde0e92e0e45f6c728ab7132f pid=3742 runtime=io.containerd.runc.v2 Sep 6 01:20:05.080604 systemd[1]: Started cri-containerd-57b38ba72db77ae2c64387165895b52cd886fc7cde0e92e0e45f6c728ab7132f.scope. Sep 6 01:20:05.088272 systemd[1]: run-containerd-runc-k8s.io-57b38ba72db77ae2c64387165895b52cd886fc7cde0e92e0e45f6c728ab7132f-runc.LYGBlM.mount: Deactivated successfully. Sep 6 01:20:05.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.102000 audit: BPF prog-id=143 op=LOAD Sep 6 01:20:05.103000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.103000 audit[3752]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3742 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:05.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537623338626137326462373761653263363433383731363538393562 Sep 6 01:20:05.103000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.103000 audit[3752]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3742 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:05.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537623338626137326462373761653263363433383731363538393562 Sep 6 01:20:05.103000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.103000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.103000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.103000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.103000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.103000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.103000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.103000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.103000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.103000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.103000 audit: BPF prog-id=144 op=LOAD Sep 6 01:20:05.103000 audit[3752]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3742 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:05.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537623338626137326462373761653263363433383731363538393562 Sep 6 01:20:05.103000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.103000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.103000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.103000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.103000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.103000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.103000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.103000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.103000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.103000 audit: BPF prog-id=145 op=LOAD Sep 6 01:20:05.103000 audit[3752]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3742 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:05.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537623338626137326462373761653263363433383731363538393562 Sep 6 01:20:05.103000 audit: BPF prog-id=145 op=UNLOAD Sep 6 01:20:05.103000 audit: BPF prog-id=144 op=UNLOAD Sep 6 01:20:05.103000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.103000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.103000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.103000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.103000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.103000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.103000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.103000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.103000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.103000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:05.103000 audit: BPF prog-id=146 op=LOAD Sep 6 01:20:05.103000 audit[3752]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3742 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:05.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537623338626137326462373761653263363433383731363538393562 Sep 6 01:20:05.125276 env[1448]: time="2025-09-06T01:20:05.125227761Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-56499599bd-6sm55,Uid:1fb006aa-9c24-4332-848d-594a328cf434,Namespace:calico-system,Attempt:0,} returns sandbox id \"57b38ba72db77ae2c64387165895b52cd886fc7cde0e92e0e45f6c728ab7132f\"" Sep 6 01:20:05.128384 env[1448]: time="2025-09-06T01:20:05.128345961Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\"" Sep 6 01:20:05.463719 kubelet[2427]: I0906 01:20:05.463600 2427 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 6 01:20:05.587403 kubelet[2427]: I0906 01:20:05.587336 2427 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="dba07540-0822-4517-bf04-2806ca166e6d" path="/var/lib/kubelet/pods/dba07540-0822-4517-bf04-2806ca166e6d/volumes" Sep 6 01:20:05.588629 env[1448]: time="2025-09-06T01:20:05.588560684Z" level=info msg="StopPodSandbox for \"1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b\"" Sep 6 01:20:05.715209 env[1448]: 2025-09-06 01:20:05.662 [INFO][3805] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" Sep 6 01:20:05.715209 env[1448]: 2025-09-06 01:20:05.662 [INFO][3805] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" iface="eth0" netns="/var/run/netns/cni-80d7f7cf-83c7-af2e-5e5f-10cd77b44623" Sep 6 01:20:05.715209 env[1448]: 2025-09-06 01:20:05.663 [INFO][3805] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" iface="eth0" netns="/var/run/netns/cni-80d7f7cf-83c7-af2e-5e5f-10cd77b44623" Sep 6 01:20:05.715209 env[1448]: 2025-09-06 01:20:05.663 [INFO][3805] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" iface="eth0" netns="/var/run/netns/cni-80d7f7cf-83c7-af2e-5e5f-10cd77b44623" Sep 6 01:20:05.715209 env[1448]: 2025-09-06 01:20:05.663 [INFO][3805] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" Sep 6 01:20:05.715209 env[1448]: 2025-09-06 01:20:05.663 [INFO][3805] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" Sep 6 01:20:05.715209 env[1448]: 2025-09-06 01:20:05.693 [INFO][3830] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" HandleID="k8s-pod-network.1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--hf7h8-eth0" Sep 6 01:20:05.715209 env[1448]: 2025-09-06 01:20:05.693 [INFO][3830] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:05.715209 env[1448]: 2025-09-06 01:20:05.693 [INFO][3830] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:05.715209 env[1448]: 2025-09-06 01:20:05.710 [WARNING][3830] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" HandleID="k8s-pod-network.1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--hf7h8-eth0" Sep 6 01:20:05.715209 env[1448]: 2025-09-06 01:20:05.710 [INFO][3830] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" HandleID="k8s-pod-network.1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--hf7h8-eth0" Sep 6 01:20:05.715209 env[1448]: 2025-09-06 01:20:05.712 [INFO][3830] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:05.715209 env[1448]: 2025-09-06 01:20:05.713 [INFO][3805] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" Sep 6 01:20:05.715721 env[1448]: time="2025-09-06T01:20:05.715487747Z" level=info msg="TearDown network for sandbox \"1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b\" successfully" Sep 6 01:20:05.715721 env[1448]: time="2025-09-06T01:20:05.715530907Z" level=info msg="StopPodSandbox for \"1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b\" returns successfully" Sep 6 01:20:05.716461 env[1448]: time="2025-09-06T01:20:05.716428307Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-58578c4b6-hf7h8,Uid:79dc05b9-4f40-4daa-8331-0dd36a50ea4a,Namespace:calico-apiserver,Attempt:1,}" Sep 6 01:20:05.937902 systemd-networkd[1603]: cali1e8fa5a7ac3: Link UP Sep 6 01:20:05.947891 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali1e8fa5a7ac3: link becomes ready Sep 6 01:20:05.948365 systemd-networkd[1603]: cali1e8fa5a7ac3: Gained carrier Sep 6 01:20:05.964957 env[1448]: 2025-09-06 01:20:05.803 [INFO][3836] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Sep 6 01:20:05.964957 env[1448]: 2025-09-06 01:20:05.823 [INFO][3836] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--hf7h8-eth0 calico-apiserver-58578c4b6- calico-apiserver 79dc05b9-4f40-4daa-8331-0dd36a50ea4a 895 0 2025-09-06 01:19:36 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:58578c4b6 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.8-n-f2ea6194e4 calico-apiserver-58578c4b6-hf7h8 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali1e8fa5a7ac3 [] [] }} ContainerID="2e6641cde46fb9b0eff0717c5bcc9018c04326cd674a401b5ac91753ef4906b8" Namespace="calico-apiserver" Pod="calico-apiserver-58578c4b6-hf7h8" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--hf7h8-" Sep 6 01:20:05.964957 env[1448]: 2025-09-06 01:20:05.823 [INFO][3836] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="2e6641cde46fb9b0eff0717c5bcc9018c04326cd674a401b5ac91753ef4906b8" Namespace="calico-apiserver" Pod="calico-apiserver-58578c4b6-hf7h8" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--hf7h8-eth0" Sep 6 01:20:05.964957 env[1448]: 2025-09-06 01:20:05.877 [INFO][3848] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="2e6641cde46fb9b0eff0717c5bcc9018c04326cd674a401b5ac91753ef4906b8" HandleID="k8s-pod-network.2e6641cde46fb9b0eff0717c5bcc9018c04326cd674a401b5ac91753ef4906b8" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--hf7h8-eth0" Sep 6 01:20:05.964957 env[1448]: 2025-09-06 01:20:05.877 [INFO][3848] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="2e6641cde46fb9b0eff0717c5bcc9018c04326cd674a401b5ac91753ef4906b8" HandleID="k8s-pod-network.2e6641cde46fb9b0eff0717c5bcc9018c04326cd674a401b5ac91753ef4906b8" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--hf7h8-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002ab4a0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.8-n-f2ea6194e4", "pod":"calico-apiserver-58578c4b6-hf7h8", "timestamp":"2025-09-06 01:20:05.877705896 +0000 UTC"}, Hostname:"ci-3510.3.8-n-f2ea6194e4", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 01:20:05.964957 env[1448]: 2025-09-06 01:20:05.878 [INFO][3848] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:05.964957 env[1448]: 2025-09-06 01:20:05.878 [INFO][3848] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:05.964957 env[1448]: 2025-09-06 01:20:05.878 [INFO][3848] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-f2ea6194e4' Sep 6 01:20:05.964957 env[1448]: 2025-09-06 01:20:05.891 [INFO][3848] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.2e6641cde46fb9b0eff0717c5bcc9018c04326cd674a401b5ac91753ef4906b8" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:05.964957 env[1448]: 2025-09-06 01:20:05.900 [INFO][3848] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:05.964957 env[1448]: 2025-09-06 01:20:05.906 [INFO][3848] ipam/ipam.go 511: Trying affinity for 192.168.5.128/26 host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:05.964957 env[1448]: 2025-09-06 01:20:05.908 [INFO][3848] ipam/ipam.go 158: Attempting to load block cidr=192.168.5.128/26 host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:05.964957 env[1448]: 2025-09-06 01:20:05.911 [INFO][3848] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.5.128/26 host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:05.964957 env[1448]: 2025-09-06 01:20:05.911 [INFO][3848] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.5.128/26 handle="k8s-pod-network.2e6641cde46fb9b0eff0717c5bcc9018c04326cd674a401b5ac91753ef4906b8" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:05.964957 env[1448]: 2025-09-06 01:20:05.913 [INFO][3848] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.2e6641cde46fb9b0eff0717c5bcc9018c04326cd674a401b5ac91753ef4906b8 Sep 6 01:20:05.964957 env[1448]: 2025-09-06 01:20:05.918 [INFO][3848] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.5.128/26 handle="k8s-pod-network.2e6641cde46fb9b0eff0717c5bcc9018c04326cd674a401b5ac91753ef4906b8" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:05.964957 env[1448]: 2025-09-06 01:20:05.928 [INFO][3848] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.5.130/26] block=192.168.5.128/26 handle="k8s-pod-network.2e6641cde46fb9b0eff0717c5bcc9018c04326cd674a401b5ac91753ef4906b8" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:05.964957 env[1448]: 2025-09-06 01:20:05.929 [INFO][3848] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.5.130/26] handle="k8s-pod-network.2e6641cde46fb9b0eff0717c5bcc9018c04326cd674a401b5ac91753ef4906b8" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:05.964957 env[1448]: 2025-09-06 01:20:05.929 [INFO][3848] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:05.964957 env[1448]: 2025-09-06 01:20:05.929 [INFO][3848] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.5.130/26] IPv6=[] ContainerID="2e6641cde46fb9b0eff0717c5bcc9018c04326cd674a401b5ac91753ef4906b8" HandleID="k8s-pod-network.2e6641cde46fb9b0eff0717c5bcc9018c04326cd674a401b5ac91753ef4906b8" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--hf7h8-eth0" Sep 6 01:20:05.965892 env[1448]: 2025-09-06 01:20:05.930 [INFO][3836] cni-plugin/k8s.go 418: Populated endpoint ContainerID="2e6641cde46fb9b0eff0717c5bcc9018c04326cd674a401b5ac91753ef4906b8" Namespace="calico-apiserver" Pod="calico-apiserver-58578c4b6-hf7h8" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--hf7h8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--hf7h8-eth0", GenerateName:"calico-apiserver-58578c4b6-", Namespace:"calico-apiserver", SelfLink:"", UID:"79dc05b9-4f40-4daa-8331-0dd36a50ea4a", ResourceVersion:"895", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 19, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"58578c4b6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-f2ea6194e4", ContainerID:"", Pod:"calico-apiserver-58578c4b6-hf7h8", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.5.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1e8fa5a7ac3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:20:05.965892 env[1448]: 2025-09-06 01:20:05.930 [INFO][3836] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.5.130/32] ContainerID="2e6641cde46fb9b0eff0717c5bcc9018c04326cd674a401b5ac91753ef4906b8" Namespace="calico-apiserver" Pod="calico-apiserver-58578c4b6-hf7h8" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--hf7h8-eth0" Sep 6 01:20:05.965892 env[1448]: 2025-09-06 01:20:05.930 [INFO][3836] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali1e8fa5a7ac3 ContainerID="2e6641cde46fb9b0eff0717c5bcc9018c04326cd674a401b5ac91753ef4906b8" Namespace="calico-apiserver" Pod="calico-apiserver-58578c4b6-hf7h8" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--hf7h8-eth0" Sep 6 01:20:05.965892 env[1448]: 2025-09-06 01:20:05.948 [INFO][3836] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="2e6641cde46fb9b0eff0717c5bcc9018c04326cd674a401b5ac91753ef4906b8" Namespace="calico-apiserver" Pod="calico-apiserver-58578c4b6-hf7h8" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--hf7h8-eth0" Sep 6 01:20:05.965892 env[1448]: 2025-09-06 01:20:05.949 [INFO][3836] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="2e6641cde46fb9b0eff0717c5bcc9018c04326cd674a401b5ac91753ef4906b8" Namespace="calico-apiserver" Pod="calico-apiserver-58578c4b6-hf7h8" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--hf7h8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--hf7h8-eth0", GenerateName:"calico-apiserver-58578c4b6-", Namespace:"calico-apiserver", SelfLink:"", UID:"79dc05b9-4f40-4daa-8331-0dd36a50ea4a", ResourceVersion:"895", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 19, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"58578c4b6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-f2ea6194e4", ContainerID:"2e6641cde46fb9b0eff0717c5bcc9018c04326cd674a401b5ac91753ef4906b8", Pod:"calico-apiserver-58578c4b6-hf7h8", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.5.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1e8fa5a7ac3", MAC:"e6:ef:5c:4d:72:62", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:20:05.965892 env[1448]: 2025-09-06 01:20:05.962 [INFO][3836] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="2e6641cde46fb9b0eff0717c5bcc9018c04326cd674a401b5ac91753ef4906b8" Namespace="calico-apiserver" Pod="calico-apiserver-58578c4b6-hf7h8" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--hf7h8-eth0" Sep 6 01:20:05.983976 env[1448]: time="2025-09-06T01:20:05.983891275Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:20:05.983976 env[1448]: time="2025-09-06T01:20:05.983935915Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:20:05.984226 env[1448]: time="2025-09-06T01:20:05.983957235Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:20:05.984524 env[1448]: time="2025-09-06T01:20:05.984459995Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2e6641cde46fb9b0eff0717c5bcc9018c04326cd674a401b5ac91753ef4906b8 pid=3891 runtime=io.containerd.runc.v2 Sep 6 01:20:05.996114 systemd[1]: Started cri-containerd-2e6641cde46fb9b0eff0717c5bcc9018c04326cd674a401b5ac91753ef4906b8.scope. Sep 6 01:20:06.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.014000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.014000 audit: BPF prog-id=147 op=LOAD Sep 6 01:20:06.015000 audit[3901]: AVC avc: denied { bpf } for pid=3901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.015000 audit[3901]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bfb38 a2=10 a3=0 items=0 ppid=3891 pid=3901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:06.015000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265363634316364653436666239623065666630373137633562636339 Sep 6 01:20:06.015000 audit[3901]: AVC avc: denied { perfmon } for pid=3901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.015000 audit[3901]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bf5a0 a2=3c a3=0 items=0 ppid=3891 pid=3901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:06.015000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265363634316364653436666239623065666630373137633562636339 Sep 6 01:20:06.015000 audit[3901]: AVC avc: denied { bpf } for pid=3901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.015000 audit[3901]: AVC avc: denied { bpf } for pid=3901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.015000 audit[3901]: AVC avc: denied { bpf } for pid=3901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.015000 audit[3901]: AVC avc: denied { perfmon } for pid=3901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.015000 audit[3901]: AVC avc: denied { perfmon } for pid=3901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.015000 audit[3901]: AVC avc: denied { perfmon } for pid=3901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.015000 audit[3901]: AVC avc: denied { perfmon } for pid=3901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.015000 audit[3901]: AVC avc: denied { perfmon } for pid=3901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.015000 audit[3901]: AVC avc: denied { bpf } for pid=3901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.015000 audit[3901]: AVC avc: denied { bpf } for pid=3901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.015000 audit: BPF prog-id=148 op=LOAD Sep 6 01:20:06.015000 audit[3901]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bf8e0 a2=78 a3=0 items=0 ppid=3891 pid=3901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:06.015000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265363634316364653436666239623065666630373137633562636339 Sep 6 01:20:06.015000 audit[3901]: AVC avc: denied { bpf } for pid=3901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.015000 audit[3901]: AVC avc: denied { bpf } for pid=3901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.015000 audit[3901]: AVC avc: denied { perfmon } for pid=3901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.015000 audit[3901]: AVC avc: denied { perfmon } for pid=3901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.015000 audit[3901]: AVC avc: denied { perfmon } for pid=3901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.015000 audit[3901]: AVC avc: denied { perfmon } for pid=3901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.015000 audit[3901]: AVC avc: denied { perfmon } for pid=3901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.015000 audit[3901]: AVC avc: denied { bpf } for pid=3901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.015000 audit[3901]: AVC avc: denied { bpf } for pid=3901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.015000 audit: BPF prog-id=149 op=LOAD Sep 6 01:20:06.015000 audit[3901]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bf670 a2=78 a3=0 items=0 ppid=3891 pid=3901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:06.015000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265363634316364653436666239623065666630373137633562636339 Sep 6 01:20:06.015000 audit: BPF prog-id=149 op=UNLOAD Sep 6 01:20:06.015000 audit: BPF prog-id=148 op=UNLOAD Sep 6 01:20:06.015000 audit[3901]: AVC avc: denied { bpf } for pid=3901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.015000 audit[3901]: AVC avc: denied { bpf } for pid=3901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.015000 audit[3901]: AVC avc: denied { bpf } for pid=3901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.015000 audit[3901]: AVC avc: denied { perfmon } for pid=3901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.015000 audit[3901]: AVC avc: denied { perfmon } for pid=3901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.015000 audit[3901]: AVC avc: denied { perfmon } for pid=3901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.015000 audit[3901]: AVC avc: denied { perfmon } for pid=3901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.015000 audit[3901]: AVC avc: denied { perfmon } for pid=3901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.015000 audit[3901]: AVC avc: denied { bpf } for pid=3901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.015000 audit[3901]: AVC avc: denied { bpf } for pid=3901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:06.015000 audit: BPF prog-id=150 op=LOAD Sep 6 01:20:06.015000 audit[3901]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bfb40 a2=78 a3=0 items=0 ppid=3891 pid=3901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:06.015000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265363634316364653436666239623065666630373137633562636339 Sep 6 01:20:06.035380 env[1448]: time="2025-09-06T01:20:06.035336524Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-58578c4b6-hf7h8,Uid:79dc05b9-4f40-4daa-8331-0dd36a50ea4a,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"2e6641cde46fb9b0eff0717c5bcc9018c04326cd674a401b5ac91753ef4906b8\"" Sep 6 01:20:06.071169 systemd[1]: run-containerd-runc-k8s.io-a227574c5c403141d2aed21f34bcc55f4c62fb221103616b6ecd00bd5e122d17-runc.IiAYwW.mount: Deactivated successfully. Sep 6 01:20:06.071270 systemd[1]: run-netns-cni\x2d80d7f7cf\x2d83c7\x2daf2e\x2d5e5f\x2d10cd77b44623.mount: Deactivated successfully. Sep 6 01:20:06.264874 systemd-networkd[1603]: cali1e62cdcaa20: Gained IPv6LL Sep 6 01:20:06.585961 env[1448]: time="2025-09-06T01:20:06.585842621Z" level=info msg="StopPodSandbox for \"207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43\"" Sep 6 01:20:06.689809 env[1448]: 2025-09-06 01:20:06.640 [INFO][3938] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" Sep 6 01:20:06.689809 env[1448]: 2025-09-06 01:20:06.640 [INFO][3938] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" iface="eth0" netns="/var/run/netns/cni-d7718b8e-6e14-1c57-f21f-a055bd9ba21b" Sep 6 01:20:06.689809 env[1448]: 2025-09-06 01:20:06.640 [INFO][3938] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" iface="eth0" netns="/var/run/netns/cni-d7718b8e-6e14-1c57-f21f-a055bd9ba21b" Sep 6 01:20:06.689809 env[1448]: 2025-09-06 01:20:06.640 [INFO][3938] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" iface="eth0" netns="/var/run/netns/cni-d7718b8e-6e14-1c57-f21f-a055bd9ba21b" Sep 6 01:20:06.689809 env[1448]: 2025-09-06 01:20:06.640 [INFO][3938] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" Sep 6 01:20:06.689809 env[1448]: 2025-09-06 01:20:06.640 [INFO][3938] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" Sep 6 01:20:06.689809 env[1448]: 2025-09-06 01:20:06.676 [INFO][3946] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" HandleID="k8s-pod-network.207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--lg85q-eth0" Sep 6 01:20:06.689809 env[1448]: 2025-09-06 01:20:06.676 [INFO][3946] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:06.689809 env[1448]: 2025-09-06 01:20:06.676 [INFO][3946] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:06.689809 env[1448]: 2025-09-06 01:20:06.685 [WARNING][3946] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" HandleID="k8s-pod-network.207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--lg85q-eth0" Sep 6 01:20:06.689809 env[1448]: 2025-09-06 01:20:06.685 [INFO][3946] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" HandleID="k8s-pod-network.207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--lg85q-eth0" Sep 6 01:20:06.689809 env[1448]: 2025-09-06 01:20:06.686 [INFO][3946] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:06.689809 env[1448]: 2025-09-06 01:20:06.688 [INFO][3938] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" Sep 6 01:20:06.693342 env[1448]: time="2025-09-06T01:20:06.693293920Z" level=info msg="TearDown network for sandbox \"207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43\" successfully" Sep 6 01:20:06.693503 env[1448]: time="2025-09-06T01:20:06.693483240Z" level=info msg="StopPodSandbox for \"207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43\" returns successfully" Sep 6 01:20:06.695444 systemd[1]: run-netns-cni\x2dd7718b8e\x2d6e14\x2d1c57\x2df21f\x2da055bd9ba21b.mount: Deactivated successfully. Sep 6 01:20:06.696875 env[1448]: time="2025-09-06T01:20:06.696833841Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-lg85q,Uid:334dc78e-f61b-4bc4-8334-ccf4d158c00f,Namespace:kube-system,Attempt:1,}" Sep 6 01:20:06.900115 systemd-networkd[1603]: calicc09d2f30d3: Link UP Sep 6 01:20:06.908957 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 6 01:20:06.909087 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calicc09d2f30d3: link becomes ready Sep 6 01:20:06.912071 systemd-networkd[1603]: calicc09d2f30d3: Gained carrier Sep 6 01:20:06.945457 env[1448]: 2025-09-06 01:20:06.773 [INFO][3952] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Sep 6 01:20:06.945457 env[1448]: 2025-09-06 01:20:06.786 [INFO][3952] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--lg85q-eth0 coredns-668d6bf9bc- kube-system 334dc78e-f61b-4bc4-8334-ccf4d158c00f 904 0 2025-09-06 01:19:22 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.8-n-f2ea6194e4 coredns-668d6bf9bc-lg85q eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calicc09d2f30d3 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="b9977f9c45fcefab8b2ee26cf873253e44b053e478402e8d66c0181aa729fbf0" Namespace="kube-system" Pod="coredns-668d6bf9bc-lg85q" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--lg85q-" Sep 6 01:20:06.945457 env[1448]: 2025-09-06 01:20:06.786 [INFO][3952] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b9977f9c45fcefab8b2ee26cf873253e44b053e478402e8d66c0181aa729fbf0" Namespace="kube-system" Pod="coredns-668d6bf9bc-lg85q" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--lg85q-eth0" Sep 6 01:20:06.945457 env[1448]: 2025-09-06 01:20:06.818 [INFO][3964] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b9977f9c45fcefab8b2ee26cf873253e44b053e478402e8d66c0181aa729fbf0" HandleID="k8s-pod-network.b9977f9c45fcefab8b2ee26cf873253e44b053e478402e8d66c0181aa729fbf0" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--lg85q-eth0" Sep 6 01:20:06.945457 env[1448]: 2025-09-06 01:20:06.818 [INFO][3964] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b9977f9c45fcefab8b2ee26cf873253e44b053e478402e8d66c0181aa729fbf0" HandleID="k8s-pod-network.b9977f9c45fcefab8b2ee26cf873253e44b053e478402e8d66c0181aa729fbf0" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--lg85q-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d3020), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.8-n-f2ea6194e4", "pod":"coredns-668d6bf9bc-lg85q", "timestamp":"2025-09-06 01:20:06.818185462 +0000 UTC"}, Hostname:"ci-3510.3.8-n-f2ea6194e4", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 01:20:06.945457 env[1448]: 2025-09-06 01:20:06.818 [INFO][3964] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:06.945457 env[1448]: 2025-09-06 01:20:06.818 [INFO][3964] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:06.945457 env[1448]: 2025-09-06 01:20:06.818 [INFO][3964] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-f2ea6194e4' Sep 6 01:20:06.945457 env[1448]: 2025-09-06 01:20:06.827 [INFO][3964] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.b9977f9c45fcefab8b2ee26cf873253e44b053e478402e8d66c0181aa729fbf0" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:06.945457 env[1448]: 2025-09-06 01:20:06.838 [INFO][3964] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:06.945457 env[1448]: 2025-09-06 01:20:06.844 [INFO][3964] ipam/ipam.go 511: Trying affinity for 192.168.5.128/26 host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:06.945457 env[1448]: 2025-09-06 01:20:06.850 [INFO][3964] ipam/ipam.go 158: Attempting to load block cidr=192.168.5.128/26 host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:06.945457 env[1448]: 2025-09-06 01:20:06.853 [INFO][3964] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.5.128/26 host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:06.945457 env[1448]: 2025-09-06 01:20:06.853 [INFO][3964] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.5.128/26 handle="k8s-pod-network.b9977f9c45fcefab8b2ee26cf873253e44b053e478402e8d66c0181aa729fbf0" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:06.945457 env[1448]: 2025-09-06 01:20:06.855 [INFO][3964] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.b9977f9c45fcefab8b2ee26cf873253e44b053e478402e8d66c0181aa729fbf0 Sep 6 01:20:06.945457 env[1448]: 2025-09-06 01:20:06.860 [INFO][3964] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.5.128/26 handle="k8s-pod-network.b9977f9c45fcefab8b2ee26cf873253e44b053e478402e8d66c0181aa729fbf0" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:06.945457 env[1448]: 2025-09-06 01:20:06.872 [INFO][3964] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.5.131/26] block=192.168.5.128/26 handle="k8s-pod-network.b9977f9c45fcefab8b2ee26cf873253e44b053e478402e8d66c0181aa729fbf0" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:06.945457 env[1448]: 2025-09-06 01:20:06.872 [INFO][3964] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.5.131/26] handle="k8s-pod-network.b9977f9c45fcefab8b2ee26cf873253e44b053e478402e8d66c0181aa729fbf0" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:06.945457 env[1448]: 2025-09-06 01:20:06.872 [INFO][3964] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:06.945457 env[1448]: 2025-09-06 01:20:06.872 [INFO][3964] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.5.131/26] IPv6=[] ContainerID="b9977f9c45fcefab8b2ee26cf873253e44b053e478402e8d66c0181aa729fbf0" HandleID="k8s-pod-network.b9977f9c45fcefab8b2ee26cf873253e44b053e478402e8d66c0181aa729fbf0" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--lg85q-eth0" Sep 6 01:20:06.946133 env[1448]: 2025-09-06 01:20:06.890 [INFO][3952] cni-plugin/k8s.go 418: Populated endpoint ContainerID="b9977f9c45fcefab8b2ee26cf873253e44b053e478402e8d66c0181aa729fbf0" Namespace="kube-system" Pod="coredns-668d6bf9bc-lg85q" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--lg85q-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--lg85q-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"334dc78e-f61b-4bc4-8334-ccf4d158c00f", ResourceVersion:"904", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 19, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-f2ea6194e4", ContainerID:"", Pod:"coredns-668d6bf9bc-lg85q", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.5.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calicc09d2f30d3", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:20:06.946133 env[1448]: 2025-09-06 01:20:06.890 [INFO][3952] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.5.131/32] ContainerID="b9977f9c45fcefab8b2ee26cf873253e44b053e478402e8d66c0181aa729fbf0" Namespace="kube-system" Pod="coredns-668d6bf9bc-lg85q" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--lg85q-eth0" Sep 6 01:20:06.946133 env[1448]: 2025-09-06 01:20:06.890 [INFO][3952] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calicc09d2f30d3 ContainerID="b9977f9c45fcefab8b2ee26cf873253e44b053e478402e8d66c0181aa729fbf0" Namespace="kube-system" Pod="coredns-668d6bf9bc-lg85q" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--lg85q-eth0" Sep 6 01:20:06.946133 env[1448]: 2025-09-06 01:20:06.892 [INFO][3952] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b9977f9c45fcefab8b2ee26cf873253e44b053e478402e8d66c0181aa729fbf0" Namespace="kube-system" Pod="coredns-668d6bf9bc-lg85q" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--lg85q-eth0" Sep 6 01:20:06.946133 env[1448]: 2025-09-06 01:20:06.913 [INFO][3952] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="b9977f9c45fcefab8b2ee26cf873253e44b053e478402e8d66c0181aa729fbf0" Namespace="kube-system" Pod="coredns-668d6bf9bc-lg85q" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--lg85q-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--lg85q-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"334dc78e-f61b-4bc4-8334-ccf4d158c00f", ResourceVersion:"904", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 19, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-f2ea6194e4", ContainerID:"b9977f9c45fcefab8b2ee26cf873253e44b053e478402e8d66c0181aa729fbf0", Pod:"coredns-668d6bf9bc-lg85q", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.5.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calicc09d2f30d3", MAC:"62:16:13:04:b0:d1", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:20:06.946133 env[1448]: 2025-09-06 01:20:06.938 [INFO][3952] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="b9977f9c45fcefab8b2ee26cf873253e44b053e478402e8d66c0181aa729fbf0" Namespace="kube-system" Pod="coredns-668d6bf9bc-lg85q" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--lg85q-eth0" Sep 6 01:20:06.982891 env[1448]: time="2025-09-06T01:20:06.982325771Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:20:06.982891 env[1448]: time="2025-09-06T01:20:06.982365971Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:20:06.982891 env[1448]: time="2025-09-06T01:20:06.982376531Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:20:06.982891 env[1448]: time="2025-09-06T01:20:06.982524651Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b9977f9c45fcefab8b2ee26cf873253e44b053e478402e8d66c0181aa729fbf0 pid=4000 runtime=io.containerd.runc.v2 Sep 6 01:20:07.035337 systemd[1]: Started cri-containerd-b9977f9c45fcefab8b2ee26cf873253e44b053e478402e8d66c0181aa729fbf0.scope. Sep 6 01:20:07.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.054000 audit: BPF prog-id=151 op=LOAD Sep 6 01:20:07.054000 audit[4011]: AVC avc: denied { bpf } for pid=4011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.054000 audit[4011]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4000 pid=4011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:07.054000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239393737663963343566636566616238623265653236636638373332 Sep 6 01:20:07.055000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.055000 audit[4011]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4000 pid=4011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:07.055000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239393737663963343566636566616238623265653236636638373332 Sep 6 01:20:07.055000 audit[4011]: AVC avc: denied { bpf } for pid=4011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.055000 audit[4011]: AVC avc: denied { bpf } for pid=4011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.055000 audit[4011]: AVC avc: denied { bpf } for pid=4011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.055000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.055000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.055000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.055000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.055000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.055000 audit[4011]: AVC avc: denied { bpf } for pid=4011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.055000 audit[4011]: AVC avc: denied { bpf } for pid=4011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.055000 audit: BPF prog-id=152 op=LOAD Sep 6 01:20:07.055000 audit[4011]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4000 pid=4011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:07.055000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239393737663963343566636566616238623265653236636638373332 Sep 6 01:20:07.056000 audit[4011]: AVC avc: denied { bpf } for pid=4011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.056000 audit[4011]: AVC avc: denied { bpf } for pid=4011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.056000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.056000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.056000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.056000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.056000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.056000 audit[4011]: AVC avc: denied { bpf } for pid=4011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.056000 audit[4011]: AVC avc: denied { bpf } for pid=4011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.056000 audit: BPF prog-id=153 op=LOAD Sep 6 01:20:07.056000 audit[4011]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4000 pid=4011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:07.056000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239393737663963343566636566616238623265653236636638373332 Sep 6 01:20:07.056000 audit: BPF prog-id=153 op=UNLOAD Sep 6 01:20:07.056000 audit: BPF prog-id=152 op=UNLOAD Sep 6 01:20:07.056000 audit[4011]: AVC avc: denied { bpf } for pid=4011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.056000 audit[4011]: AVC avc: denied { bpf } for pid=4011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.056000 audit[4011]: AVC avc: denied { bpf } for pid=4011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.056000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.056000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.056000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.056000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.056000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.056000 audit[4011]: AVC avc: denied { bpf } for pid=4011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.056000 audit[4011]: AVC avc: denied { bpf } for pid=4011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.056000 audit: BPF prog-id=154 op=LOAD Sep 6 01:20:07.056000 audit[4011]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4000 pid=4011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:07.056000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239393737663963343566636566616238623265653236636638373332 Sep 6 01:20:07.093551 env[1448]: time="2025-09-06T01:20:07.093502351Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-lg85q,Uid:334dc78e-f61b-4bc4-8334-ccf4d158c00f,Namespace:kube-system,Attempt:1,} returns sandbox id \"b9977f9c45fcefab8b2ee26cf873253e44b053e478402e8d66c0181aa729fbf0\"" Sep 6 01:20:07.103855 env[1448]: time="2025-09-06T01:20:07.103800992Z" level=info msg="CreateContainer within sandbox \"b9977f9c45fcefab8b2ee26cf873253e44b053e478402e8d66c0181aa729fbf0\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 6 01:20:07.108057 env[1448]: time="2025-09-06T01:20:07.108005953Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:07.127246 env[1448]: time="2025-09-06T01:20:07.127197316Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:270a0129ec34c3ad6ae6d56c0afce111eb0baa25dfdacb63722ec5887bafd3c5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:07.142111 env[1448]: time="2025-09-06T01:20:07.142047519Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:07.160917 env[1448]: time="2025-09-06T01:20:07.158627042Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:e7113761fc7633d515882f0d48b5c8d0b8e62f3f9d34823f2ee194bb16d2ec44,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:07.160917 env[1448]: time="2025-09-06T01:20:07.159426762Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\" returns image reference \"sha256:270a0129ec34c3ad6ae6d56c0afce111eb0baa25dfdacb63722ec5887bafd3c5\"" Sep 6 01:20:07.166776 env[1448]: time="2025-09-06T01:20:07.165738363Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 6 01:20:07.170336 env[1448]: time="2025-09-06T01:20:07.170290164Z" level=info msg="CreateContainer within sandbox \"57b38ba72db77ae2c64387165895b52cd886fc7cde0e92e0e45f6c728ab7132f\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Sep 6 01:20:07.182062 env[1448]: time="2025-09-06T01:20:07.182004366Z" level=info msg="CreateContainer within sandbox \"b9977f9c45fcefab8b2ee26cf873253e44b053e478402e8d66c0181aa729fbf0\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"badfdad8be2426c36cb2897b3ae9ad502a93aabc48c54cf773c0b7e82eaa774e\"" Sep 6 01:20:07.183103 env[1448]: time="2025-09-06T01:20:07.183072166Z" level=info msg="StartContainer for \"badfdad8be2426c36cb2897b3ae9ad502a93aabc48c54cf773c0b7e82eaa774e\"" Sep 6 01:20:07.207627 systemd[1]: Started cri-containerd-badfdad8be2426c36cb2897b3ae9ad502a93aabc48c54cf773c0b7e82eaa774e.scope. Sep 6 01:20:07.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.220000 audit: BPF prog-id=155 op=LOAD Sep 6 01:20:07.221000 audit[4044]: AVC avc: denied { bpf } for pid=4044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.221000 audit[4044]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4000 pid=4044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:07.221000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261646664616438626532343236633336636232383937623361653961 Sep 6 01:20:07.222000 audit[4044]: AVC avc: denied { perfmon } for pid=4044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.222000 audit[4044]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4000 pid=4044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:07.222000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261646664616438626532343236633336636232383937623361653961 Sep 6 01:20:07.222000 audit[4044]: AVC avc: denied { bpf } for pid=4044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.222000 audit[4044]: AVC avc: denied { bpf } for pid=4044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.222000 audit[4044]: AVC avc: denied { bpf } for pid=4044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.222000 audit[4044]: AVC avc: denied { perfmon } for pid=4044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.222000 audit[4044]: AVC avc: denied { perfmon } for pid=4044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.222000 audit[4044]: AVC avc: denied { perfmon } for pid=4044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.222000 audit[4044]: AVC avc: denied { perfmon } for pid=4044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.222000 audit[4044]: AVC avc: denied { perfmon } for pid=4044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.222000 audit[4044]: AVC avc: denied { bpf } for pid=4044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.222000 audit[4044]: AVC avc: denied { bpf } for pid=4044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.222000 audit: BPF prog-id=156 op=LOAD Sep 6 01:20:07.222000 audit[4044]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4000 pid=4044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:07.222000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261646664616438626532343236633336636232383937623361653961 Sep 6 01:20:07.223000 audit[4044]: AVC avc: denied { bpf } for pid=4044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.223000 audit[4044]: AVC avc: denied { bpf } for pid=4044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.223000 audit[4044]: AVC avc: denied { perfmon } for pid=4044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.223000 audit[4044]: AVC avc: denied { perfmon } for pid=4044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.223000 audit[4044]: AVC avc: denied { perfmon } for pid=4044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.223000 audit[4044]: AVC avc: denied { perfmon } for pid=4044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.223000 audit[4044]: AVC avc: denied { perfmon } for pid=4044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.223000 audit[4044]: AVC avc: denied { bpf } for pid=4044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.223000 audit[4044]: AVC avc: denied { bpf } for pid=4044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.223000 audit: BPF prog-id=157 op=LOAD Sep 6 01:20:07.223000 audit[4044]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4000 pid=4044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:07.223000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261646664616438626532343236633336636232383937623361653961 Sep 6 01:20:07.223000 audit: BPF prog-id=157 op=UNLOAD Sep 6 01:20:07.223000 audit: BPF prog-id=156 op=UNLOAD Sep 6 01:20:07.223000 audit[4044]: AVC avc: denied { bpf } for pid=4044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.223000 audit[4044]: AVC avc: denied { bpf } for pid=4044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.223000 audit[4044]: AVC avc: denied { bpf } for pid=4044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.223000 audit[4044]: AVC avc: denied { perfmon } for pid=4044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.223000 audit[4044]: AVC avc: denied { perfmon } for pid=4044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.223000 audit[4044]: AVC avc: denied { perfmon } for pid=4044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.223000 audit[4044]: AVC avc: denied { perfmon } for pid=4044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.223000 audit[4044]: AVC avc: denied { perfmon } for pid=4044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.223000 audit[4044]: AVC avc: denied { bpf } for pid=4044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.223000 audit[4044]: AVC avc: denied { bpf } for pid=4044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.223000 audit: BPF prog-id=158 op=LOAD Sep 6 01:20:07.223000 audit[4044]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4000 pid=4044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:07.223000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261646664616438626532343236633336636232383937623361653961 Sep 6 01:20:07.241597 env[1448]: time="2025-09-06T01:20:07.241535936Z" level=info msg="CreateContainer within sandbox \"57b38ba72db77ae2c64387165895b52cd886fc7cde0e92e0e45f6c728ab7132f\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"4da71e002741dfe8ca21ff1e5bf8e7e9e1d90aad46a1bd447dcd8e3c5d2b4c30\"" Sep 6 01:20:07.246335 env[1448]: time="2025-09-06T01:20:07.246293257Z" level=info msg="StartContainer for \"4da71e002741dfe8ca21ff1e5bf8e7e9e1d90aad46a1bd447dcd8e3c5d2b4c30\"" Sep 6 01:20:07.252106 env[1448]: time="2025-09-06T01:20:07.252046378Z" level=info msg="StartContainer for \"badfdad8be2426c36cb2897b3ae9ad502a93aabc48c54cf773c0b7e82eaa774e\" returns successfully" Sep 6 01:20:07.263000 audit[4056]: AVC avc: denied { getattr } for pid=4056 comm="coredns" path="cgroup:[4026532645]" dev="nsfs" ino=4026532645 scontext=system_u:system_r:svirt_lxc_net_t:s0:c575,c811 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 6 01:20:07.263000 audit[4056]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056948 a2=40000da578 a3=0 items=0 ppid=4000 pid=4056 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c575,c811 key=(null) Sep 6 01:20:07.263000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 6 01:20:07.269993 systemd[1]: Started cri-containerd-4da71e002741dfe8ca21ff1e5bf8e7e9e1d90aad46a1bd447dcd8e3c5d2b4c30.scope. Sep 6 01:20:07.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.304000 audit: BPF prog-id=159 op=LOAD Sep 6 01:20:07.305000 audit[4081]: AVC avc: denied { bpf } for pid=4081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.305000 audit[4081]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3742 pid=4081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:07.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464613731653030323734316466653863613231666631653562663865 Sep 6 01:20:07.305000 audit[4081]: AVC avc: denied { perfmon } for pid=4081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.305000 audit[4081]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3742 pid=4081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:07.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464613731653030323734316466653863613231666631653562663865 Sep 6 01:20:07.305000 audit[4081]: AVC avc: denied { bpf } for pid=4081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.305000 audit[4081]: AVC avc: denied { bpf } for pid=4081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.305000 audit[4081]: AVC avc: denied { bpf } for pid=4081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.305000 audit[4081]: AVC avc: denied { perfmon } for pid=4081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.305000 audit[4081]: AVC avc: denied { perfmon } for pid=4081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.305000 audit[4081]: AVC avc: denied { perfmon } for pid=4081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.305000 audit[4081]: AVC avc: denied { perfmon } for pid=4081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.305000 audit[4081]: AVC avc: denied { perfmon } for pid=4081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.305000 audit[4081]: AVC avc: denied { bpf } for pid=4081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.305000 audit[4081]: AVC avc: denied { bpf } for pid=4081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.305000 audit: BPF prog-id=160 op=LOAD Sep 6 01:20:07.305000 audit[4081]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3742 pid=4081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:07.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464613731653030323734316466653863613231666631653562663865 Sep 6 01:20:07.305000 audit[4081]: AVC avc: denied { bpf } for pid=4081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.305000 audit[4081]: AVC avc: denied { bpf } for pid=4081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.305000 audit[4081]: AVC avc: denied { perfmon } for pid=4081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.305000 audit[4081]: AVC avc: denied { perfmon } for pid=4081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.305000 audit[4081]: AVC avc: denied { perfmon } for pid=4081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.305000 audit[4081]: AVC avc: denied { perfmon } for pid=4081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.305000 audit[4081]: AVC avc: denied { perfmon } for pid=4081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.305000 audit[4081]: AVC avc: denied { bpf } for pid=4081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.305000 audit[4081]: AVC avc: denied { bpf } for pid=4081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.305000 audit: BPF prog-id=161 op=LOAD Sep 6 01:20:07.305000 audit[4081]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3742 pid=4081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:07.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464613731653030323734316466653863613231666631653562663865 Sep 6 01:20:07.305000 audit: BPF prog-id=161 op=UNLOAD Sep 6 01:20:07.305000 audit: BPF prog-id=160 op=UNLOAD Sep 6 01:20:07.305000 audit[4081]: AVC avc: denied { bpf } for pid=4081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.305000 audit[4081]: AVC avc: denied { bpf } for pid=4081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.305000 audit[4081]: AVC avc: denied { bpf } for pid=4081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.305000 audit[4081]: AVC avc: denied { perfmon } for pid=4081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.305000 audit[4081]: AVC avc: denied { perfmon } for pid=4081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.305000 audit[4081]: AVC avc: denied { perfmon } for pid=4081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.305000 audit[4081]: AVC avc: denied { perfmon } for pid=4081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.305000 audit[4081]: AVC avc: denied { perfmon } for pid=4081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.305000 audit[4081]: AVC avc: denied { bpf } for pid=4081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.305000 audit[4081]: AVC avc: denied { bpf } for pid=4081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:07.305000 audit: BPF prog-id=162 op=LOAD Sep 6 01:20:07.305000 audit[4081]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3742 pid=4081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:07.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464613731653030323734316466653863613231666631653562663865 Sep 6 01:20:07.334637 env[1448]: time="2025-09-06T01:20:07.334573832Z" level=info msg="StartContainer for \"4da71e002741dfe8ca21ff1e5bf8e7e9e1d90aad46a1bd447dcd8e3c5d2b4c30\" returns successfully" Sep 6 01:20:07.342000 audit[4094]: AVC avc: denied { search } for pid=4094 comm="nginx" name="crypto" dev="proc" ino=26751 scontext=system_u:system_r:svirt_lxc_net_t:s0:c683,c903 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Sep 6 01:20:07.348481 kernel: kauditd_printk_skb: 356 callbacks suppressed Sep 6 01:20:07.348604 kernel: audit: type=1400 audit(1757121607.342:1083): avc: denied { search } for pid=4094 comm="nginx" name="crypto" dev="proc" ino=26751 scontext=system_u:system_r:svirt_lxc_net_t:s0:c683,c903 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Sep 6 01:20:07.342000 audit[4094]: SYSCALL arch=c00000b7 syscall=56 success=no exit=-13 a0=ffffffffffffff9c a1=ffffbc47f958 a2=0 a3=0 items=0 ppid=3742 pid=4094 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c683,c903 key=(null) Sep 6 01:20:07.403177 kernel: audit: type=1300 audit(1757121607.342:1083): arch=c00000b7 syscall=56 success=no exit=-13 a0=ffffffffffffff9c a1=ffffbc47f958 a2=0 a3=0 items=0 ppid=3742 pid=4094 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c683,c903 key=(null) Sep 6 01:20:07.342000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Sep 6 01:20:07.415778 kernel: audit: type=1327 audit(1757121607.342:1083): proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Sep 6 01:20:07.520120 kubelet[2427]: I0906 01:20:07.519928 2427 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 6 01:20:07.556000 audit[4116]: NETFILTER_CFG table=filter:104 family=2 entries=21 op=nft_register_rule pid=4116 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:20:07.556000 audit[4116]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffce331e00 a2=0 a3=1 items=0 ppid=2565 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:07.600332 kernel: audit: type=1325 audit(1757121607.556:1084): table=filter:104 family=2 entries=21 op=nft_register_rule pid=4116 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:20:07.600473 kernel: audit: type=1300 audit(1757121607.556:1084): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffce331e00 a2=0 a3=1 items=0 ppid=2565 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:07.601204 env[1448]: time="2025-09-06T01:20:07.601159479Z" level=info msg="StopPodSandbox for \"626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79\"" Sep 6 01:20:07.601507 env[1448]: time="2025-09-06T01:20:07.601487039Z" level=info msg="StopPodSandbox for \"2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249\"" Sep 6 01:20:07.602110 env[1448]: time="2025-09-06T01:20:07.602070119Z" level=info msg="StopPodSandbox for \"cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995\"" Sep 6 01:20:07.556000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:20:07.619466 kernel: audit: type=1327 audit(1757121607.556:1084): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:20:07.604000 audit[4116]: NETFILTER_CFG table=nat:105 family=2 entries=19 op=nft_register_chain pid=4116 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:20:07.643663 kernel: audit: type=1325 audit(1757121607.604:1085): table=nat:105 family=2 entries=19 op=nft_register_chain pid=4116 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:20:07.604000 audit[4116]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffce331e00 a2=0 a3=1 items=0 ppid=2565 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:07.674993 kernel: audit: type=1300 audit(1757121607.604:1085): arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffce331e00 a2=0 a3=1 items=0 ppid=2565 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:07.682291 kernel: audit: type=1327 audit(1757121607.604:1085): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:20:07.604000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:20:07.681845 systemd-networkd[1603]: cali1e8fa5a7ac3: Gained IPv6LL Sep 6 01:20:07.858000 audit[4188]: NETFILTER_CFG table=filter:106 family=2 entries=20 op=nft_register_rule pid=4188 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:20:07.863934 kubelet[2427]: I0906 01:20:07.862414 2427 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-lg85q" podStartSLOduration=45.862395764 podStartE2EDuration="45.862395764s" podCreationTimestamp="2025-09-06 01:19:22 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 01:20:07.83663464 +0000 UTC m=+50.471757495" watchObservedRunningTime="2025-09-06 01:20:07.862395764 +0000 UTC m=+50.497518579" Sep 6 01:20:07.858000 audit[4188]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=fffff93aa580 a2=0 a3=1 items=0 ppid=2565 pid=4188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:07.858000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:20:07.889812 kernel: audit: type=1325 audit(1757121607.858:1086): table=filter:106 family=2 entries=20 op=nft_register_rule pid=4188 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:20:07.891671 env[1448]: 2025-09-06 01:20:07.748 [INFO][4143] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" Sep 6 01:20:07.891671 env[1448]: 2025-09-06 01:20:07.748 [INFO][4143] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" iface="eth0" netns="/var/run/netns/cni-8d385b56-b5aa-afd7-b255-dd759546991a" Sep 6 01:20:07.891671 env[1448]: 2025-09-06 01:20:07.748 [INFO][4143] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" iface="eth0" netns="/var/run/netns/cni-8d385b56-b5aa-afd7-b255-dd759546991a" Sep 6 01:20:07.891671 env[1448]: 2025-09-06 01:20:07.748 [INFO][4143] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" iface="eth0" netns="/var/run/netns/cni-8d385b56-b5aa-afd7-b255-dd759546991a" Sep 6 01:20:07.891671 env[1448]: 2025-09-06 01:20:07.748 [INFO][4143] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" Sep 6 01:20:07.891671 env[1448]: 2025-09-06 01:20:07.748 [INFO][4143] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" Sep 6 01:20:07.891671 env[1448]: 2025-09-06 01:20:07.844 [INFO][4162] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" HandleID="k8s-pod-network.cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--hhptn-eth0" Sep 6 01:20:07.891671 env[1448]: 2025-09-06 01:20:07.847 [INFO][4162] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:07.891671 env[1448]: 2025-09-06 01:20:07.847 [INFO][4162] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:07.891671 env[1448]: 2025-09-06 01:20:07.861 [WARNING][4162] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" HandleID="k8s-pod-network.cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--hhptn-eth0" Sep 6 01:20:07.891671 env[1448]: 2025-09-06 01:20:07.861 [INFO][4162] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" HandleID="k8s-pod-network.cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--hhptn-eth0" Sep 6 01:20:07.891671 env[1448]: 2025-09-06 01:20:07.885 [INFO][4162] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:07.891671 env[1448]: 2025-09-06 01:20:07.888 [INFO][4143] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" Sep 6 01:20:07.891671 env[1448]: time="2025-09-06T01:20:07.891506769Z" level=info msg="TearDown network for sandbox \"cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995\" successfully" Sep 6 01:20:07.891671 env[1448]: time="2025-09-06T01:20:07.891537209Z" level=info msg="StopPodSandbox for \"cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995\" returns successfully" Sep 6 01:20:07.892685 env[1448]: time="2025-09-06T01:20:07.892649689Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-hhptn,Uid:a5d30df2-fe35-44e2-8d6b-667a4a2edd11,Namespace:kube-system,Attempt:1,}" Sep 6 01:20:07.916000 audit[4188]: NETFILTER_CFG table=nat:107 family=2 entries=14 op=nft_register_rule pid=4188 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:20:07.916000 audit[4188]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=fffff93aa580 a2=0 a3=1 items=0 ppid=2565 pid=4188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:07.916000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:20:07.918085 env[1448]: 2025-09-06 01:20:07.768 [INFO][4149] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" Sep 6 01:20:07.918085 env[1448]: 2025-09-06 01:20:07.768 [INFO][4149] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" iface="eth0" netns="/var/run/netns/cni-c4216159-bdbc-25b7-ba9f-2017ced0b115" Sep 6 01:20:07.918085 env[1448]: 2025-09-06 01:20:07.768 [INFO][4149] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" iface="eth0" netns="/var/run/netns/cni-c4216159-bdbc-25b7-ba9f-2017ced0b115" Sep 6 01:20:07.918085 env[1448]: 2025-09-06 01:20:07.769 [INFO][4149] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" iface="eth0" netns="/var/run/netns/cni-c4216159-bdbc-25b7-ba9f-2017ced0b115" Sep 6 01:20:07.918085 env[1448]: 2025-09-06 01:20:07.769 [INFO][4149] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" Sep 6 01:20:07.918085 env[1448]: 2025-09-06 01:20:07.769 [INFO][4149] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" Sep 6 01:20:07.918085 env[1448]: 2025-09-06 01:20:07.854 [INFO][4170] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" HandleID="k8s-pod-network.626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-goldmane--54d579b49d--7r8jm-eth0" Sep 6 01:20:07.918085 env[1448]: 2025-09-06 01:20:07.854 [INFO][4170] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:07.918085 env[1448]: 2025-09-06 01:20:07.886 [INFO][4170] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:07.918085 env[1448]: 2025-09-06 01:20:07.910 [WARNING][4170] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" HandleID="k8s-pod-network.626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-goldmane--54d579b49d--7r8jm-eth0" Sep 6 01:20:07.918085 env[1448]: 2025-09-06 01:20:07.910 [INFO][4170] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" HandleID="k8s-pod-network.626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-goldmane--54d579b49d--7r8jm-eth0" Sep 6 01:20:07.918085 env[1448]: 2025-09-06 01:20:07.913 [INFO][4170] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:07.918085 env[1448]: 2025-09-06 01:20:07.916 [INFO][4149] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" Sep 6 01:20:07.918844 env[1448]: time="2025-09-06T01:20:07.918808854Z" level=info msg="TearDown network for sandbox \"626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79\" successfully" Sep 6 01:20:07.918950 env[1448]: time="2025-09-06T01:20:07.918933134Z" level=info msg="StopPodSandbox for \"626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79\" returns successfully" Sep 6 01:20:07.920484 env[1448]: time="2025-09-06T01:20:07.920450174Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-7r8jm,Uid:a953d4fa-4bab-4981-889d-f180a79cf853,Namespace:calico-system,Attempt:1,}" Sep 6 01:20:07.931539 env[1448]: 2025-09-06 01:20:07.799 [INFO][4154] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" Sep 6 01:20:07.931539 env[1448]: 2025-09-06 01:20:07.799 [INFO][4154] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" iface="eth0" netns="/var/run/netns/cni-3d7750fb-fff7-cfcf-2702-8575438081f6" Sep 6 01:20:07.931539 env[1448]: 2025-09-06 01:20:07.799 [INFO][4154] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" iface="eth0" netns="/var/run/netns/cni-3d7750fb-fff7-cfcf-2702-8575438081f6" Sep 6 01:20:07.931539 env[1448]: 2025-09-06 01:20:07.799 [INFO][4154] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" iface="eth0" netns="/var/run/netns/cni-3d7750fb-fff7-cfcf-2702-8575438081f6" Sep 6 01:20:07.931539 env[1448]: 2025-09-06 01:20:07.799 [INFO][4154] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" Sep 6 01:20:07.931539 env[1448]: 2025-09-06 01:20:07.799 [INFO][4154] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" Sep 6 01:20:07.931539 env[1448]: 2025-09-06 01:20:07.905 [INFO][4181] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" HandleID="k8s-pod-network.2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--kube--controllers--5ddcbb448c--gvtjx-eth0" Sep 6 01:20:07.931539 env[1448]: 2025-09-06 01:20:07.905 [INFO][4181] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:07.931539 env[1448]: 2025-09-06 01:20:07.914 [INFO][4181] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:07.931539 env[1448]: 2025-09-06 01:20:07.925 [WARNING][4181] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" HandleID="k8s-pod-network.2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--kube--controllers--5ddcbb448c--gvtjx-eth0" Sep 6 01:20:07.931539 env[1448]: 2025-09-06 01:20:07.925 [INFO][4181] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" HandleID="k8s-pod-network.2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--kube--controllers--5ddcbb448c--gvtjx-eth0" Sep 6 01:20:07.931539 env[1448]: 2025-09-06 01:20:07.927 [INFO][4181] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:07.931539 env[1448]: 2025-09-06 01:20:07.929 [INFO][4154] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" Sep 6 01:20:07.932238 env[1448]: time="2025-09-06T01:20:07.932176336Z" level=info msg="TearDown network for sandbox \"2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249\" successfully" Sep 6 01:20:07.932613 env[1448]: time="2025-09-06T01:20:07.932589816Z" level=info msg="StopPodSandbox for \"2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249\" returns successfully" Sep 6 01:20:07.933396 env[1448]: time="2025-09-06T01:20:07.933368576Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5ddcbb448c-gvtjx,Uid:91cf3a26-dfb6-4f8b-b9c3-46758ab8c6b5,Namespace:calico-system,Attempt:1,}" Sep 6 01:20:08.015000 audit[4204]: AVC avc: denied { bpf } for pid=4204 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.015000 audit[4204]: AVC avc: denied { bpf } for pid=4204 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.015000 audit[4204]: AVC avc: denied { perfmon } for pid=4204 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.015000 audit[4204]: AVC avc: denied { perfmon } for pid=4204 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.015000 audit[4204]: AVC avc: denied { perfmon } for pid=4204 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.015000 audit[4204]: AVC avc: denied { perfmon } for pid=4204 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.015000 audit[4204]: AVC avc: denied { perfmon } for pid=4204 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.015000 audit[4204]: AVC avc: denied { bpf } for pid=4204 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.015000 audit[4204]: AVC avc: denied { bpf } for pid=4204 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.015000 audit: BPF prog-id=163 op=LOAD Sep 6 01:20:08.015000 audit[4204]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff2a05788 a2=98 a3=fffff2a05778 items=0 ppid=4164 pid=4204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.015000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 6 01:20:08.016000 audit: BPF prog-id=163 op=UNLOAD Sep 6 01:20:08.016000 audit[4204]: AVC avc: denied { bpf } for pid=4204 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.016000 audit[4204]: AVC avc: denied { bpf } for pid=4204 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.016000 audit[4204]: AVC avc: denied { perfmon } for pid=4204 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.016000 audit[4204]: AVC avc: denied { perfmon } for pid=4204 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.016000 audit[4204]: AVC avc: denied { perfmon } for pid=4204 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.016000 audit[4204]: AVC avc: denied { perfmon } for pid=4204 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.016000 audit[4204]: AVC avc: denied { perfmon } for pid=4204 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.016000 audit[4204]: AVC avc: denied { bpf } for pid=4204 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.016000 audit[4204]: AVC avc: denied { bpf } for pid=4204 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.016000 audit: BPF prog-id=164 op=LOAD Sep 6 01:20:08.016000 audit[4204]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff2a05638 a2=74 a3=95 items=0 ppid=4164 pid=4204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.016000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 6 01:20:08.016000 audit: BPF prog-id=164 op=UNLOAD Sep 6 01:20:08.016000 audit[4204]: AVC avc: denied { bpf } for pid=4204 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.016000 audit[4204]: AVC avc: denied { bpf } for pid=4204 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.016000 audit[4204]: AVC avc: denied { perfmon } for pid=4204 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.016000 audit[4204]: AVC avc: denied { perfmon } for pid=4204 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.016000 audit[4204]: AVC avc: denied { perfmon } for pid=4204 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.016000 audit[4204]: AVC avc: denied { perfmon } for pid=4204 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.016000 audit[4204]: AVC avc: denied { perfmon } for pid=4204 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.016000 audit[4204]: AVC avc: denied { bpf } for pid=4204 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.016000 audit[4204]: AVC avc: denied { bpf } for pid=4204 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.016000 audit: BPF prog-id=165 op=LOAD Sep 6 01:20:08.016000 audit[4204]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff2a05668 a2=40 a3=fffff2a05698 items=0 ppid=4164 pid=4204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.016000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 6 01:20:08.016000 audit: BPF prog-id=165 op=UNLOAD Sep 6 01:20:08.016000 audit[4204]: AVC avc: denied { perfmon } for pid=4204 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.016000 audit[4204]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=fffff2a05780 a2=50 a3=0 items=0 ppid=4164 pid=4204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.016000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 6 01:20:08.017000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.017000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.017000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.017000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.017000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.017000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.017000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.017000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.017000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.017000 audit: BPF prog-id=166 op=LOAD Sep 6 01:20:08.017000 audit[4205]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff8778f28 a2=98 a3=fffff8778f18 items=0 ppid=4164 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.017000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:20:08.017000 audit: BPF prog-id=166 op=UNLOAD Sep 6 01:20:08.018000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.018000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.018000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.018000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.018000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.018000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.018000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.018000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.018000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.018000 audit: BPF prog-id=167 op=LOAD Sep 6 01:20:08.018000 audit[4205]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff8778bb8 a2=74 a3=95 items=0 ppid=4164 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.018000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:20:08.018000 audit: BPF prog-id=167 op=UNLOAD Sep 6 01:20:08.018000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.018000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.018000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.018000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.018000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.018000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.018000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.018000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.018000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.018000 audit: BPF prog-id=168 op=LOAD Sep 6 01:20:08.018000 audit[4205]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff8778c18 a2=94 a3=2 items=0 ppid=4164 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.018000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:20:08.018000 audit: BPF prog-id=168 op=UNLOAD Sep 6 01:20:08.072795 systemd[1]: run-netns-cni\x2dc4216159\x2dbdbc\x2d25b7\x2dba9f\x2d2017ced0b115.mount: Deactivated successfully. Sep 6 01:20:08.072892 systemd[1]: run-netns-cni\x2d8d385b56\x2db5aa\x2dafd7\x2db255\x2ddd759546991a.mount: Deactivated successfully. Sep 6 01:20:08.072940 systemd[1]: run-netns-cni\x2d3d7750fb\x2dfff7\x2dcfcf\x2d2702\x2d8575438081f6.mount: Deactivated successfully. Sep 6 01:20:08.282600 systemd-networkd[1603]: calib861c1a8568: Link UP Sep 6 01:20:08.295875 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calib861c1a8568: link becomes ready Sep 6 01:20:08.294018 systemd-networkd[1603]: calib861c1a8568: Gained carrier Sep 6 01:20:08.316234 env[1448]: 2025-09-06 01:20:08.117 [INFO][4206] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--hhptn-eth0 coredns-668d6bf9bc- kube-system a5d30df2-fe35-44e2-8d6b-667a4a2edd11 927 0 2025-09-06 01:19:22 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.8-n-f2ea6194e4 coredns-668d6bf9bc-hhptn eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calib861c1a8568 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="1d154e0e505bd19beef4ebc496c6b4566c8fb5104a8ceb716e9fafe8498dd088" Namespace="kube-system" Pod="coredns-668d6bf9bc-hhptn" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--hhptn-" Sep 6 01:20:08.316234 env[1448]: 2025-09-06 01:20:08.118 [INFO][4206] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="1d154e0e505bd19beef4ebc496c6b4566c8fb5104a8ceb716e9fafe8498dd088" Namespace="kube-system" Pod="coredns-668d6bf9bc-hhptn" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--hhptn-eth0" Sep 6 01:20:08.316234 env[1448]: 2025-09-06 01:20:08.184 [INFO][4241] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="1d154e0e505bd19beef4ebc496c6b4566c8fb5104a8ceb716e9fafe8498dd088" HandleID="k8s-pod-network.1d154e0e505bd19beef4ebc496c6b4566c8fb5104a8ceb716e9fafe8498dd088" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--hhptn-eth0" Sep 6 01:20:08.316234 env[1448]: 2025-09-06 01:20:08.184 [INFO][4241] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="1d154e0e505bd19beef4ebc496c6b4566c8fb5104a8ceb716e9fafe8498dd088" HandleID="k8s-pod-network.1d154e0e505bd19beef4ebc496c6b4566c8fb5104a8ceb716e9fafe8498dd088" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--hhptn-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400024aff0), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.8-n-f2ea6194e4", "pod":"coredns-668d6bf9bc-hhptn", "timestamp":"2025-09-06 01:20:08.184511539 +0000 UTC"}, Hostname:"ci-3510.3.8-n-f2ea6194e4", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 01:20:08.316234 env[1448]: 2025-09-06 01:20:08.184 [INFO][4241] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:08.316234 env[1448]: 2025-09-06 01:20:08.186 [INFO][4241] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:08.316234 env[1448]: 2025-09-06 01:20:08.187 [INFO][4241] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-f2ea6194e4' Sep 6 01:20:08.316234 env[1448]: 2025-09-06 01:20:08.219 [INFO][4241] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.1d154e0e505bd19beef4ebc496c6b4566c8fb5104a8ceb716e9fafe8498dd088" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:08.316234 env[1448]: 2025-09-06 01:20:08.232 [INFO][4241] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:08.316234 env[1448]: 2025-09-06 01:20:08.249 [INFO][4241] ipam/ipam.go 511: Trying affinity for 192.168.5.128/26 host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:08.316234 env[1448]: 2025-09-06 01:20:08.252 [INFO][4241] ipam/ipam.go 158: Attempting to load block cidr=192.168.5.128/26 host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:08.316234 env[1448]: 2025-09-06 01:20:08.255 [INFO][4241] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.5.128/26 host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:08.316234 env[1448]: 2025-09-06 01:20:08.255 [INFO][4241] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.5.128/26 handle="k8s-pod-network.1d154e0e505bd19beef4ebc496c6b4566c8fb5104a8ceb716e9fafe8498dd088" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:08.316234 env[1448]: 2025-09-06 01:20:08.261 [INFO][4241] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.1d154e0e505bd19beef4ebc496c6b4566c8fb5104a8ceb716e9fafe8498dd088 Sep 6 01:20:08.316234 env[1448]: 2025-09-06 01:20:08.269 [INFO][4241] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.5.128/26 handle="k8s-pod-network.1d154e0e505bd19beef4ebc496c6b4566c8fb5104a8ceb716e9fafe8498dd088" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:08.316234 env[1448]: 2025-09-06 01:20:08.277 [INFO][4241] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.5.132/26] block=192.168.5.128/26 handle="k8s-pod-network.1d154e0e505bd19beef4ebc496c6b4566c8fb5104a8ceb716e9fafe8498dd088" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:08.316234 env[1448]: 2025-09-06 01:20:08.278 [INFO][4241] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.5.132/26] handle="k8s-pod-network.1d154e0e505bd19beef4ebc496c6b4566c8fb5104a8ceb716e9fafe8498dd088" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:08.316234 env[1448]: 2025-09-06 01:20:08.278 [INFO][4241] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:08.316234 env[1448]: 2025-09-06 01:20:08.278 [INFO][4241] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.5.132/26] IPv6=[] ContainerID="1d154e0e505bd19beef4ebc496c6b4566c8fb5104a8ceb716e9fafe8498dd088" HandleID="k8s-pod-network.1d154e0e505bd19beef4ebc496c6b4566c8fb5104a8ceb716e9fafe8498dd088" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--hhptn-eth0" Sep 6 01:20:08.316915 env[1448]: 2025-09-06 01:20:08.279 [INFO][4206] cni-plugin/k8s.go 418: Populated endpoint ContainerID="1d154e0e505bd19beef4ebc496c6b4566c8fb5104a8ceb716e9fafe8498dd088" Namespace="kube-system" Pod="coredns-668d6bf9bc-hhptn" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--hhptn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--hhptn-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"a5d30df2-fe35-44e2-8d6b-667a4a2edd11", ResourceVersion:"927", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 19, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-f2ea6194e4", ContainerID:"", Pod:"coredns-668d6bf9bc-hhptn", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.5.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib861c1a8568", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:20:08.316915 env[1448]: 2025-09-06 01:20:08.280 [INFO][4206] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.5.132/32] ContainerID="1d154e0e505bd19beef4ebc496c6b4566c8fb5104a8ceb716e9fafe8498dd088" Namespace="kube-system" Pod="coredns-668d6bf9bc-hhptn" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--hhptn-eth0" Sep 6 01:20:08.316915 env[1448]: 2025-09-06 01:20:08.280 [INFO][4206] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calib861c1a8568 ContainerID="1d154e0e505bd19beef4ebc496c6b4566c8fb5104a8ceb716e9fafe8498dd088" Namespace="kube-system" Pod="coredns-668d6bf9bc-hhptn" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--hhptn-eth0" Sep 6 01:20:08.316915 env[1448]: 2025-09-06 01:20:08.282 [INFO][4206] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="1d154e0e505bd19beef4ebc496c6b4566c8fb5104a8ceb716e9fafe8498dd088" Namespace="kube-system" Pod="coredns-668d6bf9bc-hhptn" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--hhptn-eth0" Sep 6 01:20:08.316915 env[1448]: 2025-09-06 01:20:08.291 [INFO][4206] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="1d154e0e505bd19beef4ebc496c6b4566c8fb5104a8ceb716e9fafe8498dd088" Namespace="kube-system" Pod="coredns-668d6bf9bc-hhptn" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--hhptn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--hhptn-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"a5d30df2-fe35-44e2-8d6b-667a4a2edd11", ResourceVersion:"927", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 19, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-f2ea6194e4", ContainerID:"1d154e0e505bd19beef4ebc496c6b4566c8fb5104a8ceb716e9fafe8498dd088", Pod:"coredns-668d6bf9bc-hhptn", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.5.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib861c1a8568", MAC:"fa:d8:5b:df:63:f1", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:20:08.316915 env[1448]: 2025-09-06 01:20:08.313 [INFO][4206] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="1d154e0e505bd19beef4ebc496c6b4566c8fb5104a8ceb716e9fafe8498dd088" Namespace="kube-system" Pod="coredns-668d6bf9bc-hhptn" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--hhptn-eth0" Sep 6 01:20:08.356477 env[1448]: time="2025-09-06T01:20:08.356398929Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:20:08.357091 env[1448]: time="2025-09-06T01:20:08.357055889Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:20:08.357215 env[1448]: time="2025-09-06T01:20:08.357193049Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:20:08.357477 env[1448]: time="2025-09-06T01:20:08.357446769Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1d154e0e505bd19beef4ebc496c6b4566c8fb5104a8ceb716e9fafe8498dd088 pid=4297 runtime=io.containerd.runc.v2 Sep 6 01:20:08.379941 systemd[1]: Started cri-containerd-1d154e0e505bd19beef4ebc496c6b4566c8fb5104a8ceb716e9fafe8498dd088.scope. Sep 6 01:20:08.382274 systemd[1]: run-containerd-runc-k8s.io-1d154e0e505bd19beef4ebc496c6b4566c8fb5104a8ceb716e9fafe8498dd088-runc.HJ0Zi9.mount: Deactivated successfully. Sep 6 01:20:08.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.408000 audit: BPF prog-id=169 op=LOAD Sep 6 01:20:08.409000 audit[4306]: AVC avc: denied { bpf } for pid=4306 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.409000 audit[4306]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4297 pid=4306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164313534653065353035626431396265656634656263343936633662 Sep 6 01:20:08.409000 audit[4306]: AVC avc: denied { perfmon } for pid=4306 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.409000 audit[4306]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4297 pid=4306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164313534653065353035626431396265656634656263343936633662 Sep 6 01:20:08.409000 audit[4306]: AVC avc: denied { bpf } for pid=4306 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.409000 audit[4306]: AVC avc: denied { bpf } for pid=4306 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.409000 audit[4306]: AVC avc: denied { bpf } for pid=4306 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.409000 audit[4306]: AVC avc: denied { perfmon } for pid=4306 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.409000 audit[4306]: AVC avc: denied { perfmon } for pid=4306 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.409000 audit[4306]: AVC avc: denied { perfmon } for pid=4306 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.409000 audit[4306]: AVC avc: denied { perfmon } for pid=4306 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.409000 audit[4306]: AVC avc: denied { perfmon } for pid=4306 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.409000 audit[4306]: AVC avc: denied { bpf } for pid=4306 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.409000 audit[4306]: AVC avc: denied { bpf } for pid=4306 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.409000 audit: BPF prog-id=170 op=LOAD Sep 6 01:20:08.409000 audit[4306]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4297 pid=4306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164313534653065353035626431396265656634656263343936633662 Sep 6 01:20:08.409000 audit[4306]: AVC avc: denied { bpf } for pid=4306 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.409000 audit[4306]: AVC avc: denied { bpf } for pid=4306 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.409000 audit[4306]: AVC avc: denied { perfmon } for pid=4306 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.409000 audit[4306]: AVC avc: denied { perfmon } for pid=4306 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.409000 audit[4306]: AVC avc: denied { perfmon } for pid=4306 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.409000 audit[4306]: AVC avc: denied { perfmon } for pid=4306 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.409000 audit[4306]: AVC avc: denied { perfmon } for pid=4306 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.409000 audit[4306]: AVC avc: denied { bpf } for pid=4306 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.409000 audit[4306]: AVC avc: denied { bpf } for pid=4306 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.409000 audit: BPF prog-id=171 op=LOAD Sep 6 01:20:08.409000 audit[4306]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4297 pid=4306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164313534653065353035626431396265656634656263343936633662 Sep 6 01:20:08.409000 audit: BPF prog-id=171 op=UNLOAD Sep 6 01:20:08.409000 audit: BPF prog-id=170 op=UNLOAD Sep 6 01:20:08.409000 audit[4306]: AVC avc: denied { bpf } for pid=4306 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.409000 audit[4306]: AVC avc: denied { bpf } for pid=4306 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.409000 audit[4306]: AVC avc: denied { bpf } for pid=4306 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.409000 audit[4306]: AVC avc: denied { perfmon } for pid=4306 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.409000 audit[4306]: AVC avc: denied { perfmon } for pid=4306 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.409000 audit[4306]: AVC avc: denied { perfmon } for pid=4306 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.409000 audit[4306]: AVC avc: denied { perfmon } for pid=4306 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.409000 audit[4306]: AVC avc: denied { perfmon } for pid=4306 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.409000 audit[4306]: AVC avc: denied { bpf } for pid=4306 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.409000 audit[4306]: AVC avc: denied { bpf } for pid=4306 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.409000 audit: BPF prog-id=172 op=LOAD Sep 6 01:20:08.409000 audit[4306]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4297 pid=4306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164313534653065353035626431396265656634656263343936633662 Sep 6 01:20:08.421965 systemd-networkd[1603]: calib462757987d: Link UP Sep 6 01:20:08.429792 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calib462757987d: link becomes ready Sep 6 01:20:08.430135 systemd-networkd[1603]: calib462757987d: Gained carrier Sep 6 01:20:08.452528 env[1448]: 2025-09-06 01:20:08.157 [INFO][4215] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--f2ea6194e4-k8s-calico--kube--controllers--5ddcbb448c--gvtjx-eth0 calico-kube-controllers-5ddcbb448c- calico-system 91cf3a26-dfb6-4f8b-b9c3-46758ab8c6b5 929 0 2025-09-06 01:19:42 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:5ddcbb448c projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ci-3510.3.8-n-f2ea6194e4 calico-kube-controllers-5ddcbb448c-gvtjx eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calib462757987d [] [] }} ContainerID="0c84ce2bba4634f661bb831634c5438a140bc8b3c29a12b1855a78c74340c325" Namespace="calico-system" Pod="calico-kube-controllers-5ddcbb448c-gvtjx" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-calico--kube--controllers--5ddcbb448c--gvtjx-" Sep 6 01:20:08.452528 env[1448]: 2025-09-06 01:20:08.157 [INFO][4215] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="0c84ce2bba4634f661bb831634c5438a140bc8b3c29a12b1855a78c74340c325" Namespace="calico-system" Pod="calico-kube-controllers-5ddcbb448c-gvtjx" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-calico--kube--controllers--5ddcbb448c--gvtjx-eth0" Sep 6 01:20:08.452528 env[1448]: 2025-09-06 01:20:08.240 [INFO][4257] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="0c84ce2bba4634f661bb831634c5438a140bc8b3c29a12b1855a78c74340c325" HandleID="k8s-pod-network.0c84ce2bba4634f661bb831634c5438a140bc8b3c29a12b1855a78c74340c325" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--kube--controllers--5ddcbb448c--gvtjx-eth0" Sep 6 01:20:08.452528 env[1448]: 2025-09-06 01:20:08.240 [INFO][4257] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="0c84ce2bba4634f661bb831634c5438a140bc8b3c29a12b1855a78c74340c325" HandleID="k8s-pod-network.0c84ce2bba4634f661bb831634c5438a140bc8b3c29a12b1855a78c74340c325" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--kube--controllers--5ddcbb448c--gvtjx-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d3640), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-f2ea6194e4", "pod":"calico-kube-controllers-5ddcbb448c-gvtjx", "timestamp":"2025-09-06 01:20:08.240129989 +0000 UTC"}, Hostname:"ci-3510.3.8-n-f2ea6194e4", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 01:20:08.452528 env[1448]: 2025-09-06 01:20:08.240 [INFO][4257] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:08.452528 env[1448]: 2025-09-06 01:20:08.278 [INFO][4257] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:08.452528 env[1448]: 2025-09-06 01:20:08.278 [INFO][4257] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-f2ea6194e4' Sep 6 01:20:08.452528 env[1448]: 2025-09-06 01:20:08.317 [INFO][4257] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.0c84ce2bba4634f661bb831634c5438a140bc8b3c29a12b1855a78c74340c325" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:08.452528 env[1448]: 2025-09-06 01:20:08.327 [INFO][4257] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:08.452528 env[1448]: 2025-09-06 01:20:08.338 [INFO][4257] ipam/ipam.go 511: Trying affinity for 192.168.5.128/26 host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:08.452528 env[1448]: 2025-09-06 01:20:08.344 [INFO][4257] ipam/ipam.go 158: Attempting to load block cidr=192.168.5.128/26 host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:08.452528 env[1448]: 2025-09-06 01:20:08.351 [INFO][4257] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.5.128/26 host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:08.452528 env[1448]: 2025-09-06 01:20:08.351 [INFO][4257] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.5.128/26 handle="k8s-pod-network.0c84ce2bba4634f661bb831634c5438a140bc8b3c29a12b1855a78c74340c325" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:08.452528 env[1448]: 2025-09-06 01:20:08.355 [INFO][4257] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.0c84ce2bba4634f661bb831634c5438a140bc8b3c29a12b1855a78c74340c325 Sep 6 01:20:08.452528 env[1448]: 2025-09-06 01:20:08.369 [INFO][4257] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.5.128/26 handle="k8s-pod-network.0c84ce2bba4634f661bb831634c5438a140bc8b3c29a12b1855a78c74340c325" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:08.452528 env[1448]: 2025-09-06 01:20:08.413 [INFO][4257] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.5.133/26] block=192.168.5.128/26 handle="k8s-pod-network.0c84ce2bba4634f661bb831634c5438a140bc8b3c29a12b1855a78c74340c325" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:08.452528 env[1448]: 2025-09-06 01:20:08.413 [INFO][4257] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.5.133/26] handle="k8s-pod-network.0c84ce2bba4634f661bb831634c5438a140bc8b3c29a12b1855a78c74340c325" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:08.452528 env[1448]: 2025-09-06 01:20:08.413 [INFO][4257] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:08.452528 env[1448]: 2025-09-06 01:20:08.413 [INFO][4257] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.5.133/26] IPv6=[] ContainerID="0c84ce2bba4634f661bb831634c5438a140bc8b3c29a12b1855a78c74340c325" HandleID="k8s-pod-network.0c84ce2bba4634f661bb831634c5438a140bc8b3c29a12b1855a78c74340c325" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--kube--controllers--5ddcbb448c--gvtjx-eth0" Sep 6 01:20:08.453165 env[1448]: 2025-09-06 01:20:08.416 [INFO][4215] cni-plugin/k8s.go 418: Populated endpoint ContainerID="0c84ce2bba4634f661bb831634c5438a140bc8b3c29a12b1855a78c74340c325" Namespace="calico-system" Pod="calico-kube-controllers-5ddcbb448c-gvtjx" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-calico--kube--controllers--5ddcbb448c--gvtjx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--f2ea6194e4-k8s-calico--kube--controllers--5ddcbb448c--gvtjx-eth0", GenerateName:"calico-kube-controllers-5ddcbb448c-", Namespace:"calico-system", SelfLink:"", UID:"91cf3a26-dfb6-4f8b-b9c3-46758ab8c6b5", ResourceVersion:"929", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 19, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5ddcbb448c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-f2ea6194e4", ContainerID:"", Pod:"calico-kube-controllers-5ddcbb448c-gvtjx", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.5.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calib462757987d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:20:08.453165 env[1448]: 2025-09-06 01:20:08.416 [INFO][4215] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.5.133/32] ContainerID="0c84ce2bba4634f661bb831634c5438a140bc8b3c29a12b1855a78c74340c325" Namespace="calico-system" Pod="calico-kube-controllers-5ddcbb448c-gvtjx" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-calico--kube--controllers--5ddcbb448c--gvtjx-eth0" Sep 6 01:20:08.453165 env[1448]: 2025-09-06 01:20:08.416 [INFO][4215] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calib462757987d ContainerID="0c84ce2bba4634f661bb831634c5438a140bc8b3c29a12b1855a78c74340c325" Namespace="calico-system" Pod="calico-kube-controllers-5ddcbb448c-gvtjx" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-calico--kube--controllers--5ddcbb448c--gvtjx-eth0" Sep 6 01:20:08.453165 env[1448]: 2025-09-06 01:20:08.426 [INFO][4215] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="0c84ce2bba4634f661bb831634c5438a140bc8b3c29a12b1855a78c74340c325" Namespace="calico-system" Pod="calico-kube-controllers-5ddcbb448c-gvtjx" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-calico--kube--controllers--5ddcbb448c--gvtjx-eth0" Sep 6 01:20:08.453165 env[1448]: 2025-09-06 01:20:08.427 [INFO][4215] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="0c84ce2bba4634f661bb831634c5438a140bc8b3c29a12b1855a78c74340c325" Namespace="calico-system" Pod="calico-kube-controllers-5ddcbb448c-gvtjx" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-calico--kube--controllers--5ddcbb448c--gvtjx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--f2ea6194e4-k8s-calico--kube--controllers--5ddcbb448c--gvtjx-eth0", GenerateName:"calico-kube-controllers-5ddcbb448c-", Namespace:"calico-system", SelfLink:"", UID:"91cf3a26-dfb6-4f8b-b9c3-46758ab8c6b5", ResourceVersion:"929", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 19, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5ddcbb448c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-f2ea6194e4", ContainerID:"0c84ce2bba4634f661bb831634c5438a140bc8b3c29a12b1855a78c74340c325", Pod:"calico-kube-controllers-5ddcbb448c-gvtjx", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.5.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calib462757987d", MAC:"82:7d:a1:02:a1:34", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:20:08.453165 env[1448]: 2025-09-06 01:20:08.448 [INFO][4215] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="0c84ce2bba4634f661bb831634c5438a140bc8b3c29a12b1855a78c74340c325" Namespace="calico-system" Pod="calico-kube-controllers-5ddcbb448c-gvtjx" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-calico--kube--controllers--5ddcbb448c--gvtjx-eth0" Sep 6 01:20:08.463851 env[1448]: time="2025-09-06T01:20:08.462117187Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-hhptn,Uid:a5d30df2-fe35-44e2-8d6b-667a4a2edd11,Namespace:kube-system,Attempt:1,} returns sandbox id \"1d154e0e505bd19beef4ebc496c6b4566c8fb5104a8ceb716e9fafe8498dd088\"" Sep 6 01:20:08.470155 env[1448]: time="2025-09-06T01:20:08.470106948Z" level=info msg="CreateContainer within sandbox \"1d154e0e505bd19beef4ebc496c6b4566c8fb5104a8ceb716e9fafe8498dd088\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 6 01:20:08.473000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.473000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.473000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.473000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.473000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.473000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.473000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.473000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.473000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.473000 audit: BPF prog-id=173 op=LOAD Sep 6 01:20:08.473000 audit[4205]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff8778bd8 a2=40 a3=fffff8778c08 items=0 ppid=4164 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.473000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:20:08.476000 audit: BPF prog-id=173 op=UNLOAD Sep 6 01:20:08.476000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.476000 audit[4205]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=fffff8778cf0 a2=50 a3=0 items=0 ppid=4164 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.476000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:20:08.490886 env[1448]: time="2025-09-06T01:20:08.489895951Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:20:08.490886 env[1448]: time="2025-09-06T01:20:08.489949351Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:20:08.490886 env[1448]: time="2025-09-06T01:20:08.489959591Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:20:08.490886 env[1448]: time="2025-09-06T01:20:08.490093272Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0c84ce2bba4634f661bb831634c5438a140bc8b3c29a12b1855a78c74340c325 pid=4342 runtime=io.containerd.runc.v2 Sep 6 01:20:08.504890 systemd-networkd[1603]: calicc09d2f30d3: Gained IPv6LL Sep 6 01:20:08.512918 systemd[1]: Started cri-containerd-0c84ce2bba4634f661bb831634c5438a140bc8b3c29a12b1855a78c74340c325.scope. Sep 6 01:20:08.523000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.523000 audit[4205]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff8778c48 a2=28 a3=fffff8778d78 items=0 ppid=4164 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.523000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:20:08.523000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.523000 audit[4205]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff8778c78 a2=28 a3=fffff8778da8 items=0 ppid=4164 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.523000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:20:08.523000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.523000 audit[4205]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff8778b28 a2=28 a3=fffff8778c58 items=0 ppid=4164 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.523000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:20:08.523000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.523000 audit[4205]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff8778c98 a2=28 a3=fffff8778dc8 items=0 ppid=4164 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.523000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:20:08.523000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.523000 audit[4205]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff8778c78 a2=28 a3=fffff8778da8 items=0 ppid=4164 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.523000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:20:08.523000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.523000 audit[4205]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff8778c68 a2=28 a3=fffff8778d98 items=0 ppid=4164 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.523000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:20:08.523000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.523000 audit[4205]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff8778c98 a2=28 a3=fffff8778dc8 items=0 ppid=4164 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.523000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:20:08.523000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.523000 audit[4205]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff8778c78 a2=28 a3=fffff8778da8 items=0 ppid=4164 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.523000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:20:08.523000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.523000 audit[4205]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff8778c98 a2=28 a3=fffff8778dc8 items=0 ppid=4164 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.523000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:20:08.523000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.523000 audit[4205]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff8778c68 a2=28 a3=fffff8778d98 items=0 ppid=4164 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.523000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:20:08.523000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.523000 audit[4205]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff8778ce8 a2=28 a3=fffff8778e28 items=0 ppid=4164 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.523000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:20:08.523000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.523000 audit[4205]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffff8778a20 a2=50 a3=0 items=0 ppid=4164 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.523000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:20:08.523000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.523000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.523000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.523000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.523000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.523000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.523000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.523000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.523000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.523000 audit: BPF prog-id=174 op=LOAD Sep 6 01:20:08.523000 audit[4205]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffff8778a28 a2=94 a3=5 items=0 ppid=4164 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.523000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:20:08.524000 audit: BPF prog-id=174 op=UNLOAD Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffff8778b30 a2=50 a3=0 items=0 ppid=4164 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.524000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=fffff8778c78 a2=4 a3=3 items=0 ppid=4164 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.524000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { confidentiality } for pid=4205 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 01:20:08.524000 audit[4205]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff8778c58 a2=94 a3=6 items=0 ppid=4164 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.524000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { confidentiality } for pid=4205 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 01:20:08.524000 audit[4205]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff8778428 a2=94 a3=83 items=0 ppid=4164 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.524000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.524000 audit[4205]: AVC avc: denied { confidentiality } for pid=4205 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 01:20:08.524000 audit[4205]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff8778428 a2=94 a3=83 items=0 ppid=4164 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.524000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:20:08.534781 systemd-networkd[1603]: calidb512a19e11: Link UP Sep 6 01:20:08.556180 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calidb512a19e11: link becomes ready Sep 6 01:20:08.553072 systemd-networkd[1603]: calidb512a19e11: Gained carrier Sep 6 01:20:08.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.568000 audit: BPF prog-id=175 op=LOAD Sep 6 01:20:08.569000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.569000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4342 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.569000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063383463653262626134363334663636316262383331363334633534 Sep 6 01:20:08.569000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.569000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4342 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.569000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063383463653262626134363334663636316262383331363334633534 Sep 6 01:20:08.569000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.569000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.569000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.569000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.569000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.569000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.569000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.569000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.569000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.569000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.569000 audit: BPF prog-id=176 op=LOAD Sep 6 01:20:08.569000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4342 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.569000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063383463653262626134363334663636316262383331363334633534 Sep 6 01:20:08.570000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.570000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.570000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.570000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.570000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.570000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.570000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.570000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.570000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.570000 audit: BPF prog-id=177 op=LOAD Sep 6 01:20:08.570000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4342 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.570000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063383463653262626134363334663636316262383331363334633534 Sep 6 01:20:08.570000 audit: BPF prog-id=177 op=UNLOAD Sep 6 01:20:08.570000 audit: BPF prog-id=176 op=UNLOAD Sep 6 01:20:08.570000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.570000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.570000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.570000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.570000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.570000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.570000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.570000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.570000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.570000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.570000 audit: BPF prog-id=178 op=LOAD Sep 6 01:20:08.570000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4342 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.570000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063383463653262626134363334663636316262383331363334633534 Sep 6 01:20:08.574472 env[1448]: time="2025-09-06T01:20:08.574389406Z" level=info msg="CreateContainer within sandbox \"1d154e0e505bd19beef4ebc496c6b4566c8fb5104a8ceb716e9fafe8498dd088\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"96a4ea70267c11101baa6a8fba2d8d29f1e2fd3f995111d18eb7de7b55345b65\"" Sep 6 01:20:08.575351 env[1448]: time="2025-09-06T01:20:08.575291166Z" level=info msg="StartContainer for \"96a4ea70267c11101baa6a8fba2d8d29f1e2fd3f995111d18eb7de7b55345b65\"" Sep 6 01:20:08.583230 env[1448]: 2025-09-06 01:20:08.160 [INFO][4224] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--f2ea6194e4-k8s-goldmane--54d579b49d--7r8jm-eth0 goldmane-54d579b49d- calico-system a953d4fa-4bab-4981-889d-f180a79cf853 928 0 2025-09-06 01:19:43 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:54d579b49d projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s ci-3510.3.8-n-f2ea6194e4 goldmane-54d579b49d-7r8jm eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] calidb512a19e11 [] [] }} ContainerID="b4b80c8a7163a67a8c3d4c453c5e04a3b09f91f043b32e426eb9e4d6a90be3d2" Namespace="calico-system" Pod="goldmane-54d579b49d-7r8jm" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-goldmane--54d579b49d--7r8jm-" Sep 6 01:20:08.583230 env[1448]: 2025-09-06 01:20:08.160 [INFO][4224] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b4b80c8a7163a67a8c3d4c453c5e04a3b09f91f043b32e426eb9e4d6a90be3d2" Namespace="calico-system" Pod="goldmane-54d579b49d-7r8jm" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-goldmane--54d579b49d--7r8jm-eth0" Sep 6 01:20:08.583230 env[1448]: 2025-09-06 01:20:08.246 [INFO][4255] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b4b80c8a7163a67a8c3d4c453c5e04a3b09f91f043b32e426eb9e4d6a90be3d2" HandleID="k8s-pod-network.b4b80c8a7163a67a8c3d4c453c5e04a3b09f91f043b32e426eb9e4d6a90be3d2" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-goldmane--54d579b49d--7r8jm-eth0" Sep 6 01:20:08.583230 env[1448]: 2025-09-06 01:20:08.247 [INFO][4255] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b4b80c8a7163a67a8c3d4c453c5e04a3b09f91f043b32e426eb9e4d6a90be3d2" HandleID="k8s-pod-network.b4b80c8a7163a67a8c3d4c453c5e04a3b09f91f043b32e426eb9e4d6a90be3d2" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-goldmane--54d579b49d--7r8jm-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002cb600), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-f2ea6194e4", "pod":"goldmane-54d579b49d-7r8jm", "timestamp":"2025-09-06 01:20:08.24680995 +0000 UTC"}, Hostname:"ci-3510.3.8-n-f2ea6194e4", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 01:20:08.583230 env[1448]: 2025-09-06 01:20:08.247 [INFO][4255] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:08.583230 env[1448]: 2025-09-06 01:20:08.413 [INFO][4255] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:08.583230 env[1448]: 2025-09-06 01:20:08.413 [INFO][4255] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-f2ea6194e4' Sep 6 01:20:08.583230 env[1448]: 2025-09-06 01:20:08.436 [INFO][4255] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.b4b80c8a7163a67a8c3d4c453c5e04a3b09f91f043b32e426eb9e4d6a90be3d2" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:08.583230 env[1448]: 2025-09-06 01:20:08.457 [INFO][4255] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:08.583230 env[1448]: 2025-09-06 01:20:08.472 [INFO][4255] ipam/ipam.go 511: Trying affinity for 192.168.5.128/26 host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:08.583230 env[1448]: 2025-09-06 01:20:08.477 [INFO][4255] ipam/ipam.go 158: Attempting to load block cidr=192.168.5.128/26 host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:08.583230 env[1448]: 2025-09-06 01:20:08.483 [INFO][4255] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.5.128/26 host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:08.583230 env[1448]: 2025-09-06 01:20:08.483 [INFO][4255] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.5.128/26 handle="k8s-pod-network.b4b80c8a7163a67a8c3d4c453c5e04a3b09f91f043b32e426eb9e4d6a90be3d2" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:08.583230 env[1448]: 2025-09-06 01:20:08.486 [INFO][4255] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.b4b80c8a7163a67a8c3d4c453c5e04a3b09f91f043b32e426eb9e4d6a90be3d2 Sep 6 01:20:08.583230 env[1448]: 2025-09-06 01:20:08.492 [INFO][4255] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.5.128/26 handle="k8s-pod-network.b4b80c8a7163a67a8c3d4c453c5e04a3b09f91f043b32e426eb9e4d6a90be3d2" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:08.583230 env[1448]: 2025-09-06 01:20:08.514 [INFO][4255] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.5.134/26] block=192.168.5.128/26 handle="k8s-pod-network.b4b80c8a7163a67a8c3d4c453c5e04a3b09f91f043b32e426eb9e4d6a90be3d2" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:08.583230 env[1448]: 2025-09-06 01:20:08.514 [INFO][4255] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.5.134/26] handle="k8s-pod-network.b4b80c8a7163a67a8c3d4c453c5e04a3b09f91f043b32e426eb9e4d6a90be3d2" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:08.583230 env[1448]: 2025-09-06 01:20:08.514 [INFO][4255] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:08.583230 env[1448]: 2025-09-06 01:20:08.514 [INFO][4255] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.5.134/26] IPv6=[] ContainerID="b4b80c8a7163a67a8c3d4c453c5e04a3b09f91f043b32e426eb9e4d6a90be3d2" HandleID="k8s-pod-network.b4b80c8a7163a67a8c3d4c453c5e04a3b09f91f043b32e426eb9e4d6a90be3d2" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-goldmane--54d579b49d--7r8jm-eth0" Sep 6 01:20:08.583896 env[1448]: 2025-09-06 01:20:08.517 [INFO][4224] cni-plugin/k8s.go 418: Populated endpoint ContainerID="b4b80c8a7163a67a8c3d4c453c5e04a3b09f91f043b32e426eb9e4d6a90be3d2" Namespace="calico-system" Pod="goldmane-54d579b49d-7r8jm" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-goldmane--54d579b49d--7r8jm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--f2ea6194e4-k8s-goldmane--54d579b49d--7r8jm-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"a953d4fa-4bab-4981-889d-f180a79cf853", ResourceVersion:"928", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 19, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-f2ea6194e4", ContainerID:"", Pod:"goldmane-54d579b49d-7r8jm", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.5.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calidb512a19e11", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:20:08.583896 env[1448]: 2025-09-06 01:20:08.517 [INFO][4224] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.5.134/32] ContainerID="b4b80c8a7163a67a8c3d4c453c5e04a3b09f91f043b32e426eb9e4d6a90be3d2" Namespace="calico-system" Pod="goldmane-54d579b49d-7r8jm" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-goldmane--54d579b49d--7r8jm-eth0" Sep 6 01:20:08.583896 env[1448]: 2025-09-06 01:20:08.517 [INFO][4224] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calidb512a19e11 ContainerID="b4b80c8a7163a67a8c3d4c453c5e04a3b09f91f043b32e426eb9e4d6a90be3d2" Namespace="calico-system" Pod="goldmane-54d579b49d-7r8jm" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-goldmane--54d579b49d--7r8jm-eth0" Sep 6 01:20:08.583896 env[1448]: 2025-09-06 01:20:08.544 [INFO][4224] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b4b80c8a7163a67a8c3d4c453c5e04a3b09f91f043b32e426eb9e4d6a90be3d2" Namespace="calico-system" Pod="goldmane-54d579b49d-7r8jm" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-goldmane--54d579b49d--7r8jm-eth0" Sep 6 01:20:08.583896 env[1448]: 2025-09-06 01:20:08.557 [INFO][4224] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="b4b80c8a7163a67a8c3d4c453c5e04a3b09f91f043b32e426eb9e4d6a90be3d2" Namespace="calico-system" Pod="goldmane-54d579b49d-7r8jm" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-goldmane--54d579b49d--7r8jm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--f2ea6194e4-k8s-goldmane--54d579b49d--7r8jm-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"a953d4fa-4bab-4981-889d-f180a79cf853", ResourceVersion:"928", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 19, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-f2ea6194e4", ContainerID:"b4b80c8a7163a67a8c3d4c453c5e04a3b09f91f043b32e426eb9e4d6a90be3d2", Pod:"goldmane-54d579b49d-7r8jm", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.5.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calidb512a19e11", MAC:"0a:c4:b0:d6:f5:8b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:20:08.583896 env[1448]: 2025-09-06 01:20:08.575 [INFO][4224] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="b4b80c8a7163a67a8c3d4c453c5e04a3b09f91f043b32e426eb9e4d6a90be3d2" Namespace="calico-system" Pod="goldmane-54d579b49d-7r8jm" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-goldmane--54d579b49d--7r8jm-eth0" Sep 6 01:20:08.590235 env[1448]: time="2025-09-06T01:20:08.589972049Z" level=info msg="StopPodSandbox for \"995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4\"" Sep 6 01:20:08.595778 env[1448]: time="2025-09-06T01:20:08.590482929Z" level=info msg="StopPodSandbox for \"a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628\"" Sep 6 01:20:08.634881 systemd[1]: Started cri-containerd-96a4ea70267c11101baa6a8fba2d8d29f1e2fd3f995111d18eb7de7b55345b65.scope. Sep 6 01:20:08.658775 env[1448]: time="2025-09-06T01:20:08.657105740Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:20:08.658775 env[1448]: time="2025-09-06T01:20:08.657157900Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:20:08.658775 env[1448]: time="2025-09-06T01:20:08.657168060Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:20:08.658775 env[1448]: time="2025-09-06T01:20:08.657303660Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b4b80c8a7163a67a8c3d4c453c5e04a3b09f91f043b32e426eb9e4d6a90be3d2 pid=4431 runtime=io.containerd.runc.v2 Sep 6 01:20:08.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.674000 audit: BPF prog-id=179 op=LOAD Sep 6 01:20:08.687125 systemd[1]: Started cri-containerd-b4b80c8a7163a67a8c3d4c453c5e04a3b09f91f043b32e426eb9e4d6a90be3d2.scope. Sep 6 01:20:08.687000 audit[4385]: AVC avc: denied { bpf } for pid=4385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.687000 audit[4385]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4297 pid=4385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936613465613730323637633131313031626161366138666261326438 Sep 6 01:20:08.687000 audit[4385]: AVC avc: denied { perfmon } for pid=4385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.687000 audit[4385]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4297 pid=4385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936613465613730323637633131313031626161366138666261326438 Sep 6 01:20:08.688000 audit[4385]: AVC avc: denied { bpf } for pid=4385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.688000 audit[4385]: AVC avc: denied { bpf } for pid=4385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.688000 audit[4385]: AVC avc: denied { bpf } for pid=4385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.688000 audit[4385]: AVC avc: denied { perfmon } for pid=4385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.688000 audit[4385]: AVC avc: denied { perfmon } for pid=4385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.688000 audit[4385]: AVC avc: denied { perfmon } for pid=4385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.688000 audit[4385]: AVC avc: denied { perfmon } for pid=4385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.688000 audit[4385]: AVC avc: denied { perfmon } for pid=4385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.688000 audit[4385]: AVC avc: denied { bpf } for pid=4385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.688000 audit[4385]: AVC avc: denied { bpf } for pid=4385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.688000 audit: BPF prog-id=180 op=LOAD Sep 6 01:20:08.688000 audit[4385]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4297 pid=4385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.688000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936613465613730323637633131313031626161366138666261326438 Sep 6 01:20:08.689000 audit[4385]: AVC avc: denied { bpf } for pid=4385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.689000 audit[4385]: AVC avc: denied { bpf } for pid=4385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.689000 audit[4385]: AVC avc: denied { perfmon } for pid=4385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.689000 audit[4385]: AVC avc: denied { perfmon } for pid=4385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.689000 audit[4385]: AVC avc: denied { perfmon } for pid=4385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.689000 audit[4385]: AVC avc: denied { perfmon } for pid=4385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.689000 audit[4385]: AVC avc: denied { perfmon } for pid=4385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.689000 audit[4385]: AVC avc: denied { bpf } for pid=4385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.689000 audit[4385]: AVC avc: denied { bpf } for pid=4385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.689000 audit: BPF prog-id=181 op=LOAD Sep 6 01:20:08.689000 audit[4385]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4297 pid=4385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.689000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936613465613730323637633131313031626161366138666261326438 Sep 6 01:20:08.694000 audit: BPF prog-id=181 op=UNLOAD Sep 6 01:20:08.694000 audit: BPF prog-id=180 op=UNLOAD Sep 6 01:20:08.694000 audit[4385]: AVC avc: denied { bpf } for pid=4385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.694000 audit[4385]: AVC avc: denied { bpf } for pid=4385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.694000 audit[4385]: AVC avc: denied { bpf } for pid=4385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.694000 audit[4385]: AVC avc: denied { perfmon } for pid=4385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.694000 audit[4385]: AVC avc: denied { perfmon } for pid=4385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.694000 audit[4385]: AVC avc: denied { perfmon } for pid=4385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.694000 audit[4385]: AVC avc: denied { perfmon } for pid=4385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.694000 audit[4385]: AVC avc: denied { perfmon } for pid=4385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.694000 audit[4385]: AVC avc: denied { bpf } for pid=4385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.694000 audit[4385]: AVC avc: denied { bpf } for pid=4385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.694000 audit: BPF prog-id=182 op=LOAD Sep 6 01:20:08.694000 audit[4385]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4297 pid=4385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936613465613730323637633131313031626161366138666261326438 Sep 6 01:20:08.703000 audit[4433]: AVC avc: denied { bpf } for pid=4433 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.703000 audit[4433]: AVC avc: denied { bpf } for pid=4433 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.703000 audit[4433]: AVC avc: denied { perfmon } for pid=4433 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.703000 audit[4433]: AVC avc: denied { perfmon } for pid=4433 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.703000 audit[4433]: AVC avc: denied { perfmon } for pid=4433 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.703000 audit[4433]: AVC avc: denied { perfmon } for pid=4433 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.703000 audit[4433]: AVC avc: denied { perfmon } for pid=4433 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.703000 audit[4433]: AVC avc: denied { bpf } for pid=4433 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.703000 audit[4433]: AVC avc: denied { bpf } for pid=4433 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.703000 audit: BPF prog-id=183 op=LOAD Sep 6 01:20:08.703000 audit[4433]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe5f8e8a8 a2=98 a3=ffffe5f8e898 items=0 ppid=4164 pid=4433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.703000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 6 01:20:08.708000 audit: BPF prog-id=183 op=UNLOAD Sep 6 01:20:08.708000 audit[4433]: AVC avc: denied { bpf } for pid=4433 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.708000 audit[4433]: AVC avc: denied { bpf } for pid=4433 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.708000 audit[4433]: AVC avc: denied { perfmon } for pid=4433 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.708000 audit[4433]: AVC avc: denied { perfmon } for pid=4433 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.708000 audit[4433]: AVC avc: denied { perfmon } for pid=4433 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.708000 audit[4433]: AVC avc: denied { perfmon } for pid=4433 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.708000 audit[4433]: AVC avc: denied { perfmon } for pid=4433 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.708000 audit[4433]: AVC avc: denied { bpf } for pid=4433 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.708000 audit[4433]: AVC avc: denied { bpf } for pid=4433 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.708000 audit: BPF prog-id=184 op=LOAD Sep 6 01:20:08.708000 audit[4433]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe5f8e758 a2=74 a3=95 items=0 ppid=4164 pid=4433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.708000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 6 01:20:08.709000 audit: BPF prog-id=184 op=UNLOAD Sep 6 01:20:08.709000 audit[4433]: AVC avc: denied { bpf } for pid=4433 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.709000 audit[4433]: AVC avc: denied { bpf } for pid=4433 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.715000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.715000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.715000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.715000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.715000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.715000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.715000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.715000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.715000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.715000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.715000 audit: BPF prog-id=185 op=LOAD Sep 6 01:20:08.716000 audit[4447]: AVC avc: denied { bpf } for pid=4447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.716000 audit[4447]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4431 pid=4447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.716000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234623830633861373136336136376138633364346334353363356530 Sep 6 01:20:08.716000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.716000 audit[4447]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4431 pid=4447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.716000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234623830633861373136336136376138633364346334353363356530 Sep 6 01:20:08.716000 audit[4447]: AVC avc: denied { bpf } for pid=4447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.716000 audit[4447]: AVC avc: denied { bpf } for pid=4447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.716000 audit[4447]: AVC avc: denied { bpf } for pid=4447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.716000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.716000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.716000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.716000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.716000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.716000 audit[4447]: AVC avc: denied { bpf } for pid=4447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.716000 audit[4447]: AVC avc: denied { bpf } for pid=4447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.716000 audit: BPF prog-id=186 op=LOAD Sep 6 01:20:08.716000 audit[4447]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4431 pid=4447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.716000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234623830633861373136336136376138633364346334353363356530 Sep 6 01:20:08.716000 audit[4447]: AVC avc: denied { bpf } for pid=4447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.716000 audit[4447]: AVC avc: denied { bpf } for pid=4447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.716000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.716000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.716000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.716000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.716000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.716000 audit[4447]: AVC avc: denied { bpf } for pid=4447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.716000 audit[4447]: AVC avc: denied { bpf } for pid=4447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.716000 audit: BPF prog-id=187 op=LOAD Sep 6 01:20:08.716000 audit[4447]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4431 pid=4447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.716000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234623830633861373136336136376138633364346334353363356530 Sep 6 01:20:08.716000 audit: BPF prog-id=187 op=UNLOAD Sep 6 01:20:08.716000 audit: BPF prog-id=186 op=UNLOAD Sep 6 01:20:08.716000 audit[4447]: AVC avc: denied { bpf } for pid=4447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.716000 audit[4447]: AVC avc: denied { bpf } for pid=4447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.716000 audit[4447]: AVC avc: denied { bpf } for pid=4447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.716000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.716000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.716000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.716000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.716000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.716000 audit[4447]: AVC avc: denied { bpf } for pid=4447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.716000 audit[4447]: AVC avc: denied { bpf } for pid=4447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.716000 audit: BPF prog-id=188 op=LOAD Sep 6 01:20:08.716000 audit[4447]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4431 pid=4447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.716000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234623830633861373136336136376138633364346334353363356530 Sep 6 01:20:08.709000 audit[4433]: AVC avc: denied { perfmon } for pid=4433 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.709000 audit[4433]: AVC avc: denied { perfmon } for pid=4433 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.709000 audit[4433]: AVC avc: denied { perfmon } for pid=4433 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.709000 audit[4433]: AVC avc: denied { perfmon } for pid=4433 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.709000 audit[4433]: AVC avc: denied { perfmon } for pid=4433 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.709000 audit[4433]: AVC avc: denied { bpf } for pid=4433 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.709000 audit[4433]: AVC avc: denied { bpf } for pid=4433 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:08.709000 audit: BPF prog-id=189 op=LOAD Sep 6 01:20:08.709000 audit[4433]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe5f8e788 a2=40 a3=ffffe5f8e7b8 items=0 ppid=4164 pid=4433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.709000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 6 01:20:08.748909 env[1448]: time="2025-09-06T01:20:08.747722275Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5ddcbb448c-gvtjx,Uid:91cf3a26-dfb6-4f8b-b9c3-46758ab8c6b5,Namespace:calico-system,Attempt:1,} returns sandbox id \"0c84ce2bba4634f661bb831634c5438a140bc8b3c29a12b1855a78c74340c325\"" Sep 6 01:20:08.771000 audit[4430]: AVC avc: denied { getattr } for pid=4430 comm="coredns" path="cgroup:[4026532665]" dev="nsfs" ino=4026532665 scontext=system_u:system_r:svirt_lxc_net_t:s0:c12,c832 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 6 01:20:08.771000 audit[4430]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056a08 a2=400014c578 a3=0 items=0 ppid=4297 pid=4430 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c12,c832 key=(null) Sep 6 01:20:08.774000 audit: BPF prog-id=189 op=UNLOAD Sep 6 01:20:08.771000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 6 01:20:08.809411 env[1448]: time="2025-09-06T01:20:08.809298286Z" level=info msg="StartContainer for \"96a4ea70267c11101baa6a8fba2d8d29f1e2fd3f995111d18eb7de7b55345b65\" returns successfully" Sep 6 01:20:08.816851 env[1448]: time="2025-09-06T01:20:08.813972007Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-7r8jm,Uid:a953d4fa-4bab-4981-889d-f180a79cf853,Namespace:calico-system,Attempt:1,} returns sandbox id \"b4b80c8a7163a67a8c3d4c453c5e04a3b09f91f043b32e426eb9e4d6a90be3d2\"" Sep 6 01:20:08.865053 kubelet[2427]: I0906 01:20:08.864978 2427 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-hhptn" podStartSLOduration=46.864957575 podStartE2EDuration="46.864957575s" podCreationTimestamp="2025-09-06 01:19:22 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 01:20:08.859980055 +0000 UTC m=+51.495102870" watchObservedRunningTime="2025-09-06 01:20:08.864957575 +0000 UTC m=+51.500080430" Sep 6 01:20:08.917000 audit[4504]: NETFILTER_CFG table=filter:108 family=2 entries=17 op=nft_register_rule pid=4504 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:20:08.917000 audit[4504]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffe4144430 a2=0 a3=1 items=0 ppid=2565 pid=4504 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.917000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:20:08.923000 audit[4504]: NETFILTER_CFG table=nat:109 family=2 entries=35 op=nft_register_chain pid=4504 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:20:08.923000 audit[4504]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=ffffe4144430 a2=0 a3=1 items=0 ppid=2565 pid=4504 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:08.923000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:20:08.946444 env[1448]: 2025-09-06 01:20:08.866 [INFO][4418] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" Sep 6 01:20:08.946444 env[1448]: 2025-09-06 01:20:08.866 [INFO][4418] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" iface="eth0" netns="/var/run/netns/cni-f7fe600f-c6fa-b744-4125-ef3174b47b18" Sep 6 01:20:08.946444 env[1448]: 2025-09-06 01:20:08.867 [INFO][4418] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" iface="eth0" netns="/var/run/netns/cni-f7fe600f-c6fa-b744-4125-ef3174b47b18" Sep 6 01:20:08.946444 env[1448]: 2025-09-06 01:20:08.867 [INFO][4418] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" iface="eth0" netns="/var/run/netns/cni-f7fe600f-c6fa-b744-4125-ef3174b47b18" Sep 6 01:20:08.946444 env[1448]: 2025-09-06 01:20:08.867 [INFO][4418] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" Sep 6 01:20:08.946444 env[1448]: 2025-09-06 01:20:08.867 [INFO][4418] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" Sep 6 01:20:08.946444 env[1448]: 2025-09-06 01:20:08.915 [INFO][4493] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" HandleID="k8s-pod-network.995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--bdq9h-eth0" Sep 6 01:20:08.946444 env[1448]: 2025-09-06 01:20:08.915 [INFO][4493] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:08.946444 env[1448]: 2025-09-06 01:20:08.916 [INFO][4493] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:08.946444 env[1448]: 2025-09-06 01:20:08.940 [WARNING][4493] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" HandleID="k8s-pod-network.995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--bdq9h-eth0" Sep 6 01:20:08.946444 env[1448]: 2025-09-06 01:20:08.940 [INFO][4493] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" HandleID="k8s-pod-network.995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--bdq9h-eth0" Sep 6 01:20:08.946444 env[1448]: 2025-09-06 01:20:08.943 [INFO][4493] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:08.946444 env[1448]: 2025-09-06 01:20:08.945 [INFO][4418] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" Sep 6 01:20:08.947149 env[1448]: time="2025-09-06T01:20:08.946602229Z" level=info msg="TearDown network for sandbox \"995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4\" successfully" Sep 6 01:20:08.947149 env[1448]: time="2025-09-06T01:20:08.946641829Z" level=info msg="StopPodSandbox for \"995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4\" returns successfully" Sep 6 01:20:08.947885 env[1448]: time="2025-09-06T01:20:08.947806190Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-58578c4b6-bdq9h,Uid:4fedc3f0-ce49-4a1c-95c7-fd08b3ad94b4,Namespace:calico-apiserver,Attempt:1,}" Sep 6 01:20:08.969017 env[1448]: 2025-09-06 01:20:08.879 [INFO][4419] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" Sep 6 01:20:08.969017 env[1448]: 2025-09-06 01:20:08.879 [INFO][4419] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" iface="eth0" netns="/var/run/netns/cni-a6280176-dc8d-f93c-c93f-e54bbefca45e" Sep 6 01:20:08.969017 env[1448]: 2025-09-06 01:20:08.880 [INFO][4419] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" iface="eth0" netns="/var/run/netns/cni-a6280176-dc8d-f93c-c93f-e54bbefca45e" Sep 6 01:20:08.969017 env[1448]: 2025-09-06 01:20:08.880 [INFO][4419] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" iface="eth0" netns="/var/run/netns/cni-a6280176-dc8d-f93c-c93f-e54bbefca45e" Sep 6 01:20:08.969017 env[1448]: 2025-09-06 01:20:08.880 [INFO][4419] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" Sep 6 01:20:08.969017 env[1448]: 2025-09-06 01:20:08.880 [INFO][4419] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" Sep 6 01:20:08.969017 env[1448]: 2025-09-06 01:20:08.930 [INFO][4499] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" HandleID="k8s-pod-network.a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-csi--node--driver--lcns4-eth0" Sep 6 01:20:08.969017 env[1448]: 2025-09-06 01:20:08.931 [INFO][4499] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:08.969017 env[1448]: 2025-09-06 01:20:08.943 [INFO][4499] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:08.969017 env[1448]: 2025-09-06 01:20:08.961 [WARNING][4499] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" HandleID="k8s-pod-network.a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-csi--node--driver--lcns4-eth0" Sep 6 01:20:08.969017 env[1448]: 2025-09-06 01:20:08.961 [INFO][4499] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" HandleID="k8s-pod-network.a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-csi--node--driver--lcns4-eth0" Sep 6 01:20:08.969017 env[1448]: 2025-09-06 01:20:08.963 [INFO][4499] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:08.969017 env[1448]: 2025-09-06 01:20:08.965 [INFO][4419] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" Sep 6 01:20:08.969706 env[1448]: time="2025-09-06T01:20:08.969661153Z" level=info msg="TearDown network for sandbox \"a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628\" successfully" Sep 6 01:20:08.969706 env[1448]: time="2025-09-06T01:20:08.969701553Z" level=info msg="StopPodSandbox for \"a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628\" returns successfully" Sep 6 01:20:08.970523 env[1448]: time="2025-09-06T01:20:08.970488913Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-lcns4,Uid:35d6d670-3213-45cd-86fd-0fd88c7f3b82,Namespace:calico-system,Attempt:1,}" Sep 6 01:20:09.073422 systemd[1]: run-netns-cni\x2df7fe600f\x2dc6fa\x2db744\x2d4125\x2def3174b47b18.mount: Deactivated successfully. Sep 6 01:20:09.073509 systemd[1]: run-netns-cni\x2da6280176\x2ddc8d\x2df93c\x2dc93f\x2de54bbefca45e.mount: Deactivated successfully. Sep 6 01:20:09.180137 systemd-networkd[1603]: vxlan.calico: Link UP Sep 6 01:20:09.180147 systemd-networkd[1603]: vxlan.calico: Gained carrier Sep 6 01:20:09.203000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.203000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.203000 audit[4587]: AVC avc: denied { perfmon } for pid=4587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.203000 audit[4587]: AVC avc: denied { perfmon } for pid=4587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.203000 audit[4587]: AVC avc: denied { perfmon } for pid=4587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.203000 audit[4587]: AVC avc: denied { perfmon } for pid=4587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.203000 audit[4587]: AVC avc: denied { perfmon } for pid=4587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.203000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.203000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.203000 audit: BPF prog-id=190 op=LOAD Sep 6 01:20:09.203000 audit[4587]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe83cd7c8 a2=98 a3=ffffe83cd7b8 items=0 ppid=4164 pid=4587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.203000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:20:09.204000 audit: BPF prog-id=190 op=UNLOAD Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { perfmon } for pid=4587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { perfmon } for pid=4587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { perfmon } for pid=4587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { perfmon } for pid=4587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { perfmon } for pid=4587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit: BPF prog-id=191 op=LOAD Sep 6 01:20:09.204000 audit[4587]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe83cd4a8 a2=74 a3=95 items=0 ppid=4164 pid=4587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.204000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:20:09.204000 audit: BPF prog-id=191 op=UNLOAD Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { perfmon } for pid=4587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { perfmon } for pid=4587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { perfmon } for pid=4587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { perfmon } for pid=4587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { perfmon } for pid=4587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit: BPF prog-id=192 op=LOAD Sep 6 01:20:09.204000 audit[4587]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe83cd508 a2=94 a3=2 items=0 ppid=4164 pid=4587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.204000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:20:09.204000 audit: BPF prog-id=192 op=UNLOAD Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe83cd538 a2=28 a3=ffffe83cd668 items=0 ppid=4164 pid=4587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.204000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe83cd568 a2=28 a3=ffffe83cd698 items=0 ppid=4164 pid=4587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.204000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe83cd418 a2=28 a3=ffffe83cd548 items=0 ppid=4164 pid=4587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.204000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe83cd588 a2=28 a3=ffffe83cd6b8 items=0 ppid=4164 pid=4587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.204000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe83cd568 a2=28 a3=ffffe83cd698 items=0 ppid=4164 pid=4587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.204000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe83cd558 a2=28 a3=ffffe83cd688 items=0 ppid=4164 pid=4587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.204000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe83cd588 a2=28 a3=ffffe83cd6b8 items=0 ppid=4164 pid=4587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.204000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe83cd568 a2=28 a3=ffffe83cd698 items=0 ppid=4164 pid=4587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.204000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe83cd588 a2=28 a3=ffffe83cd6b8 items=0 ppid=4164 pid=4587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.204000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe83cd558 a2=28 a3=ffffe83cd688 items=0 ppid=4164 pid=4587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.204000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe83cd5d8 a2=28 a3=ffffe83cd718 items=0 ppid=4164 pid=4587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.204000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { perfmon } for pid=4587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { perfmon } for pid=4587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { perfmon } for pid=4587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { perfmon } for pid=4587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { perfmon } for pid=4587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.204000 audit: BPF prog-id=193 op=LOAD Sep 6 01:20:09.204000 audit[4587]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe83cd3f8 a2=40 a3=ffffe83cd428 items=0 ppid=4164 pid=4587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.204000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:20:09.204000 audit: BPF prog-id=193 op=UNLOAD Sep 6 01:20:09.208000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.208000 audit[4587]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffe83cd420 a2=50 a3=0 items=0 ppid=4164 pid=4587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.208000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:20:09.214000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.214000 audit[4587]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=ffffe83cd420 a2=50 a3=0 items=0 ppid=4164 pid=4587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.214000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:20:09.215000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.215000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.215000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.215000 audit[4587]: AVC avc: denied { perfmon } for pid=4587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.215000 audit[4587]: AVC avc: denied { perfmon } for pid=4587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.215000 audit[4587]: AVC avc: denied { perfmon } for pid=4587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.215000 audit[4587]: AVC avc: denied { perfmon } for pid=4587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.215000 audit[4587]: AVC avc: denied { perfmon } for pid=4587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.215000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.215000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.215000 audit: BPF prog-id=194 op=LOAD Sep 6 01:20:09.215000 audit[4587]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe83ccb88 a2=94 a3=2 items=0 ppid=4164 pid=4587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.215000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:20:09.215000 audit: BPF prog-id=194 op=UNLOAD Sep 6 01:20:09.215000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.215000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.215000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.215000 audit[4587]: AVC avc: denied { perfmon } for pid=4587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.215000 audit[4587]: AVC avc: denied { perfmon } for pid=4587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.215000 audit[4587]: AVC avc: denied { perfmon } for pid=4587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.215000 audit[4587]: AVC avc: denied { perfmon } for pid=4587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.215000 audit[4587]: AVC avc: denied { perfmon } for pid=4587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.215000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.215000 audit[4587]: AVC avc: denied { bpf } for pid=4587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.215000 audit: BPF prog-id=195 op=LOAD Sep 6 01:20:09.215000 audit[4587]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe83ccd18 a2=94 a3=30 items=0 ppid=4164 pid=4587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.215000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:20:09.232474 systemd-networkd[1603]: cali7864dda5a3d: Link UP Sep 6 01:20:09.244776 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali7864dda5a3d: link becomes ready Sep 6 01:20:09.244906 systemd-networkd[1603]: cali7864dda5a3d: Gained carrier Sep 6 01:20:09.247000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.247000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.247000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.247000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.247000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.247000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.247000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.247000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.247000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.247000 audit: BPF prog-id=196 op=LOAD Sep 6 01:20:09.247000 audit[4594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffefdb9548 a2=98 a3=ffffefdb9538 items=0 ppid=4164 pid=4594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.247000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:20:09.248000 audit: BPF prog-id=196 op=UNLOAD Sep 6 01:20:09.248000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.248000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.248000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.248000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.248000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.248000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.248000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.248000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.248000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.248000 audit: BPF prog-id=197 op=LOAD Sep 6 01:20:09.248000 audit[4594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffefdb91d8 a2=74 a3=95 items=0 ppid=4164 pid=4594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.248000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:20:09.249000 audit: BPF prog-id=197 op=UNLOAD Sep 6 01:20:09.249000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.249000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.249000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.249000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.249000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.249000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.249000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.249000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.249000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.249000 audit: BPF prog-id=198 op=LOAD Sep 6 01:20:09.249000 audit[4594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffefdb9238 a2=94 a3=2 items=0 ppid=4164 pid=4594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.249000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:20:09.254000 audit: BPF prog-id=198 op=UNLOAD Sep 6 01:20:09.275185 env[1448]: 2025-09-06 01:20:09.053 [INFO][4522] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--bdq9h-eth0 calico-apiserver-58578c4b6- calico-apiserver 4fedc3f0-ce49-4a1c-95c7-fd08b3ad94b4 957 0 2025-09-06 01:19:36 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:58578c4b6 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.8-n-f2ea6194e4 calico-apiserver-58578c4b6-bdq9h eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali7864dda5a3d [] [] }} ContainerID="78721d04aadb0d67c3fd389c53a50d65c1eaeff641dda746dfe69de04e029301" Namespace="calico-apiserver" Pod="calico-apiserver-58578c4b6-bdq9h" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--bdq9h-" Sep 6 01:20:09.275185 env[1448]: 2025-09-06 01:20:09.053 [INFO][4522] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="78721d04aadb0d67c3fd389c53a50d65c1eaeff641dda746dfe69de04e029301" Namespace="calico-apiserver" Pod="calico-apiserver-58578c4b6-bdq9h" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--bdq9h-eth0" Sep 6 01:20:09.275185 env[1448]: 2025-09-06 01:20:09.141 [INFO][4560] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="78721d04aadb0d67c3fd389c53a50d65c1eaeff641dda746dfe69de04e029301" HandleID="k8s-pod-network.78721d04aadb0d67c3fd389c53a50d65c1eaeff641dda746dfe69de04e029301" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--bdq9h-eth0" Sep 6 01:20:09.275185 env[1448]: 2025-09-06 01:20:09.141 [INFO][4560] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="78721d04aadb0d67c3fd389c53a50d65c1eaeff641dda746dfe69de04e029301" HandleID="k8s-pod-network.78721d04aadb0d67c3fd389c53a50d65c1eaeff641dda746dfe69de04e029301" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--bdq9h-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002caff0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.8-n-f2ea6194e4", "pod":"calico-apiserver-58578c4b6-bdq9h", "timestamp":"2025-09-06 01:20:09.141779462 +0000 UTC"}, Hostname:"ci-3510.3.8-n-f2ea6194e4", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 01:20:09.275185 env[1448]: 2025-09-06 01:20:09.142 [INFO][4560] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:09.275185 env[1448]: 2025-09-06 01:20:09.142 [INFO][4560] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:09.275185 env[1448]: 2025-09-06 01:20:09.142 [INFO][4560] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-f2ea6194e4' Sep 6 01:20:09.275185 env[1448]: 2025-09-06 01:20:09.156 [INFO][4560] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.78721d04aadb0d67c3fd389c53a50d65c1eaeff641dda746dfe69de04e029301" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:09.275185 env[1448]: 2025-09-06 01:20:09.166 [INFO][4560] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:09.275185 env[1448]: 2025-09-06 01:20:09.172 [INFO][4560] ipam/ipam.go 511: Trying affinity for 192.168.5.128/26 host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:09.275185 env[1448]: 2025-09-06 01:20:09.175 [INFO][4560] ipam/ipam.go 158: Attempting to load block cidr=192.168.5.128/26 host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:09.275185 env[1448]: 2025-09-06 01:20:09.193 [INFO][4560] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.5.128/26 host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:09.275185 env[1448]: 2025-09-06 01:20:09.193 [INFO][4560] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.5.128/26 handle="k8s-pod-network.78721d04aadb0d67c3fd389c53a50d65c1eaeff641dda746dfe69de04e029301" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:09.275185 env[1448]: 2025-09-06 01:20:09.199 [INFO][4560] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.78721d04aadb0d67c3fd389c53a50d65c1eaeff641dda746dfe69de04e029301 Sep 6 01:20:09.275185 env[1448]: 2025-09-06 01:20:09.206 [INFO][4560] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.5.128/26 handle="k8s-pod-network.78721d04aadb0d67c3fd389c53a50d65c1eaeff641dda746dfe69de04e029301" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:09.275185 env[1448]: 2025-09-06 01:20:09.220 [INFO][4560] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.5.135/26] block=192.168.5.128/26 handle="k8s-pod-network.78721d04aadb0d67c3fd389c53a50d65c1eaeff641dda746dfe69de04e029301" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:09.275185 env[1448]: 2025-09-06 01:20:09.220 [INFO][4560] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.5.135/26] handle="k8s-pod-network.78721d04aadb0d67c3fd389c53a50d65c1eaeff641dda746dfe69de04e029301" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:09.275185 env[1448]: 2025-09-06 01:20:09.221 [INFO][4560] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:09.275185 env[1448]: 2025-09-06 01:20:09.221 [INFO][4560] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.5.135/26] IPv6=[] ContainerID="78721d04aadb0d67c3fd389c53a50d65c1eaeff641dda746dfe69de04e029301" HandleID="k8s-pod-network.78721d04aadb0d67c3fd389c53a50d65c1eaeff641dda746dfe69de04e029301" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--bdq9h-eth0" Sep 6 01:20:09.275995 env[1448]: 2025-09-06 01:20:09.228 [INFO][4522] cni-plugin/k8s.go 418: Populated endpoint ContainerID="78721d04aadb0d67c3fd389c53a50d65c1eaeff641dda746dfe69de04e029301" Namespace="calico-apiserver" Pod="calico-apiserver-58578c4b6-bdq9h" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--bdq9h-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--bdq9h-eth0", GenerateName:"calico-apiserver-58578c4b6-", Namespace:"calico-apiserver", SelfLink:"", UID:"4fedc3f0-ce49-4a1c-95c7-fd08b3ad94b4", ResourceVersion:"957", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 19, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"58578c4b6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-f2ea6194e4", ContainerID:"", Pod:"calico-apiserver-58578c4b6-bdq9h", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.5.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali7864dda5a3d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:20:09.275995 env[1448]: 2025-09-06 01:20:09.228 [INFO][4522] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.5.135/32] ContainerID="78721d04aadb0d67c3fd389c53a50d65c1eaeff641dda746dfe69de04e029301" Namespace="calico-apiserver" Pod="calico-apiserver-58578c4b6-bdq9h" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--bdq9h-eth0" Sep 6 01:20:09.275995 env[1448]: 2025-09-06 01:20:09.229 [INFO][4522] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali7864dda5a3d ContainerID="78721d04aadb0d67c3fd389c53a50d65c1eaeff641dda746dfe69de04e029301" Namespace="calico-apiserver" Pod="calico-apiserver-58578c4b6-bdq9h" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--bdq9h-eth0" Sep 6 01:20:09.275995 env[1448]: 2025-09-06 01:20:09.233 [INFO][4522] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="78721d04aadb0d67c3fd389c53a50d65c1eaeff641dda746dfe69de04e029301" Namespace="calico-apiserver" Pod="calico-apiserver-58578c4b6-bdq9h" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--bdq9h-eth0" Sep 6 01:20:09.275995 env[1448]: 2025-09-06 01:20:09.234 [INFO][4522] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="78721d04aadb0d67c3fd389c53a50d65c1eaeff641dda746dfe69de04e029301" Namespace="calico-apiserver" Pod="calico-apiserver-58578c4b6-bdq9h" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--bdq9h-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--bdq9h-eth0", GenerateName:"calico-apiserver-58578c4b6-", Namespace:"calico-apiserver", SelfLink:"", UID:"4fedc3f0-ce49-4a1c-95c7-fd08b3ad94b4", ResourceVersion:"957", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 19, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"58578c4b6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-f2ea6194e4", ContainerID:"78721d04aadb0d67c3fd389c53a50d65c1eaeff641dda746dfe69de04e029301", Pod:"calico-apiserver-58578c4b6-bdq9h", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.5.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali7864dda5a3d", MAC:"a6:5f:7f:43:e8:3e", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:20:09.275995 env[1448]: 2025-09-06 01:20:09.272 [INFO][4522] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="78721d04aadb0d67c3fd389c53a50d65c1eaeff641dda746dfe69de04e029301" Namespace="calico-apiserver" Pod="calico-apiserver-58578c4b6-bdq9h" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--bdq9h-eth0" Sep 6 01:20:09.304081 env[1448]: time="2025-09-06T01:20:09.303069929Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:20:09.305103 env[1448]: time="2025-09-06T01:20:09.305039530Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:20:09.305428 env[1448]: time="2025-09-06T01:20:09.305400090Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:20:09.305777 env[1448]: time="2025-09-06T01:20:09.305719730Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/78721d04aadb0d67c3fd389c53a50d65c1eaeff641dda746dfe69de04e029301 pid=4609 runtime=io.containerd.runc.v2 Sep 6 01:20:09.325972 systemd[1]: Started cri-containerd-78721d04aadb0d67c3fd389c53a50d65c1eaeff641dda746dfe69de04e029301.scope. Sep 6 01:20:09.338811 systemd-networkd[1603]: calice2c190302a: Link UP Sep 6 01:20:09.361981 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calice2c190302a: link becomes ready Sep 6 01:20:09.350140 systemd-networkd[1603]: calice2c190302a: Gained carrier Sep 6 01:20:09.361175 systemd[1]: run-containerd-runc-k8s.io-78721d04aadb0d67c3fd389c53a50d65c1eaeff641dda746dfe69de04e029301-runc.ZNgGow.mount: Deactivated successfully. Sep 6 01:20:09.381716 env[1448]: 2025-09-06 01:20:09.093 [INFO][4545] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--f2ea6194e4-k8s-csi--node--driver--lcns4-eth0 csi-node-driver- calico-system 35d6d670-3213-45cd-86fd-0fd88c7f3b82 959 0 2025-09-06 01:19:42 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:6c96d95cc7 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s ci-3510.3.8-n-f2ea6194e4 csi-node-driver-lcns4 eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] calice2c190302a [] [] }} ContainerID="d41448da809d27e59dbe19c082787c0d56cde3483d7d47231db34bd274c5db6c" Namespace="calico-system" Pod="csi-node-driver-lcns4" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-csi--node--driver--lcns4-" Sep 6 01:20:09.381716 env[1448]: 2025-09-06 01:20:09.094 [INFO][4545] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="d41448da809d27e59dbe19c082787c0d56cde3483d7d47231db34bd274c5db6c" Namespace="calico-system" Pod="csi-node-driver-lcns4" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-csi--node--driver--lcns4-eth0" Sep 6 01:20:09.381716 env[1448]: 2025-09-06 01:20:09.160 [INFO][4567] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d41448da809d27e59dbe19c082787c0d56cde3483d7d47231db34bd274c5db6c" HandleID="k8s-pod-network.d41448da809d27e59dbe19c082787c0d56cde3483d7d47231db34bd274c5db6c" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-csi--node--driver--lcns4-eth0" Sep 6 01:20:09.381716 env[1448]: 2025-09-06 01:20:09.160 [INFO][4567] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="d41448da809d27e59dbe19c082787c0d56cde3483d7d47231db34bd274c5db6c" HandleID="k8s-pod-network.d41448da809d27e59dbe19c082787c0d56cde3483d7d47231db34bd274c5db6c" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-csi--node--driver--lcns4-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000283630), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-f2ea6194e4", "pod":"csi-node-driver-lcns4", "timestamp":"2025-09-06 01:20:09.160612305 +0000 UTC"}, Hostname:"ci-3510.3.8-n-f2ea6194e4", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 01:20:09.381716 env[1448]: 2025-09-06 01:20:09.160 [INFO][4567] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:09.381716 env[1448]: 2025-09-06 01:20:09.220 [INFO][4567] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:09.381716 env[1448]: 2025-09-06 01:20:09.221 [INFO][4567] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-f2ea6194e4' Sep 6 01:20:09.381716 env[1448]: 2025-09-06 01:20:09.276 [INFO][4567] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.d41448da809d27e59dbe19c082787c0d56cde3483d7d47231db34bd274c5db6c" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:09.381716 env[1448]: 2025-09-06 01:20:09.283 [INFO][4567] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:09.381716 env[1448]: 2025-09-06 01:20:09.289 [INFO][4567] ipam/ipam.go 511: Trying affinity for 192.168.5.128/26 host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:09.381716 env[1448]: 2025-09-06 01:20:09.298 [INFO][4567] ipam/ipam.go 158: Attempting to load block cidr=192.168.5.128/26 host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:09.381716 env[1448]: 2025-09-06 01:20:09.301 [INFO][4567] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.5.128/26 host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:09.381716 env[1448]: 2025-09-06 01:20:09.301 [INFO][4567] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.5.128/26 handle="k8s-pod-network.d41448da809d27e59dbe19c082787c0d56cde3483d7d47231db34bd274c5db6c" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:09.381716 env[1448]: 2025-09-06 01:20:09.304 [INFO][4567] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.d41448da809d27e59dbe19c082787c0d56cde3483d7d47231db34bd274c5db6c Sep 6 01:20:09.381716 env[1448]: 2025-09-06 01:20:09.311 [INFO][4567] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.5.128/26 handle="k8s-pod-network.d41448da809d27e59dbe19c082787c0d56cde3483d7d47231db34bd274c5db6c" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:09.381716 env[1448]: 2025-09-06 01:20:09.329 [INFO][4567] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.5.136/26] block=192.168.5.128/26 handle="k8s-pod-network.d41448da809d27e59dbe19c082787c0d56cde3483d7d47231db34bd274c5db6c" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:09.381716 env[1448]: 2025-09-06 01:20:09.329 [INFO][4567] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.5.136/26] handle="k8s-pod-network.d41448da809d27e59dbe19c082787c0d56cde3483d7d47231db34bd274c5db6c" host="ci-3510.3.8-n-f2ea6194e4" Sep 6 01:20:09.381716 env[1448]: 2025-09-06 01:20:09.329 [INFO][4567] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:09.381716 env[1448]: 2025-09-06 01:20:09.329 [INFO][4567] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.5.136/26] IPv6=[] ContainerID="d41448da809d27e59dbe19c082787c0d56cde3483d7d47231db34bd274c5db6c" HandleID="k8s-pod-network.d41448da809d27e59dbe19c082787c0d56cde3483d7d47231db34bd274c5db6c" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-csi--node--driver--lcns4-eth0" Sep 6 01:20:09.382443 env[1448]: 2025-09-06 01:20:09.331 [INFO][4545] cni-plugin/k8s.go 418: Populated endpoint ContainerID="d41448da809d27e59dbe19c082787c0d56cde3483d7d47231db34bd274c5db6c" Namespace="calico-system" Pod="csi-node-driver-lcns4" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-csi--node--driver--lcns4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--f2ea6194e4-k8s-csi--node--driver--lcns4-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"35d6d670-3213-45cd-86fd-0fd88c7f3b82", ResourceVersion:"959", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 19, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-f2ea6194e4", ContainerID:"", Pod:"csi-node-driver-lcns4", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.5.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calice2c190302a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:20:09.382443 env[1448]: 2025-09-06 01:20:09.331 [INFO][4545] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.5.136/32] ContainerID="d41448da809d27e59dbe19c082787c0d56cde3483d7d47231db34bd274c5db6c" Namespace="calico-system" Pod="csi-node-driver-lcns4" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-csi--node--driver--lcns4-eth0" Sep 6 01:20:09.382443 env[1448]: 2025-09-06 01:20:09.331 [INFO][4545] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calice2c190302a ContainerID="d41448da809d27e59dbe19c082787c0d56cde3483d7d47231db34bd274c5db6c" Namespace="calico-system" Pod="csi-node-driver-lcns4" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-csi--node--driver--lcns4-eth0" Sep 6 01:20:09.382443 env[1448]: 2025-09-06 01:20:09.362 [INFO][4545] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="d41448da809d27e59dbe19c082787c0d56cde3483d7d47231db34bd274c5db6c" Namespace="calico-system" Pod="csi-node-driver-lcns4" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-csi--node--driver--lcns4-eth0" Sep 6 01:20:09.382443 env[1448]: 2025-09-06 01:20:09.363 [INFO][4545] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="d41448da809d27e59dbe19c082787c0d56cde3483d7d47231db34bd274c5db6c" Namespace="calico-system" Pod="csi-node-driver-lcns4" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-csi--node--driver--lcns4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--f2ea6194e4-k8s-csi--node--driver--lcns4-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"35d6d670-3213-45cd-86fd-0fd88c7f3b82", ResourceVersion:"959", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 19, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-f2ea6194e4", ContainerID:"d41448da809d27e59dbe19c082787c0d56cde3483d7d47231db34bd274c5db6c", Pod:"csi-node-driver-lcns4", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.5.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calice2c190302a", MAC:"ca:60:88:ad:03:44", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:20:09.382443 env[1448]: 2025-09-06 01:20:09.379 [INFO][4545] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="d41448da809d27e59dbe19c082787c0d56cde3483d7d47231db34bd274c5db6c" Namespace="calico-system" Pod="csi-node-driver-lcns4" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-csi--node--driver--lcns4-eth0" Sep 6 01:20:09.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.396000 audit: BPF prog-id=199 op=LOAD Sep 6 01:20:09.398000 audit[4620]: AVC avc: denied { bpf } for pid=4620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.398000 audit[4620]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4609 pid=4620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.398000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738373231643034616164623064363763336664333839633533613530 Sep 6 01:20:09.398000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.398000 audit[4620]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4609 pid=4620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.398000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738373231643034616164623064363763336664333839633533613530 Sep 6 01:20:09.399000 audit[4620]: AVC avc: denied { bpf } for pid=4620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.399000 audit[4620]: AVC avc: denied { bpf } for pid=4620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.399000 audit[4620]: AVC avc: denied { bpf } for pid=4620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.399000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.399000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.399000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.399000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.399000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.399000 audit[4620]: AVC avc: denied { bpf } for pid=4620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.399000 audit[4620]: AVC avc: denied { bpf } for pid=4620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.399000 audit: BPF prog-id=200 op=LOAD Sep 6 01:20:09.399000 audit[4620]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4609 pid=4620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.399000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738373231643034616164623064363763336664333839633533613530 Sep 6 01:20:09.399000 audit[4620]: AVC avc: denied { bpf } for pid=4620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.399000 audit[4620]: AVC avc: denied { bpf } for pid=4620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.399000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.399000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.399000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.399000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.399000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.399000 audit[4620]: AVC avc: denied { bpf } for pid=4620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.399000 audit[4620]: AVC avc: denied { bpf } for pid=4620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.399000 audit: BPF prog-id=201 op=LOAD Sep 6 01:20:09.399000 audit[4620]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4609 pid=4620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.399000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738373231643034616164623064363763336664333839633533613530 Sep 6 01:20:09.400000 audit: BPF prog-id=201 op=UNLOAD Sep 6 01:20:09.400000 audit: BPF prog-id=200 op=UNLOAD Sep 6 01:20:09.400000 audit[4620]: AVC avc: denied { bpf } for pid=4620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.400000 audit[4620]: AVC avc: denied { bpf } for pid=4620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.400000 audit[4620]: AVC avc: denied { bpf } for pid=4620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.400000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.400000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.400000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.400000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.400000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.400000 audit[4620]: AVC avc: denied { bpf } for pid=4620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.401995 env[1448]: time="2025-09-06T01:20:09.401888266Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:20:09.402057 env[1448]: time="2025-09-06T01:20:09.402000386Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:20:09.402057 env[1448]: time="2025-09-06T01:20:09.402028626Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:20:09.402221 env[1448]: time="2025-09-06T01:20:09.402186866Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d41448da809d27e59dbe19c082787c0d56cde3483d7d47231db34bd274c5db6c pid=4649 runtime=io.containerd.runc.v2 Sep 6 01:20:09.400000 audit[4620]: AVC avc: denied { bpf } for pid=4620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.400000 audit: BPF prog-id=202 op=LOAD Sep 6 01:20:09.400000 audit[4620]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4609 pid=4620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738373231643034616164623064363763336664333839633533613530 Sep 6 01:20:09.422347 systemd[1]: Started cri-containerd-d41448da809d27e59dbe19c082787c0d56cde3483d7d47231db34bd274c5db6c.scope. Sep 6 01:20:09.445204 env[1448]: time="2025-09-06T01:20:09.445155993Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-58578c4b6-bdq9h,Uid:4fedc3f0-ce49-4a1c-95c7-fd08b3ad94b4,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"78721d04aadb0d67c3fd389c53a50d65c1eaeff641dda746dfe69de04e029301\"" Sep 6 01:20:09.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.460000 audit: BPF prog-id=203 op=LOAD Sep 6 01:20:09.461000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.461000 audit[4658]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4649 pid=4658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.461000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434313434386461383039643237653539646265313963303832373837 Sep 6 01:20:09.462000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.462000 audit[4658]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4649 pid=4658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434313434386461383039643237653539646265313963303832373837 Sep 6 01:20:09.462000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.462000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.462000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.462000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.462000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.462000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.462000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.462000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.462000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.462000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.462000 audit: BPF prog-id=204 op=LOAD Sep 6 01:20:09.462000 audit[4658]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4649 pid=4658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434313434386461383039643237653539646265313963303832373837 Sep 6 01:20:09.463000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.463000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.463000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.463000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.463000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.463000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.463000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.463000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.463000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.463000 audit: BPF prog-id=205 op=LOAD Sep 6 01:20:09.463000 audit[4658]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4649 pid=4658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.463000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434313434386461383039643237653539646265313963303832373837 Sep 6 01:20:09.463000 audit: BPF prog-id=205 op=UNLOAD Sep 6 01:20:09.463000 audit: BPF prog-id=204 op=UNLOAD Sep 6 01:20:09.464000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.464000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.464000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.464000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.464000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.464000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.464000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.464000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.464000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.464000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.464000 audit: BPF prog-id=206 op=LOAD Sep 6 01:20:09.464000 audit[4658]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4649 pid=4658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.464000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434313434386461383039643237653539646265313963303832373837 Sep 6 01:20:09.480301 env[1448]: time="2025-09-06T01:20:09.480256879Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-lcns4,Uid:35d6d670-3213-45cd-86fd-0fd88c7f3b82,Namespace:calico-system,Attempt:1,} returns sandbox id \"d41448da809d27e59dbe19c082787c0d56cde3483d7d47231db34bd274c5db6c\"" Sep 6 01:20:09.541000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.541000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.541000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.541000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.541000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.541000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.541000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.541000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.541000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.541000 audit: BPF prog-id=207 op=LOAD Sep 6 01:20:09.541000 audit[4594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffefdb91f8 a2=40 a3=ffffefdb9228 items=0 ppid=4164 pid=4594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.541000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:20:09.544000 audit: BPF prog-id=207 op=UNLOAD Sep 6 01:20:09.544000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.544000 audit[4594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffefdb9310 a2=50 a3=0 items=0 ppid=4164 pid=4594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.544000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:20:09.554000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.554000 audit[4594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffefdb9268 a2=28 a3=ffffefdb9398 items=0 ppid=4164 pid=4594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.554000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:20:09.555000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.555000 audit[4594]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffefdb9298 a2=28 a3=ffffefdb93c8 items=0 ppid=4164 pid=4594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.555000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:20:09.555000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.555000 audit[4594]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffefdb9148 a2=28 a3=ffffefdb9278 items=0 ppid=4164 pid=4594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.555000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:20:09.555000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.555000 audit[4594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffefdb92b8 a2=28 a3=ffffefdb93e8 items=0 ppid=4164 pid=4594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.555000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:20:09.555000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.555000 audit[4594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffefdb9298 a2=28 a3=ffffefdb93c8 items=0 ppid=4164 pid=4594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.555000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:20:09.555000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.555000 audit[4594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffefdb9288 a2=28 a3=ffffefdb93b8 items=0 ppid=4164 pid=4594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.555000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:20:09.555000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.555000 audit[4594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffefdb92b8 a2=28 a3=ffffefdb93e8 items=0 ppid=4164 pid=4594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.555000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:20:09.556000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.556000 audit[4594]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffefdb9298 a2=28 a3=ffffefdb93c8 items=0 ppid=4164 pid=4594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.556000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:20:09.556000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.556000 audit[4594]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffefdb92b8 a2=28 a3=ffffefdb93e8 items=0 ppid=4164 pid=4594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.556000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:20:09.556000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.556000 audit[4594]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffefdb9288 a2=28 a3=ffffefdb93b8 items=0 ppid=4164 pid=4594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.556000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:20:09.556000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.556000 audit[4594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffefdb9308 a2=28 a3=ffffefdb9448 items=0 ppid=4164 pid=4594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.556000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:20:09.556000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.556000 audit[4594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffefdb9040 a2=50 a3=0 items=0 ppid=4164 pid=4594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.556000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:20:09.557000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.557000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.557000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.557000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.557000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.557000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.557000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.557000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.557000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.557000 audit: BPF prog-id=208 op=LOAD Sep 6 01:20:09.557000 audit[4594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffefdb9048 a2=94 a3=5 items=0 ppid=4164 pid=4594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.557000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:20:09.557000 audit: BPF prog-id=208 op=UNLOAD Sep 6 01:20:09.557000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.557000 audit[4594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffefdb9150 a2=50 a3=0 items=0 ppid=4164 pid=4594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.557000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:20:09.558000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.558000 audit[4594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffefdb9298 a2=4 a3=3 items=0 ppid=4164 pid=4594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.558000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:20:09.558000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.558000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.558000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.558000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.558000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.558000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.558000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.558000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.558000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.558000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.558000 audit[4594]: AVC avc: denied { confidentiality } for pid=4594 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 01:20:09.558000 audit[4594]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffefdb9278 a2=94 a3=6 items=0 ppid=4164 pid=4594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.558000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:20:09.559000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.559000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.559000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.559000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.559000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.559000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.559000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.559000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.559000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.559000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.559000 audit[4594]: AVC avc: denied { confidentiality } for pid=4594 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 01:20:09.559000 audit[4594]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffefdb8a48 a2=94 a3=83 items=0 ppid=4164 pid=4594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.559000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:20:09.560000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.560000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.560000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.560000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.560000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.560000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.560000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.560000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.560000 audit[4594]: AVC avc: denied { perfmon } for pid=4594 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.560000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.560000 audit[4594]: AVC avc: denied { confidentiality } for pid=4594 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 01:20:09.560000 audit[4594]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffefdb8a48 a2=94 a3=83 items=0 ppid=4164 pid=4594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.560000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:20:09.561000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.561000 audit[4594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffefdba488 a2=10 a3=ffffefdba578 items=0 ppid=4164 pid=4594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.561000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:20:09.561000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.561000 audit[4594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffefdba348 a2=10 a3=ffffefdba438 items=0 ppid=4164 pid=4594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.561000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:20:09.562000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.562000 audit[4594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffefdba2b8 a2=10 a3=ffffefdba438 items=0 ppid=4164 pid=4594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.562000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:20:09.562000 audit[4594]: AVC avc: denied { bpf } for pid=4594 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:09.562000 audit[4594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffefdba2b8 a2=10 a3=ffffefdba438 items=0 ppid=4164 pid=4594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.562000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:20:09.558000 audit: BPF prog-id=195 op=UNLOAD Sep 6 01:20:09.558000 audit[4164]: SYSCALL arch=c00000b7 syscall=101 success=yes exit=0 a0=ffff567da7f8 a1=0 a2=0 a3=0 items=0 ppid=3617 pid=4164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="calico-node" exe="/usr/bin/calico-node" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.558000 audit: PROCTITLE proctitle=63616C69636F2D6E6F6465002D66656C6978 Sep 6 01:20:09.784946 systemd-networkd[1603]: calidb512a19e11: Gained IPv6LL Sep 6 01:20:09.806000 audit[4719]: NETFILTER_CFG table=mangle:110 family=2 entries=16 op=nft_register_chain pid=4719 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 01:20:09.806000 audit[4719]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=ffffda806600 a2=0 a3=ffff874d5fa8 items=0 ppid=4164 pid=4719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.806000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 01:20:09.843000 audit[4720]: NETFILTER_CFG table=nat:111 family=2 entries=15 op=nft_register_chain pid=4720 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 01:20:09.849041 systemd-networkd[1603]: calib462757987d: Gained IPv6LL Sep 6 01:20:09.843000 audit[4720]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=fffff5b57230 a2=0 a3=ffff8e412fa8 items=0 ppid=4164 pid=4720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.843000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 01:20:09.904000 audit[4730]: NETFILTER_CFG table=filter:112 family=2 entries=14 op=nft_register_rule pid=4730 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:20:09.904000 audit[4730]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=fffff03f4860 a2=0 a3=1 items=0 ppid=2565 pid=4730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.904000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:20:09.909000 audit[4717]: NETFILTER_CFG table=raw:113 family=2 entries=21 op=nft_register_chain pid=4717 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 01:20:09.909000 audit[4717]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=ffffed7c3860 a2=0 a3=ffff88f5efa8 items=0 ppid=4164 pid=4717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.909000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 01:20:09.924000 audit[4730]: NETFILTER_CFG table=nat:114 family=2 entries=56 op=nft_register_chain pid=4730 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:20:09.924000 audit[4730]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19860 a0=3 a1=fffff03f4860 a2=0 a3=1 items=0 ppid=2565 pid=4730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.924000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:20:09.932000 audit[4723]: NETFILTER_CFG table=filter:115 family=2 entries=270 op=nft_register_chain pid=4723 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 01:20:09.932000 audit[4723]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=157804 a0=3 a1=fffff8ee70e0 a2=0 a3=ffffa9b04fa8 items=0 ppid=4164 pid=4723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:09.932000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 01:20:10.139000 audit[4738]: NETFILTER_CFG table=filter:116 family=2 entries=83 op=nft_register_chain pid=4738 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 01:20:10.139000 audit[4738]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=44948 a0=3 a1=fffffd341500 a2=0 a3=ffffb7daafa8 items=0 ppid=4164 pid=4738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:10.139000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 01:20:10.232957 systemd-networkd[1603]: calib861c1a8568: Gained IPv6LL Sep 6 01:20:10.488871 systemd-networkd[1603]: vxlan.calico: Gained IPv6LL Sep 6 01:20:10.489147 systemd-networkd[1603]: cali7864dda5a3d: Gained IPv6LL Sep 6 01:20:10.680875 systemd-networkd[1603]: calice2c190302a: Gained IPv6LL Sep 6 01:20:10.956113 env[1448]: time="2025-09-06T01:20:10.956049044Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:10.965592 env[1448]: time="2025-09-06T01:20:10.965522326Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:10.969619 env[1448]: time="2025-09-06T01:20:10.969573007Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:10.974262 env[1448]: time="2025-09-06T01:20:10.974201567Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:10.975266 env[1448]: time="2025-09-06T01:20:10.975225008Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08\"" Sep 6 01:20:10.977947 env[1448]: time="2025-09-06T01:20:10.977898328Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\"" Sep 6 01:20:10.985935 env[1448]: time="2025-09-06T01:20:10.985882769Z" level=info msg="CreateContainer within sandbox \"2e6641cde46fb9b0eff0717c5bcc9018c04326cd674a401b5ac91753ef4906b8\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 6 01:20:11.035428 env[1448]: time="2025-09-06T01:20:11.035375897Z" level=info msg="CreateContainer within sandbox \"2e6641cde46fb9b0eff0717c5bcc9018c04326cd674a401b5ac91753ef4906b8\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"27e96ef1d7838fabe021733390bdf00a1194303b8171304ff6eedface04b55e8\"" Sep 6 01:20:11.036379 env[1448]: time="2025-09-06T01:20:11.036346818Z" level=info msg="StartContainer for \"27e96ef1d7838fabe021733390bdf00a1194303b8171304ff6eedface04b55e8\"" Sep 6 01:20:11.057588 systemd[1]: Started cri-containerd-27e96ef1d7838fabe021733390bdf00a1194303b8171304ff6eedface04b55e8.scope. Sep 6 01:20:11.070293 systemd[1]: run-containerd-runc-k8s.io-27e96ef1d7838fabe021733390bdf00a1194303b8171304ff6eedface04b55e8-runc.JG9vSK.mount: Deactivated successfully. Sep 6 01:20:11.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.089000 audit: BPF prog-id=209 op=LOAD Sep 6 01:20:11.089000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.089000 audit[4750]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3891 pid=4750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:11.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237653936656631643738333866616265303231373333333930626466 Sep 6 01:20:11.089000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.089000 audit[4750]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3891 pid=4750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:11.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237653936656631643738333866616265303231373333333930626466 Sep 6 01:20:11.090000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.090000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.090000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.090000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.090000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.090000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.090000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.090000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.090000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.090000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.090000 audit: BPF prog-id=210 op=LOAD Sep 6 01:20:11.090000 audit[4750]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3891 pid=4750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:11.090000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237653936656631643738333866616265303231373333333930626466 Sep 6 01:20:11.090000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.090000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.090000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.090000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.090000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.090000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.090000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.090000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.090000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.090000 audit: BPF prog-id=211 op=LOAD Sep 6 01:20:11.090000 audit[4750]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3891 pid=4750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:11.090000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237653936656631643738333866616265303231373333333930626466 Sep 6 01:20:11.090000 audit: BPF prog-id=211 op=UNLOAD Sep 6 01:20:11.090000 audit: BPF prog-id=210 op=UNLOAD Sep 6 01:20:11.090000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.090000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.090000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.090000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.090000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.090000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.090000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.090000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.090000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.090000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:11.090000 audit: BPF prog-id=212 op=LOAD Sep 6 01:20:11.090000 audit[4750]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3891 pid=4750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:11.090000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237653936656631643738333866616265303231373333333930626466 Sep 6 01:20:11.117584 env[1448]: time="2025-09-06T01:20:11.117516871Z" level=info msg="StartContainer for \"27e96ef1d7838fabe021733390bdf00a1194303b8171304ff6eedface04b55e8\" returns successfully" Sep 6 01:20:11.879397 kubelet[2427]: I0906 01:20:11.879317 2427 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-58578c4b6-hf7h8" podStartSLOduration=30.938772991 podStartE2EDuration="35.879299155s" podCreationTimestamp="2025-09-06 01:19:36 +0000 UTC" firstStartedPulling="2025-09-06 01:20:06.036995924 +0000 UTC m=+48.672118779" lastFinishedPulling="2025-09-06 01:20:10.977522088 +0000 UTC m=+53.612644943" observedRunningTime="2025-09-06 01:20:11.878248714 +0000 UTC m=+54.513371609" watchObservedRunningTime="2025-09-06 01:20:11.879299155 +0000 UTC m=+54.514422010" Sep 6 01:20:11.915000 audit[4782]: NETFILTER_CFG table=filter:117 family=2 entries=14 op=nft_register_rule pid=4782 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:20:11.915000 audit[4782]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffce352810 a2=0 a3=1 items=0 ppid=2565 pid=4782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:11.915000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:20:11.922000 audit[4782]: NETFILTER_CFG table=nat:118 family=2 entries=20 op=nft_register_rule pid=4782 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:20:11.922000 audit[4782]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffce352810 a2=0 a3=1 items=0 ppid=2565 pid=4782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:11.922000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:20:12.953800 kernel: kauditd_printk_skb: 952 callbacks suppressed Sep 6 01:20:12.953983 kernel: audit: type=1400 audit(1757121612.939:1324): avc: denied { watch } for pid=4760 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_01_19_53.4025312255/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c54,c756 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c54,c756 tclass=file permissive=0 Sep 6 01:20:12.939000 audit[4760]: AVC avc: denied { watch } for pid=4760 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_01_19_53.4025312255/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c54,c756 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c54,c756 tclass=file permissive=0 Sep 6 01:20:12.939000 audit[4760]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000bd75a0 a2=fc6 a3=0 items=0 ppid=3891 pid=4760 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c54,c756 key=(null) Sep 6 01:20:13.011477 kernel: audit: type=1300 audit(1757121612.939:1324): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000bd75a0 a2=fc6 a3=0 items=0 ppid=3891 pid=4760 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c54,c756 key=(null) Sep 6 01:20:12.939000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 01:20:13.069511 kernel: audit: type=1327 audit(1757121612.939:1324): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 01:20:13.103000 audit[4786]: NETFILTER_CFG table=filter:119 family=2 entries=13 op=nft_register_rule pid=4786 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:20:13.103000 audit[4786]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffe00584e0 a2=0 a3=1 items=0 ppid=2565 pid=4786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:13.152815 kernel: audit: type=1325 audit(1757121613.103:1325): table=filter:119 family=2 entries=13 op=nft_register_rule pid=4786 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:20:13.152996 kernel: audit: type=1300 audit(1757121613.103:1325): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffe00584e0 a2=0 a3=1 items=0 ppid=2565 pid=4786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:13.103000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:20:13.172023 kernel: audit: type=1327 audit(1757121613.103:1325): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:20:13.121000 audit[4786]: NETFILTER_CFG table=nat:120 family=2 entries=27 op=nft_register_chain pid=4786 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:20:13.195434 kernel: audit: type=1325 audit(1757121613.121:1326): table=nat:120 family=2 entries=27 op=nft_register_chain pid=4786 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:20:13.121000 audit[4786]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=9348 a0=3 a1=ffffe00584e0 a2=0 a3=1 items=0 ppid=2565 pid=4786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:13.247907 kernel: audit: type=1300 audit(1757121613.121:1326): arch=c00000b7 syscall=211 success=yes exit=9348 a0=3 a1=ffffe00584e0 a2=0 a3=1 items=0 ppid=2565 pid=4786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:13.121000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:20:13.297177 kernel: audit: type=1327 audit(1757121613.121:1326): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:20:13.398000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:20:13.424795 kernel: audit: type=1400 audit(1757121613.398:1327): avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:20:13.398000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=70 a1=4010701dd0 a2=fc6 a3=0 items=0 ppid=2166 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 key=(null) Sep 6 01:20:13.398000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:20:13.398000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:20:13.398000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=70 a1=4004e10d60 a2=fc6 a3=0 items=0 ppid=2166 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 key=(null) Sep 6 01:20:13.398000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:20:13.398000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:20:13.398000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=70 a1=4006c75680 a2=fc6 a3=0 items=0 ppid=2166 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 key=(null) Sep 6 01:20:13.398000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:20:13.453000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:20:13.453000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=70 a1=4006c75b90 a2=fc6 a3=0 items=0 ppid=2166 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 key=(null) Sep 6 01:20:13.453000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:20:13.561000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:20:13.561000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=70 a1=4004e111a0 a2=fc6 a3=0 items=0 ppid=2166 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 key=(null) Sep 6 01:20:13.561000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:20:13.563000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:20:13.563000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=70 a1=4006c75bf0 a2=fc6 a3=0 items=0 ppid=2166 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 key=(null) Sep 6 01:20:13.563000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:20:13.832625 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2455876893.mount: Deactivated successfully. Sep 6 01:20:13.969000 audit[2247]: AVC avc: denied { watch } for pid=2247 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:20:13.969000 audit[2247]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000e69c20 a2=fc6 a3=0 items=0 ppid=2108 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 key=(null) Sep 6 01:20:13.969000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:20:13.969000 audit[2247]: AVC avc: denied { watch } for pid=2247 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:20:13.969000 audit[2247]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40027d2c40 a2=fc6 a3=0 items=0 ppid=2108 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 key=(null) Sep 6 01:20:13.969000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:20:14.175482 env[1448]: time="2025-09-06T01:20:14.175346239Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:14.183336 env[1448]: time="2025-09-06T01:20:14.183272600Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e210e86234bc99f018431b30477c5ca2ad6f7ecf67ef011498f7beb48fb0b21f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:14.190566 env[1448]: time="2025-09-06T01:20:14.190516362Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:14.196035 env[1448]: time="2025-09-06T01:20:14.195980762Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:29becebc47401da9997a2a30f4c25c511a5f379d17275680b048224829af71a5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:14.196713 env[1448]: time="2025-09-06T01:20:14.196675123Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\" returns image reference \"sha256:e210e86234bc99f018431b30477c5ca2ad6f7ecf67ef011498f7beb48fb0b21f\"" Sep 6 01:20:14.198699 env[1448]: time="2025-09-06T01:20:14.198325723Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\"" Sep 6 01:20:14.200064 env[1448]: time="2025-09-06T01:20:14.200004243Z" level=info msg="CreateContainer within sandbox \"57b38ba72db77ae2c64387165895b52cd886fc7cde0e92e0e45f6c728ab7132f\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Sep 6 01:20:14.240058 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2906014212.mount: Deactivated successfully. Sep 6 01:20:14.266401 env[1448]: time="2025-09-06T01:20:14.266349533Z" level=info msg="CreateContainer within sandbox \"57b38ba72db77ae2c64387165895b52cd886fc7cde0e92e0e45f6c728ab7132f\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"f354bd06dba4df9c8549541d22e2f64281375e4740fdbca3fb94b39839553cda\"" Sep 6 01:20:14.268668 env[1448]: time="2025-09-06T01:20:14.267505214Z" level=info msg="StartContainer for \"f354bd06dba4df9c8549541d22e2f64281375e4740fdbca3fb94b39839553cda\"" Sep 6 01:20:14.303035 systemd[1]: Started cri-containerd-f354bd06dba4df9c8549541d22e2f64281375e4740fdbca3fb94b39839553cda.scope. Sep 6 01:20:14.317000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.317000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.317000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.317000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.317000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.317000 audit: BPF prog-id=213 op=LOAD Sep 6 01:20:14.318000 audit[4795]: AVC avc: denied { bpf } for pid=4795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.318000 audit[4795]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3742 pid=4795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:14.318000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633353462643036646261346466396338353439353431643232653266 Sep 6 01:20:14.318000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.318000 audit[4795]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3742 pid=4795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:14.318000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633353462643036646261346466396338353439353431643232653266 Sep 6 01:20:14.319000 audit[4795]: AVC avc: denied { bpf } for pid=4795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.319000 audit[4795]: AVC avc: denied { bpf } for pid=4795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.319000 audit[4795]: AVC avc: denied { bpf } for pid=4795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.319000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.319000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.319000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.319000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.319000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.319000 audit[4795]: AVC avc: denied { bpf } for pid=4795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.319000 audit[4795]: AVC avc: denied { bpf } for pid=4795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.319000 audit: BPF prog-id=214 op=LOAD Sep 6 01:20:14.319000 audit[4795]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3742 pid=4795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:14.319000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633353462643036646261346466396338353439353431643232653266 Sep 6 01:20:14.320000 audit[4795]: AVC avc: denied { bpf } for pid=4795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.320000 audit[4795]: AVC avc: denied { bpf } for pid=4795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.320000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.320000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.320000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.320000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.320000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.320000 audit[4795]: AVC avc: denied { bpf } for pid=4795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.320000 audit[4795]: AVC avc: denied { bpf } for pid=4795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.320000 audit: BPF prog-id=215 op=LOAD Sep 6 01:20:14.320000 audit[4795]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3742 pid=4795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:14.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633353462643036646261346466396338353439353431643232653266 Sep 6 01:20:14.320000 audit: BPF prog-id=215 op=UNLOAD Sep 6 01:20:14.320000 audit: BPF prog-id=214 op=UNLOAD Sep 6 01:20:14.320000 audit[4795]: AVC avc: denied { bpf } for pid=4795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.320000 audit[4795]: AVC avc: denied { bpf } for pid=4795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.320000 audit[4795]: AVC avc: denied { bpf } for pid=4795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.320000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.320000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.320000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.320000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.320000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.320000 audit[4795]: AVC avc: denied { bpf } for pid=4795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.320000 audit[4795]: AVC avc: denied { bpf } for pid=4795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:14.320000 audit: BPF prog-id=216 op=LOAD Sep 6 01:20:14.320000 audit[4795]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3742 pid=4795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:14.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633353462643036646261346466396338353439353431643232653266 Sep 6 01:20:14.349371 env[1448]: time="2025-09-06T01:20:14.349313186Z" level=info msg="StartContainer for \"f354bd06dba4df9c8549541d22e2f64281375e4740fdbca3fb94b39839553cda\" returns successfully" Sep 6 01:20:14.913000 audit[4831]: NETFILTER_CFG table=filter:121 family=2 entries=11 op=nft_register_rule pid=4831 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:20:14.913000 audit[4831]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffdac9ed20 a2=0 a3=1 items=0 ppid=2565 pid=4831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:14.913000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:20:14.917000 audit[4831]: NETFILTER_CFG table=nat:122 family=2 entries=29 op=nft_register_chain pid=4831 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:20:14.917000 audit[4831]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffdac9ed20 a2=0 a3=1 items=0 ppid=2565 pid=4831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:14.917000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:20:15.235872 systemd[1]: run-containerd-runc-k8s.io-f354bd06dba4df9c8549541d22e2f64281375e4740fdbca3fb94b39839553cda-runc.zi6b8p.mount: Deactivated successfully. Sep 6 01:20:17.238558 env[1448]: time="2025-09-06T01:20:17.238512547Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:17.246603 env[1448]: time="2025-09-06T01:20:17.246552828Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:34117caf92350e1565610f2254377d7455b11e36666b5ce11b4a13670720432a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:17.255853 env[1448]: time="2025-09-06T01:20:17.255811949Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:17.263405 env[1448]: time="2025-09-06T01:20:17.263353830Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:27c4187717f08f0a5727019d8beb7597665eb47e69eaa1d7d091a7e28913e577,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:17.264111 env[1448]: time="2025-09-06T01:20:17.264081430Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\" returns image reference \"sha256:34117caf92350e1565610f2254377d7455b11e36666b5ce11b4a13670720432a\"" Sep 6 01:20:17.268052 env[1448]: time="2025-09-06T01:20:17.267996311Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\"" Sep 6 01:20:17.283374 env[1448]: time="2025-09-06T01:20:17.283331153Z" level=info msg="CreateContainer within sandbox \"0c84ce2bba4634f661bb831634c5438a140bc8b3c29a12b1855a78c74340c325\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Sep 6 01:20:17.328500 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3253429232.mount: Deactivated successfully. Sep 6 01:20:17.338000 audit[2247]: AVC avc: denied { watch } for pid=2247 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:20:17.338000 audit[2247]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40027d3240 a2=fc6 a3=0 items=0 ppid=2108 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 key=(null) Sep 6 01:20:17.338000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:20:17.339000 audit[2247]: AVC avc: denied { watch } for pid=2247 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:20:17.339000 audit[2247]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40027d3260 a2=fc6 a3=0 items=0 ppid=2108 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 key=(null) Sep 6 01:20:17.339000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:20:17.339000 audit[2247]: AVC avc: denied { watch } for pid=2247 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:20:17.339000 audit[2247]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000bd1560 a2=fc6 a3=0 items=0 ppid=2108 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 key=(null) Sep 6 01:20:17.339000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:20:17.340000 audit[2247]: AVC avc: denied { watch } for pid=2247 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:20:17.340000 audit[2247]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000bd17c0 a2=fc6 a3=0 items=0 ppid=2108 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 key=(null) Sep 6 01:20:17.340000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:20:17.352809 env[1448]: time="2025-09-06T01:20:17.352740243Z" level=info msg="CreateContainer within sandbox \"0c84ce2bba4634f661bb831634c5438a140bc8b3c29a12b1855a78c74340c325\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"6ff4a978538971429ef0a1549370698ae3f6d7fa91cf3d17a01ad95f2ac53ca8\"" Sep 6 01:20:17.355181 env[1448]: time="2025-09-06T01:20:17.355122084Z" level=info msg="StartContainer for \"6ff4a978538971429ef0a1549370698ae3f6d7fa91cf3d17a01ad95f2ac53ca8\"" Sep 6 01:20:17.379270 systemd[1]: Started cri-containerd-6ff4a978538971429ef0a1549370698ae3f6d7fa91cf3d17a01ad95f2ac53ca8.scope. Sep 6 01:20:17.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.396000 audit: BPF prog-id=217 op=LOAD Sep 6 01:20:17.397000 audit[4846]: AVC avc: denied { bpf } for pid=4846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.397000 audit[4846]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4342 pid=4846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:17.397000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666663461393738353338393731343239656630613135343933373036 Sep 6 01:20:17.397000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.397000 audit[4846]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4342 pid=4846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:17.397000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666663461393738353338393731343239656630613135343933373036 Sep 6 01:20:17.397000 audit[4846]: AVC avc: denied { bpf } for pid=4846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.397000 audit[4846]: AVC avc: denied { bpf } for pid=4846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.397000 audit[4846]: AVC avc: denied { bpf } for pid=4846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.397000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.397000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.397000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.397000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.397000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.397000 audit[4846]: AVC avc: denied { bpf } for pid=4846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.397000 audit[4846]: AVC avc: denied { bpf } for pid=4846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.397000 audit: BPF prog-id=218 op=LOAD Sep 6 01:20:17.397000 audit[4846]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4342 pid=4846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:17.397000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666663461393738353338393731343239656630613135343933373036 Sep 6 01:20:17.397000 audit[4846]: AVC avc: denied { bpf } for pid=4846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.397000 audit[4846]: AVC avc: denied { bpf } for pid=4846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.397000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.397000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.397000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.397000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.397000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.397000 audit[4846]: AVC avc: denied { bpf } for pid=4846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.397000 audit[4846]: AVC avc: denied { bpf } for pid=4846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.397000 audit: BPF prog-id=219 op=LOAD Sep 6 01:20:17.397000 audit[4846]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4342 pid=4846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:17.397000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666663461393738353338393731343239656630613135343933373036 Sep 6 01:20:17.397000 audit: BPF prog-id=219 op=UNLOAD Sep 6 01:20:17.397000 audit: BPF prog-id=218 op=UNLOAD Sep 6 01:20:17.397000 audit[4846]: AVC avc: denied { bpf } for pid=4846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.397000 audit[4846]: AVC avc: denied { bpf } for pid=4846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.397000 audit[4846]: AVC avc: denied { bpf } for pid=4846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.397000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.397000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.397000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.397000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.397000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.397000 audit[4846]: AVC avc: denied { bpf } for pid=4846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.397000 audit[4846]: AVC avc: denied { bpf } for pid=4846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:17.397000 audit: BPF prog-id=220 op=LOAD Sep 6 01:20:17.397000 audit[4846]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4342 pid=4846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:17.397000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666663461393738353338393731343239656630613135343933373036 Sep 6 01:20:17.425522 env[1448]: time="2025-09-06T01:20:17.425467134Z" level=info msg="StartContainer for \"6ff4a978538971429ef0a1549370698ae3f6d7fa91cf3d17a01ad95f2ac53ca8\" returns successfully" Sep 6 01:20:17.597823 env[1448]: time="2025-09-06T01:20:17.597734760Z" level=info msg="StopPodSandbox for \"86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845\"" Sep 6 01:20:17.718902 env[1448]: 2025-09-06 01:20:17.654 [WARNING][4891] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-whisker--665b77cb9--5hlcs-eth0" Sep 6 01:20:17.718902 env[1448]: 2025-09-06 01:20:17.654 [INFO][4891] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" Sep 6 01:20:17.718902 env[1448]: 2025-09-06 01:20:17.654 [INFO][4891] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" iface="eth0" netns="" Sep 6 01:20:17.718902 env[1448]: 2025-09-06 01:20:17.654 [INFO][4891] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" Sep 6 01:20:17.718902 env[1448]: 2025-09-06 01:20:17.654 [INFO][4891] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" Sep 6 01:20:17.718902 env[1448]: 2025-09-06 01:20:17.696 [INFO][4901] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" HandleID="k8s-pod-network.86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-whisker--665b77cb9--5hlcs-eth0" Sep 6 01:20:17.718902 env[1448]: 2025-09-06 01:20:17.696 [INFO][4901] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:17.718902 env[1448]: 2025-09-06 01:20:17.696 [INFO][4901] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:17.718902 env[1448]: 2025-09-06 01:20:17.714 [WARNING][4901] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" HandleID="k8s-pod-network.86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-whisker--665b77cb9--5hlcs-eth0" Sep 6 01:20:17.718902 env[1448]: 2025-09-06 01:20:17.714 [INFO][4901] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" HandleID="k8s-pod-network.86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-whisker--665b77cb9--5hlcs-eth0" Sep 6 01:20:17.718902 env[1448]: 2025-09-06 01:20:17.716 [INFO][4901] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:17.718902 env[1448]: 2025-09-06 01:20:17.717 [INFO][4891] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" Sep 6 01:20:17.719342 env[1448]: time="2025-09-06T01:20:17.718933098Z" level=info msg="TearDown network for sandbox \"86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845\" successfully" Sep 6 01:20:17.719342 env[1448]: time="2025-09-06T01:20:17.718971778Z" level=info msg="StopPodSandbox for \"86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845\" returns successfully" Sep 6 01:20:17.719694 env[1448]: time="2025-09-06T01:20:17.719658378Z" level=info msg="RemovePodSandbox for \"86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845\"" Sep 6 01:20:17.719911 env[1448]: time="2025-09-06T01:20:17.719833898Z" level=info msg="Forcibly stopping sandbox \"86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845\"" Sep 6 01:20:17.834499 env[1448]: 2025-09-06 01:20:17.773 [WARNING][4915] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" WorkloadEndpoint="ci--3510.3.8--n--f2ea6194e4-k8s-whisker--665b77cb9--5hlcs-eth0" Sep 6 01:20:17.834499 env[1448]: 2025-09-06 01:20:17.773 [INFO][4915] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" Sep 6 01:20:17.834499 env[1448]: 2025-09-06 01:20:17.773 [INFO][4915] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" iface="eth0" netns="" Sep 6 01:20:17.834499 env[1448]: 2025-09-06 01:20:17.773 [INFO][4915] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" Sep 6 01:20:17.834499 env[1448]: 2025-09-06 01:20:17.773 [INFO][4915] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" Sep 6 01:20:17.834499 env[1448]: 2025-09-06 01:20:17.802 [INFO][4923] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" HandleID="k8s-pod-network.86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-whisker--665b77cb9--5hlcs-eth0" Sep 6 01:20:17.834499 env[1448]: 2025-09-06 01:20:17.803 [INFO][4923] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:17.834499 env[1448]: 2025-09-06 01:20:17.803 [INFO][4923] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:17.834499 env[1448]: 2025-09-06 01:20:17.824 [WARNING][4923] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" HandleID="k8s-pod-network.86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-whisker--665b77cb9--5hlcs-eth0" Sep 6 01:20:17.834499 env[1448]: 2025-09-06 01:20:17.824 [INFO][4923] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" HandleID="k8s-pod-network.86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-whisker--665b77cb9--5hlcs-eth0" Sep 6 01:20:17.834499 env[1448]: 2025-09-06 01:20:17.828 [INFO][4923] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:17.834499 env[1448]: 2025-09-06 01:20:17.830 [INFO][4915] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845" Sep 6 01:20:17.834499 env[1448]: time="2025-09-06T01:20:17.834375995Z" level=info msg="TearDown network for sandbox \"86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845\" successfully" Sep 6 01:20:17.855800 env[1448]: time="2025-09-06T01:20:17.855656558Z" level=info msg="RemovePodSandbox \"86103625d1f9b48918f4c69095cb18bed9a8bea0b58c3af53983825bebbb5845\" returns successfully" Sep 6 01:20:17.856990 env[1448]: time="2025-09-06T01:20:17.856956278Z" level=info msg="StopPodSandbox for \"a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628\"" Sep 6 01:20:17.909730 kubelet[2427]: I0906 01:20:17.909481 2427 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-5ddcbb448c-gvtjx" podStartSLOduration=27.394621292 podStartE2EDuration="35.909463406s" podCreationTimestamp="2025-09-06 01:19:42 +0000 UTC" firstStartedPulling="2025-09-06 01:20:08.750465236 +0000 UTC m=+51.385588091" lastFinishedPulling="2025-09-06 01:20:17.26530735 +0000 UTC m=+59.900430205" observedRunningTime="2025-09-06 01:20:17.908766926 +0000 UTC m=+60.543889821" watchObservedRunningTime="2025-09-06 01:20:17.909463406 +0000 UTC m=+60.544586221" Sep 6 01:20:17.909730 kubelet[2427]: I0906 01:20:17.909588 2427 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-56499599bd-6sm55" podStartSLOduration=5.838215004 podStartE2EDuration="14.909583086s" podCreationTimestamp="2025-09-06 01:20:03 +0000 UTC" firstStartedPulling="2025-09-06 01:20:05.126810081 +0000 UTC m=+47.761932936" lastFinishedPulling="2025-09-06 01:20:14.198178203 +0000 UTC m=+56.833301018" observedRunningTime="2025-09-06 01:20:14.893540551 +0000 UTC m=+57.528663406" watchObservedRunningTime="2025-09-06 01:20:17.909583086 +0000 UTC m=+60.544705941" Sep 6 01:20:17.980619 env[1448]: 2025-09-06 01:20:17.916 [WARNING][4937] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--f2ea6194e4-k8s-csi--node--driver--lcns4-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"35d6d670-3213-45cd-86fd-0fd88c7f3b82", ResourceVersion:"969", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 19, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-f2ea6194e4", ContainerID:"d41448da809d27e59dbe19c082787c0d56cde3483d7d47231db34bd274c5db6c", Pod:"csi-node-driver-lcns4", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.5.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calice2c190302a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:20:17.980619 env[1448]: 2025-09-06 01:20:17.916 [INFO][4937] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" Sep 6 01:20:17.980619 env[1448]: 2025-09-06 01:20:17.916 [INFO][4937] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" iface="eth0" netns="" Sep 6 01:20:17.980619 env[1448]: 2025-09-06 01:20:17.916 [INFO][4937] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" Sep 6 01:20:17.980619 env[1448]: 2025-09-06 01:20:17.916 [INFO][4937] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" Sep 6 01:20:17.980619 env[1448]: 2025-09-06 01:20:17.963 [INFO][4955] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" HandleID="k8s-pod-network.a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-csi--node--driver--lcns4-eth0" Sep 6 01:20:17.980619 env[1448]: 2025-09-06 01:20:17.963 [INFO][4955] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:17.980619 env[1448]: 2025-09-06 01:20:17.963 [INFO][4955] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:17.980619 env[1448]: 2025-09-06 01:20:17.976 [WARNING][4955] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" HandleID="k8s-pod-network.a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-csi--node--driver--lcns4-eth0" Sep 6 01:20:17.980619 env[1448]: 2025-09-06 01:20:17.976 [INFO][4955] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" HandleID="k8s-pod-network.a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-csi--node--driver--lcns4-eth0" Sep 6 01:20:17.980619 env[1448]: 2025-09-06 01:20:17.978 [INFO][4955] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:17.980619 env[1448]: 2025-09-06 01:20:17.979 [INFO][4937] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" Sep 6 01:20:17.981113 env[1448]: time="2025-09-06T01:20:17.980653137Z" level=info msg="TearDown network for sandbox \"a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628\" successfully" Sep 6 01:20:17.981113 env[1448]: time="2025-09-06T01:20:17.980684417Z" level=info msg="StopPodSandbox for \"a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628\" returns successfully" Sep 6 01:20:17.982075 env[1448]: time="2025-09-06T01:20:17.982028537Z" level=info msg="RemovePodSandbox for \"a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628\"" Sep 6 01:20:17.982193 env[1448]: time="2025-09-06T01:20:17.982070257Z" level=info msg="Forcibly stopping sandbox \"a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628\"" Sep 6 01:20:18.070677 env[1448]: 2025-09-06 01:20:18.033 [WARNING][4979] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--f2ea6194e4-k8s-csi--node--driver--lcns4-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"35d6d670-3213-45cd-86fd-0fd88c7f3b82", ResourceVersion:"969", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 19, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-f2ea6194e4", ContainerID:"d41448da809d27e59dbe19c082787c0d56cde3483d7d47231db34bd274c5db6c", Pod:"csi-node-driver-lcns4", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.5.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calice2c190302a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:20:18.070677 env[1448]: 2025-09-06 01:20:18.033 [INFO][4979] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" Sep 6 01:20:18.070677 env[1448]: 2025-09-06 01:20:18.033 [INFO][4979] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" iface="eth0" netns="" Sep 6 01:20:18.070677 env[1448]: 2025-09-06 01:20:18.033 [INFO][4979] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" Sep 6 01:20:18.070677 env[1448]: 2025-09-06 01:20:18.033 [INFO][4979] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" Sep 6 01:20:18.070677 env[1448]: 2025-09-06 01:20:18.055 [INFO][4987] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" HandleID="k8s-pod-network.a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-csi--node--driver--lcns4-eth0" Sep 6 01:20:18.070677 env[1448]: 2025-09-06 01:20:18.055 [INFO][4987] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:18.070677 env[1448]: 2025-09-06 01:20:18.055 [INFO][4987] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:18.070677 env[1448]: 2025-09-06 01:20:18.065 [WARNING][4987] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" HandleID="k8s-pod-network.a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-csi--node--driver--lcns4-eth0" Sep 6 01:20:18.070677 env[1448]: 2025-09-06 01:20:18.065 [INFO][4987] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" HandleID="k8s-pod-network.a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-csi--node--driver--lcns4-eth0" Sep 6 01:20:18.070677 env[1448]: 2025-09-06 01:20:18.067 [INFO][4987] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:18.070677 env[1448]: 2025-09-06 01:20:18.069 [INFO][4979] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628" Sep 6 01:20:18.071175 env[1448]: time="2025-09-06T01:20:18.070712430Z" level=info msg="TearDown network for sandbox \"a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628\" successfully" Sep 6 01:20:18.092958 env[1448]: time="2025-09-06T01:20:18.092890713Z" level=info msg="RemovePodSandbox \"a37845bb166dfc57856f6e2fd61772b3c51333cc11faf5298422ba8b71a16628\" returns successfully" Sep 6 01:20:18.093465 env[1448]: time="2025-09-06T01:20:18.093436873Z" level=info msg="StopPodSandbox for \"cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995\"" Sep 6 01:20:18.171126 env[1448]: 2025-09-06 01:20:18.135 [WARNING][5001] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--hhptn-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"a5d30df2-fe35-44e2-8d6b-667a4a2edd11", ResourceVersion:"972", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 19, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-f2ea6194e4", ContainerID:"1d154e0e505bd19beef4ebc496c6b4566c8fb5104a8ceb716e9fafe8498dd088", Pod:"coredns-668d6bf9bc-hhptn", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.5.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib861c1a8568", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:20:18.171126 env[1448]: 2025-09-06 01:20:18.136 [INFO][5001] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" Sep 6 01:20:18.171126 env[1448]: 2025-09-06 01:20:18.136 [INFO][5001] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" iface="eth0" netns="" Sep 6 01:20:18.171126 env[1448]: 2025-09-06 01:20:18.136 [INFO][5001] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" Sep 6 01:20:18.171126 env[1448]: 2025-09-06 01:20:18.136 [INFO][5001] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" Sep 6 01:20:18.171126 env[1448]: 2025-09-06 01:20:18.157 [INFO][5008] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" HandleID="k8s-pod-network.cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--hhptn-eth0" Sep 6 01:20:18.171126 env[1448]: 2025-09-06 01:20:18.157 [INFO][5008] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:18.171126 env[1448]: 2025-09-06 01:20:18.157 [INFO][5008] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:18.171126 env[1448]: 2025-09-06 01:20:18.166 [WARNING][5008] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" HandleID="k8s-pod-network.cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--hhptn-eth0" Sep 6 01:20:18.171126 env[1448]: 2025-09-06 01:20:18.166 [INFO][5008] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" HandleID="k8s-pod-network.cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--hhptn-eth0" Sep 6 01:20:18.171126 env[1448]: 2025-09-06 01:20:18.167 [INFO][5008] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:18.171126 env[1448]: 2025-09-06 01:20:18.169 [INFO][5001] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" Sep 6 01:20:18.171668 env[1448]: time="2025-09-06T01:20:18.171618085Z" level=info msg="TearDown network for sandbox \"cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995\" successfully" Sep 6 01:20:18.171756 env[1448]: time="2025-09-06T01:20:18.171727405Z" level=info msg="StopPodSandbox for \"cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995\" returns successfully" Sep 6 01:20:18.173270 env[1448]: time="2025-09-06T01:20:18.173239205Z" level=info msg="RemovePodSandbox for \"cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995\"" Sep 6 01:20:18.173578 env[1448]: time="2025-09-06T01:20:18.173518445Z" level=info msg="Forcibly stopping sandbox \"cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995\"" Sep 6 01:20:18.246646 env[1448]: 2025-09-06 01:20:18.211 [WARNING][5022] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--hhptn-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"a5d30df2-fe35-44e2-8d6b-667a4a2edd11", ResourceVersion:"972", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 19, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-f2ea6194e4", ContainerID:"1d154e0e505bd19beef4ebc496c6b4566c8fb5104a8ceb716e9fafe8498dd088", Pod:"coredns-668d6bf9bc-hhptn", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.5.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib861c1a8568", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:20:18.246646 env[1448]: 2025-09-06 01:20:18.211 [INFO][5022] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" Sep 6 01:20:18.246646 env[1448]: 2025-09-06 01:20:18.211 [INFO][5022] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" iface="eth0" netns="" Sep 6 01:20:18.246646 env[1448]: 2025-09-06 01:20:18.211 [INFO][5022] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" Sep 6 01:20:18.246646 env[1448]: 2025-09-06 01:20:18.211 [INFO][5022] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" Sep 6 01:20:18.246646 env[1448]: 2025-09-06 01:20:18.232 [INFO][5030] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" HandleID="k8s-pod-network.cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--hhptn-eth0" Sep 6 01:20:18.246646 env[1448]: 2025-09-06 01:20:18.232 [INFO][5030] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:18.246646 env[1448]: 2025-09-06 01:20:18.232 [INFO][5030] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:18.246646 env[1448]: 2025-09-06 01:20:18.241 [WARNING][5030] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" HandleID="k8s-pod-network.cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--hhptn-eth0" Sep 6 01:20:18.246646 env[1448]: 2025-09-06 01:20:18.241 [INFO][5030] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" HandleID="k8s-pod-network.cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--hhptn-eth0" Sep 6 01:20:18.246646 env[1448]: 2025-09-06 01:20:18.243 [INFO][5030] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:18.246646 env[1448]: 2025-09-06 01:20:18.245 [INFO][5022] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995" Sep 6 01:20:18.247430 env[1448]: time="2025-09-06T01:20:18.247376336Z" level=info msg="TearDown network for sandbox \"cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995\" successfully" Sep 6 01:20:18.258515 env[1448]: time="2025-09-06T01:20:18.258464898Z" level=info msg="RemovePodSandbox \"cfcd047f78c934b300e6b3c578b1861248e168899f39fe9d5db3ea0c8651a995\" returns successfully" Sep 6 01:20:18.259258 env[1448]: time="2025-09-06T01:20:18.259187618Z" level=info msg="StopPodSandbox for \"2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249\"" Sep 6 01:20:18.343835 env[1448]: 2025-09-06 01:20:18.301 [WARNING][5046] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--f2ea6194e4-k8s-calico--kube--controllers--5ddcbb448c--gvtjx-eth0", GenerateName:"calico-kube-controllers-5ddcbb448c-", Namespace:"calico-system", SelfLink:"", UID:"91cf3a26-dfb6-4f8b-b9c3-46758ab8c6b5", ResourceVersion:"1025", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 19, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5ddcbb448c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-f2ea6194e4", ContainerID:"0c84ce2bba4634f661bb831634c5438a140bc8b3c29a12b1855a78c74340c325", Pod:"calico-kube-controllers-5ddcbb448c-gvtjx", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.5.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calib462757987d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:20:18.343835 env[1448]: 2025-09-06 01:20:18.305 [INFO][5046] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" Sep 6 01:20:18.343835 env[1448]: 2025-09-06 01:20:18.305 [INFO][5046] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" iface="eth0" netns="" Sep 6 01:20:18.343835 env[1448]: 2025-09-06 01:20:18.305 [INFO][5046] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" Sep 6 01:20:18.343835 env[1448]: 2025-09-06 01:20:18.305 [INFO][5046] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" Sep 6 01:20:18.343835 env[1448]: 2025-09-06 01:20:18.327 [INFO][5053] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" HandleID="k8s-pod-network.2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--kube--controllers--5ddcbb448c--gvtjx-eth0" Sep 6 01:20:18.343835 env[1448]: 2025-09-06 01:20:18.327 [INFO][5053] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:18.343835 env[1448]: 2025-09-06 01:20:18.327 [INFO][5053] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:18.343835 env[1448]: 2025-09-06 01:20:18.338 [WARNING][5053] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" HandleID="k8s-pod-network.2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--kube--controllers--5ddcbb448c--gvtjx-eth0" Sep 6 01:20:18.343835 env[1448]: 2025-09-06 01:20:18.338 [INFO][5053] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" HandleID="k8s-pod-network.2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--kube--controllers--5ddcbb448c--gvtjx-eth0" Sep 6 01:20:18.343835 env[1448]: 2025-09-06 01:20:18.340 [INFO][5053] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:18.343835 env[1448]: 2025-09-06 01:20:18.341 [INFO][5046] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" Sep 6 01:20:18.344377 env[1448]: time="2025-09-06T01:20:18.344341150Z" level=info msg="TearDown network for sandbox \"2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249\" successfully" Sep 6 01:20:18.344442 env[1448]: time="2025-09-06T01:20:18.344425550Z" level=info msg="StopPodSandbox for \"2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249\" returns successfully" Sep 6 01:20:18.345115 env[1448]: time="2025-09-06T01:20:18.345075470Z" level=info msg="RemovePodSandbox for \"2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249\"" Sep 6 01:20:18.345225 env[1448]: time="2025-09-06T01:20:18.345118950Z" level=info msg="Forcibly stopping sandbox \"2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249\"" Sep 6 01:20:18.426318 env[1448]: 2025-09-06 01:20:18.392 [WARNING][5068] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--f2ea6194e4-k8s-calico--kube--controllers--5ddcbb448c--gvtjx-eth0", GenerateName:"calico-kube-controllers-5ddcbb448c-", Namespace:"calico-system", SelfLink:"", UID:"91cf3a26-dfb6-4f8b-b9c3-46758ab8c6b5", ResourceVersion:"1025", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 19, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5ddcbb448c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-f2ea6194e4", ContainerID:"0c84ce2bba4634f661bb831634c5438a140bc8b3c29a12b1855a78c74340c325", Pod:"calico-kube-controllers-5ddcbb448c-gvtjx", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.5.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calib462757987d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:20:18.426318 env[1448]: 2025-09-06 01:20:18.392 [INFO][5068] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" Sep 6 01:20:18.426318 env[1448]: 2025-09-06 01:20:18.392 [INFO][5068] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" iface="eth0" netns="" Sep 6 01:20:18.426318 env[1448]: 2025-09-06 01:20:18.392 [INFO][5068] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" Sep 6 01:20:18.426318 env[1448]: 2025-09-06 01:20:18.392 [INFO][5068] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" Sep 6 01:20:18.426318 env[1448]: 2025-09-06 01:20:18.413 [INFO][5075] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" HandleID="k8s-pod-network.2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--kube--controllers--5ddcbb448c--gvtjx-eth0" Sep 6 01:20:18.426318 env[1448]: 2025-09-06 01:20:18.413 [INFO][5075] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:18.426318 env[1448]: 2025-09-06 01:20:18.413 [INFO][5075] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:18.426318 env[1448]: 2025-09-06 01:20:18.421 [WARNING][5075] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" HandleID="k8s-pod-network.2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--kube--controllers--5ddcbb448c--gvtjx-eth0" Sep 6 01:20:18.426318 env[1448]: 2025-09-06 01:20:18.421 [INFO][5075] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" HandleID="k8s-pod-network.2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--kube--controllers--5ddcbb448c--gvtjx-eth0" Sep 6 01:20:18.426318 env[1448]: 2025-09-06 01:20:18.423 [INFO][5075] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:18.426318 env[1448]: 2025-09-06 01:20:18.424 [INFO][5068] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249" Sep 6 01:20:18.426318 env[1448]: time="2025-09-06T01:20:18.426154962Z" level=info msg="TearDown network for sandbox \"2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249\" successfully" Sep 6 01:20:18.439825 env[1448]: time="2025-09-06T01:20:18.439739284Z" level=info msg="RemovePodSandbox \"2dd2f44a3f29d84990696460f0efadbb559c243f0d5b75e1e84e122395d7f249\" returns successfully" Sep 6 01:20:18.440462 env[1448]: time="2025-09-06T01:20:18.440429644Z" level=info msg="StopPodSandbox for \"1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b\"" Sep 6 01:20:18.520528 env[1448]: 2025-09-06 01:20:18.481 [WARNING][5089] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--hf7h8-eth0", GenerateName:"calico-apiserver-58578c4b6-", Namespace:"calico-apiserver", SelfLink:"", UID:"79dc05b9-4f40-4daa-8331-0dd36a50ea4a", ResourceVersion:"989", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 19, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"58578c4b6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-f2ea6194e4", ContainerID:"2e6641cde46fb9b0eff0717c5bcc9018c04326cd674a401b5ac91753ef4906b8", Pod:"calico-apiserver-58578c4b6-hf7h8", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.5.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1e8fa5a7ac3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:20:18.520528 env[1448]: 2025-09-06 01:20:18.481 [INFO][5089] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" Sep 6 01:20:18.520528 env[1448]: 2025-09-06 01:20:18.481 [INFO][5089] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" iface="eth0" netns="" Sep 6 01:20:18.520528 env[1448]: 2025-09-06 01:20:18.481 [INFO][5089] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" Sep 6 01:20:18.520528 env[1448]: 2025-09-06 01:20:18.481 [INFO][5089] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" Sep 6 01:20:18.520528 env[1448]: 2025-09-06 01:20:18.503 [INFO][5096] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" HandleID="k8s-pod-network.1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--hf7h8-eth0" Sep 6 01:20:18.520528 env[1448]: 2025-09-06 01:20:18.503 [INFO][5096] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:18.520528 env[1448]: 2025-09-06 01:20:18.503 [INFO][5096] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:18.520528 env[1448]: 2025-09-06 01:20:18.515 [WARNING][5096] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" HandleID="k8s-pod-network.1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--hf7h8-eth0" Sep 6 01:20:18.520528 env[1448]: 2025-09-06 01:20:18.515 [INFO][5096] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" HandleID="k8s-pod-network.1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--hf7h8-eth0" Sep 6 01:20:18.520528 env[1448]: 2025-09-06 01:20:18.517 [INFO][5096] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:18.520528 env[1448]: 2025-09-06 01:20:18.518 [INFO][5089] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" Sep 6 01:20:18.521158 env[1448]: time="2025-09-06T01:20:18.521118776Z" level=info msg="TearDown network for sandbox \"1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b\" successfully" Sep 6 01:20:18.521231 env[1448]: time="2025-09-06T01:20:18.521215176Z" level=info msg="StopPodSandbox for \"1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b\" returns successfully" Sep 6 01:20:18.521879 env[1448]: time="2025-09-06T01:20:18.521841656Z" level=info msg="RemovePodSandbox for \"1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b\"" Sep 6 01:20:18.521961 env[1448]: time="2025-09-06T01:20:18.521888216Z" level=info msg="Forcibly stopping sandbox \"1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b\"" Sep 6 01:20:18.615884 env[1448]: 2025-09-06 01:20:18.565 [WARNING][5110] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--hf7h8-eth0", GenerateName:"calico-apiserver-58578c4b6-", Namespace:"calico-apiserver", SelfLink:"", UID:"79dc05b9-4f40-4daa-8331-0dd36a50ea4a", ResourceVersion:"989", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 19, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"58578c4b6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-f2ea6194e4", ContainerID:"2e6641cde46fb9b0eff0717c5bcc9018c04326cd674a401b5ac91753ef4906b8", Pod:"calico-apiserver-58578c4b6-hf7h8", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.5.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1e8fa5a7ac3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:20:18.615884 env[1448]: 2025-09-06 01:20:18.566 [INFO][5110] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" Sep 6 01:20:18.615884 env[1448]: 2025-09-06 01:20:18.566 [INFO][5110] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" iface="eth0" netns="" Sep 6 01:20:18.615884 env[1448]: 2025-09-06 01:20:18.566 [INFO][5110] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" Sep 6 01:20:18.615884 env[1448]: 2025-09-06 01:20:18.566 [INFO][5110] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" Sep 6 01:20:18.615884 env[1448]: 2025-09-06 01:20:18.591 [INFO][5118] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" HandleID="k8s-pod-network.1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--hf7h8-eth0" Sep 6 01:20:18.615884 env[1448]: 2025-09-06 01:20:18.591 [INFO][5118] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:18.615884 env[1448]: 2025-09-06 01:20:18.592 [INFO][5118] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:18.615884 env[1448]: 2025-09-06 01:20:18.606 [WARNING][5118] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" HandleID="k8s-pod-network.1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--hf7h8-eth0" Sep 6 01:20:18.615884 env[1448]: 2025-09-06 01:20:18.606 [INFO][5118] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" HandleID="k8s-pod-network.1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--hf7h8-eth0" Sep 6 01:20:18.615884 env[1448]: 2025-09-06 01:20:18.611 [INFO][5118] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:18.615884 env[1448]: 2025-09-06 01:20:18.614 [INFO][5110] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b" Sep 6 01:20:18.616610 env[1448]: time="2025-09-06T01:20:18.616410110Z" level=info msg="TearDown network for sandbox \"1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b\" successfully" Sep 6 01:20:18.627027 env[1448]: time="2025-09-06T01:20:18.626914592Z" level=info msg="RemovePodSandbox \"1aabae44793b05cc44e27b0141dccf4ae46b1975ed65c82f41e5792dd7ed0d6b\" returns successfully" Sep 6 01:20:18.627874 env[1448]: time="2025-09-06T01:20:18.627804192Z" level=info msg="StopPodSandbox for \"207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43\"" Sep 6 01:20:18.747165 env[1448]: 2025-09-06 01:20:18.698 [WARNING][5132] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--lg85q-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"334dc78e-f61b-4bc4-8334-ccf4d158c00f", ResourceVersion:"933", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 19, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-f2ea6194e4", ContainerID:"b9977f9c45fcefab8b2ee26cf873253e44b053e478402e8d66c0181aa729fbf0", Pod:"coredns-668d6bf9bc-lg85q", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.5.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calicc09d2f30d3", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:20:18.747165 env[1448]: 2025-09-06 01:20:18.699 [INFO][5132] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" Sep 6 01:20:18.747165 env[1448]: 2025-09-06 01:20:18.699 [INFO][5132] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" iface="eth0" netns="" Sep 6 01:20:18.747165 env[1448]: 2025-09-06 01:20:18.699 [INFO][5132] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" Sep 6 01:20:18.747165 env[1448]: 2025-09-06 01:20:18.699 [INFO][5132] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" Sep 6 01:20:18.747165 env[1448]: 2025-09-06 01:20:18.732 [INFO][5139] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" HandleID="k8s-pod-network.207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--lg85q-eth0" Sep 6 01:20:18.747165 env[1448]: 2025-09-06 01:20:18.732 [INFO][5139] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:18.747165 env[1448]: 2025-09-06 01:20:18.732 [INFO][5139] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:18.747165 env[1448]: 2025-09-06 01:20:18.741 [WARNING][5139] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" HandleID="k8s-pod-network.207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--lg85q-eth0" Sep 6 01:20:18.747165 env[1448]: 2025-09-06 01:20:18.742 [INFO][5139] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" HandleID="k8s-pod-network.207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--lg85q-eth0" Sep 6 01:20:18.747165 env[1448]: 2025-09-06 01:20:18.743 [INFO][5139] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:18.747165 env[1448]: 2025-09-06 01:20:18.745 [INFO][5132] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" Sep 6 01:20:18.747886 env[1448]: time="2025-09-06T01:20:18.747846809Z" level=info msg="TearDown network for sandbox \"207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43\" successfully" Sep 6 01:20:18.747973 env[1448]: time="2025-09-06T01:20:18.747956849Z" level=info msg="StopPodSandbox for \"207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43\" returns successfully" Sep 6 01:20:18.750053 env[1448]: time="2025-09-06T01:20:18.750015810Z" level=info msg="RemovePodSandbox for \"207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43\"" Sep 6 01:20:18.750879 env[1448]: time="2025-09-06T01:20:18.750805370Z" level=info msg="Forcibly stopping sandbox \"207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43\"" Sep 6 01:20:18.860319 env[1448]: 2025-09-06 01:20:18.801 [WARNING][5155] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--lg85q-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"334dc78e-f61b-4bc4-8334-ccf4d158c00f", ResourceVersion:"933", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 19, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-f2ea6194e4", ContainerID:"b9977f9c45fcefab8b2ee26cf873253e44b053e478402e8d66c0181aa729fbf0", Pod:"coredns-668d6bf9bc-lg85q", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.5.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calicc09d2f30d3", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:20:18.860319 env[1448]: 2025-09-06 01:20:18.802 [INFO][5155] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" Sep 6 01:20:18.860319 env[1448]: 2025-09-06 01:20:18.802 [INFO][5155] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" iface="eth0" netns="" Sep 6 01:20:18.860319 env[1448]: 2025-09-06 01:20:18.802 [INFO][5155] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" Sep 6 01:20:18.860319 env[1448]: 2025-09-06 01:20:18.802 [INFO][5155] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" Sep 6 01:20:18.860319 env[1448]: 2025-09-06 01:20:18.844 [INFO][5162] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" HandleID="k8s-pod-network.207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--lg85q-eth0" Sep 6 01:20:18.860319 env[1448]: 2025-09-06 01:20:18.844 [INFO][5162] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:18.860319 env[1448]: 2025-09-06 01:20:18.844 [INFO][5162] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:18.860319 env[1448]: 2025-09-06 01:20:18.854 [WARNING][5162] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" HandleID="k8s-pod-network.207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--lg85q-eth0" Sep 6 01:20:18.860319 env[1448]: 2025-09-06 01:20:18.854 [INFO][5162] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" HandleID="k8s-pod-network.207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-coredns--668d6bf9bc--lg85q-eth0" Sep 6 01:20:18.860319 env[1448]: 2025-09-06 01:20:18.856 [INFO][5162] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:18.860319 env[1448]: 2025-09-06 01:20:18.858 [INFO][5155] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43" Sep 6 01:20:18.860797 env[1448]: time="2025-09-06T01:20:18.860340786Z" level=info msg="TearDown network for sandbox \"207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43\" successfully" Sep 6 01:20:18.873926 env[1448]: time="2025-09-06T01:20:18.873882148Z" level=info msg="RemovePodSandbox \"207c2027fe7863ae0543a366674b43354fb7e430f2efcc9de58c75c9b5c5dd43\" returns successfully" Sep 6 01:20:18.874801 env[1448]: time="2025-09-06T01:20:18.874737948Z" level=info msg="StopPodSandbox for \"626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79\"" Sep 6 01:20:19.011515 env[1448]: 2025-09-06 01:20:18.946 [WARNING][5177] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--f2ea6194e4-k8s-goldmane--54d579b49d--7r8jm-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"a953d4fa-4bab-4981-889d-f180a79cf853", ResourceVersion:"947", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 19, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-f2ea6194e4", ContainerID:"b4b80c8a7163a67a8c3d4c453c5e04a3b09f91f043b32e426eb9e4d6a90be3d2", Pod:"goldmane-54d579b49d-7r8jm", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.5.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calidb512a19e11", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:20:19.011515 env[1448]: 2025-09-06 01:20:18.946 [INFO][5177] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" Sep 6 01:20:19.011515 env[1448]: 2025-09-06 01:20:18.946 [INFO][5177] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" iface="eth0" netns="" Sep 6 01:20:19.011515 env[1448]: 2025-09-06 01:20:18.946 [INFO][5177] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" Sep 6 01:20:19.011515 env[1448]: 2025-09-06 01:20:18.946 [INFO][5177] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" Sep 6 01:20:19.011515 env[1448]: 2025-09-06 01:20:18.984 [INFO][5185] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" HandleID="k8s-pod-network.626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-goldmane--54d579b49d--7r8jm-eth0" Sep 6 01:20:19.011515 env[1448]: 2025-09-06 01:20:18.985 [INFO][5185] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:19.011515 env[1448]: 2025-09-06 01:20:18.985 [INFO][5185] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:19.011515 env[1448]: 2025-09-06 01:20:19.001 [WARNING][5185] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" HandleID="k8s-pod-network.626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-goldmane--54d579b49d--7r8jm-eth0" Sep 6 01:20:19.011515 env[1448]: 2025-09-06 01:20:19.001 [INFO][5185] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" HandleID="k8s-pod-network.626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-goldmane--54d579b49d--7r8jm-eth0" Sep 6 01:20:19.011515 env[1448]: 2025-09-06 01:20:19.005 [INFO][5185] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:19.011515 env[1448]: 2025-09-06 01:20:19.009 [INFO][5177] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" Sep 6 01:20:19.012343 env[1448]: time="2025-09-06T01:20:19.012302608Z" level=info msg="TearDown network for sandbox \"626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79\" successfully" Sep 6 01:20:19.012446 env[1448]: time="2025-09-06T01:20:19.012427248Z" level=info msg="StopPodSandbox for \"626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79\" returns successfully" Sep 6 01:20:19.013163 env[1448]: time="2025-09-06T01:20:19.013105568Z" level=info msg="RemovePodSandbox for \"626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79\"" Sep 6 01:20:19.013266 env[1448]: time="2025-09-06T01:20:19.013149648Z" level=info msg="Forcibly stopping sandbox \"626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79\"" Sep 6 01:20:19.107093 env[1448]: 2025-09-06 01:20:19.067 [WARNING][5199] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--f2ea6194e4-k8s-goldmane--54d579b49d--7r8jm-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"a953d4fa-4bab-4981-889d-f180a79cf853", ResourceVersion:"947", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 19, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-f2ea6194e4", ContainerID:"b4b80c8a7163a67a8c3d4c453c5e04a3b09f91f043b32e426eb9e4d6a90be3d2", Pod:"goldmane-54d579b49d-7r8jm", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.5.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calidb512a19e11", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:20:19.107093 env[1448]: 2025-09-06 01:20:19.068 [INFO][5199] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" Sep 6 01:20:19.107093 env[1448]: 2025-09-06 01:20:19.068 [INFO][5199] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" iface="eth0" netns="" Sep 6 01:20:19.107093 env[1448]: 2025-09-06 01:20:19.068 [INFO][5199] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" Sep 6 01:20:19.107093 env[1448]: 2025-09-06 01:20:19.068 [INFO][5199] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" Sep 6 01:20:19.107093 env[1448]: 2025-09-06 01:20:19.091 [INFO][5206] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" HandleID="k8s-pod-network.626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-goldmane--54d579b49d--7r8jm-eth0" Sep 6 01:20:19.107093 env[1448]: 2025-09-06 01:20:19.092 [INFO][5206] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:19.107093 env[1448]: 2025-09-06 01:20:19.092 [INFO][5206] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:19.107093 env[1448]: 2025-09-06 01:20:19.101 [WARNING][5206] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" HandleID="k8s-pod-network.626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-goldmane--54d579b49d--7r8jm-eth0" Sep 6 01:20:19.107093 env[1448]: 2025-09-06 01:20:19.101 [INFO][5206] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" HandleID="k8s-pod-network.626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-goldmane--54d579b49d--7r8jm-eth0" Sep 6 01:20:19.107093 env[1448]: 2025-09-06 01:20:19.103 [INFO][5206] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:19.107093 env[1448]: 2025-09-06 01:20:19.105 [INFO][5199] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79" Sep 6 01:20:19.107727 env[1448]: time="2025-09-06T01:20:19.107671062Z" level=info msg="TearDown network for sandbox \"626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79\" successfully" Sep 6 01:20:19.336456 env[1448]: time="2025-09-06T01:20:19.336329215Z" level=info msg="RemovePodSandbox \"626fe137c5e9d40cd152eea7cb7366a9717df49f7f68338dfe6fd6c1f5315b79\" returns successfully" Sep 6 01:20:19.338016 env[1448]: time="2025-09-06T01:20:19.337965455Z" level=info msg="StopPodSandbox for \"995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4\"" Sep 6 01:20:19.459456 env[1448]: 2025-09-06 01:20:19.406 [WARNING][5220] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--bdq9h-eth0", GenerateName:"calico-apiserver-58578c4b6-", Namespace:"calico-apiserver", SelfLink:"", UID:"4fedc3f0-ce49-4a1c-95c7-fd08b3ad94b4", ResourceVersion:"965", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 19, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"58578c4b6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-f2ea6194e4", ContainerID:"78721d04aadb0d67c3fd389c53a50d65c1eaeff641dda746dfe69de04e029301", Pod:"calico-apiserver-58578c4b6-bdq9h", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.5.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali7864dda5a3d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:20:19.459456 env[1448]: 2025-09-06 01:20:19.406 [INFO][5220] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" Sep 6 01:20:19.459456 env[1448]: 2025-09-06 01:20:19.406 [INFO][5220] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" iface="eth0" netns="" Sep 6 01:20:19.459456 env[1448]: 2025-09-06 01:20:19.406 [INFO][5220] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" Sep 6 01:20:19.459456 env[1448]: 2025-09-06 01:20:19.406 [INFO][5220] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" Sep 6 01:20:19.459456 env[1448]: 2025-09-06 01:20:19.444 [INFO][5228] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" HandleID="k8s-pod-network.995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--bdq9h-eth0" Sep 6 01:20:19.459456 env[1448]: 2025-09-06 01:20:19.444 [INFO][5228] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:19.459456 env[1448]: 2025-09-06 01:20:19.444 [INFO][5228] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:19.459456 env[1448]: 2025-09-06 01:20:19.453 [WARNING][5228] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" HandleID="k8s-pod-network.995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--bdq9h-eth0" Sep 6 01:20:19.459456 env[1448]: 2025-09-06 01:20:19.454 [INFO][5228] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" HandleID="k8s-pod-network.995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--bdq9h-eth0" Sep 6 01:20:19.459456 env[1448]: 2025-09-06 01:20:19.456 [INFO][5228] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:19.459456 env[1448]: 2025-09-06 01:20:19.458 [INFO][5220] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" Sep 6 01:20:19.459988 env[1448]: time="2025-09-06T01:20:19.459489273Z" level=info msg="TearDown network for sandbox \"995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4\" successfully" Sep 6 01:20:19.459988 env[1448]: time="2025-09-06T01:20:19.459521153Z" level=info msg="StopPodSandbox for \"995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4\" returns successfully" Sep 6 01:20:19.460482 env[1448]: time="2025-09-06T01:20:19.460453233Z" level=info msg="RemovePodSandbox for \"995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4\"" Sep 6 01:20:19.460616 env[1448]: time="2025-09-06T01:20:19.460580713Z" level=info msg="Forcibly stopping sandbox \"995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4\"" Sep 6 01:20:19.575719 env[1448]: 2025-09-06 01:20:19.521 [WARNING][5243] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--bdq9h-eth0", GenerateName:"calico-apiserver-58578c4b6-", Namespace:"calico-apiserver", SelfLink:"", UID:"4fedc3f0-ce49-4a1c-95c7-fd08b3ad94b4", ResourceVersion:"965", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 19, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"58578c4b6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-f2ea6194e4", ContainerID:"78721d04aadb0d67c3fd389c53a50d65c1eaeff641dda746dfe69de04e029301", Pod:"calico-apiserver-58578c4b6-bdq9h", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.5.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali7864dda5a3d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:20:19.575719 env[1448]: 2025-09-06 01:20:19.521 [INFO][5243] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" Sep 6 01:20:19.575719 env[1448]: 2025-09-06 01:20:19.521 [INFO][5243] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" iface="eth0" netns="" Sep 6 01:20:19.575719 env[1448]: 2025-09-06 01:20:19.521 [INFO][5243] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" Sep 6 01:20:19.575719 env[1448]: 2025-09-06 01:20:19.521 [INFO][5243] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" Sep 6 01:20:19.575719 env[1448]: 2025-09-06 01:20:19.562 [INFO][5250] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" HandleID="k8s-pod-network.995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--bdq9h-eth0" Sep 6 01:20:19.575719 env[1448]: 2025-09-06 01:20:19.562 [INFO][5250] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:20:19.575719 env[1448]: 2025-09-06 01:20:19.562 [INFO][5250] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:20:19.575719 env[1448]: 2025-09-06 01:20:19.571 [WARNING][5250] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" HandleID="k8s-pod-network.995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--bdq9h-eth0" Sep 6 01:20:19.575719 env[1448]: 2025-09-06 01:20:19.571 [INFO][5250] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" HandleID="k8s-pod-network.995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" Workload="ci--3510.3.8--n--f2ea6194e4-k8s-calico--apiserver--58578c4b6--bdq9h-eth0" Sep 6 01:20:19.575719 env[1448]: 2025-09-06 01:20:19.572 [INFO][5250] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:20:19.575719 env[1448]: 2025-09-06 01:20:19.574 [INFO][5243] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4" Sep 6 01:20:19.576198 env[1448]: time="2025-09-06T01:20:19.575778609Z" level=info msg="TearDown network for sandbox \"995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4\" successfully" Sep 6 01:20:19.586579 env[1448]: time="2025-09-06T01:20:19.585994531Z" level=info msg="RemovePodSandbox \"995fef02d1efa80c46f5deee000466a7850a7f5f429a9f57a4068fec0907d0a4\" returns successfully" Sep 6 01:20:19.764562 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3504201450.mount: Deactivated successfully. Sep 6 01:20:20.378076 env[1448]: time="2025-09-06T01:20:20.378031525Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:20.388132 env[1448]: time="2025-09-06T01:20:20.388091606Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:14088376331a0622b7f6a2fbc2f2932806a6eafdd7b602f6139d3b985bf1e685,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:20.394717 env[1448]: time="2025-09-06T01:20:20.394650647Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:20.399173 env[1448]: time="2025-09-06T01:20:20.399133448Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:46297703ab3739331a00a58f0d6a5498c8d3b6523ad947eed68592ee0f3e79f0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:20.399792 env[1448]: time="2025-09-06T01:20:20.399761208Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\" returns image reference \"sha256:14088376331a0622b7f6a2fbc2f2932806a6eafdd7b602f6139d3b985bf1e685\"" Sep 6 01:20:20.401500 env[1448]: time="2025-09-06T01:20:20.401465688Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 6 01:20:20.404114 env[1448]: time="2025-09-06T01:20:20.404062608Z" level=info msg="CreateContainer within sandbox \"b4b80c8a7163a67a8c3d4c453c5e04a3b09f91f043b32e426eb9e4d6a90be3d2\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Sep 6 01:20:20.440456 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1210100401.mount: Deactivated successfully. Sep 6 01:20:20.453325 env[1448]: time="2025-09-06T01:20:20.453267255Z" level=info msg="CreateContainer within sandbox \"b4b80c8a7163a67a8c3d4c453c5e04a3b09f91f043b32e426eb9e4d6a90be3d2\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"15875a4f7980f1683e7b0d9ef9fe997f323986639b6eedbe15dfc0963ef69781\"" Sep 6 01:20:20.455148 env[1448]: time="2025-09-06T01:20:20.455102856Z" level=info msg="StartContainer for \"15875a4f7980f1683e7b0d9ef9fe997f323986639b6eedbe15dfc0963ef69781\"" Sep 6 01:20:20.481452 systemd[1]: Started cri-containerd-15875a4f7980f1683e7b0d9ef9fe997f323986639b6eedbe15dfc0963ef69781.scope. Sep 6 01:20:20.505969 kernel: kauditd_printk_skb: 155 callbacks suppressed Sep 6 01:20:20.506116 kernel: audit: type=1400 audit(1757121620.499:1377): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.543506 kernel: audit: type=1400 audit(1757121620.499:1378): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.543605 kernel: audit: type=1400 audit(1757121620.499:1379): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.582545 kernel: audit: type=1400 audit(1757121620.499:1380): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.602182 kernel: audit: type=1400 audit(1757121620.499:1381): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.623444 kernel: audit: type=1400 audit(1757121620.499:1382): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.644670 kernel: audit: type=1400 audit(1757121620.499:1383): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.666930 kernel: audit: type=1400 audit(1757121620.499:1384): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.667058 kernel: audit: type=1400 audit(1757121620.499:1385): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.690781 kernel: audit: type=1400 audit(1757121620.499:1386): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.499000 audit: BPF prog-id=221 op=LOAD Sep 6 01:20:20.523000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.523000 audit[5272]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=4431 pid=5272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:20.523000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135383735613466373938306631363833653762306439656639666539 Sep 6 01:20:20.524000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.524000 audit[5272]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=4431 pid=5272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:20.524000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135383735613466373938306631363833653762306439656639666539 Sep 6 01:20:20.524000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.524000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.524000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.524000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.524000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.524000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.524000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.524000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.524000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.524000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.524000 audit: BPF prog-id=222 op=LOAD Sep 6 01:20:20.524000 audit[5272]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=4431 pid=5272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:20.524000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135383735613466373938306631363833653762306439656639666539 Sep 6 01:20:20.548000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.548000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.548000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.548000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.548000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.548000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.548000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.548000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.548000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.548000 audit: BPF prog-id=223 op=LOAD Sep 6 01:20:20.548000 audit[5272]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=4431 pid=5272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:20.548000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135383735613466373938306631363833653762306439656639666539 Sep 6 01:20:20.561000 audit: BPF prog-id=223 op=UNLOAD Sep 6 01:20:20.561000 audit: BPF prog-id=222 op=UNLOAD Sep 6 01:20:20.561000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.561000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.561000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.561000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.561000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.561000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.561000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.561000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.561000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.561000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:20.561000 audit: BPF prog-id=224 op=LOAD Sep 6 01:20:20.561000 audit[5272]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=4431 pid=5272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:20.561000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135383735613466373938306631363833653762306439656639666539 Sep 6 01:20:20.764659 systemd[1]: run-containerd-runc-k8s.io-15875a4f7980f1683e7b0d9ef9fe997f323986639b6eedbe15dfc0963ef69781-runc.cN66eY.mount: Deactivated successfully. Sep 6 01:20:20.917546 env[1448]: time="2025-09-06T01:20:20.916710081Z" level=info msg="StartContainer for \"15875a4f7980f1683e7b0d9ef9fe997f323986639b6eedbe15dfc0963ef69781\" returns successfully" Sep 6 01:20:20.949179 env[1448]: time="2025-09-06T01:20:20.949129166Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:20.958969 env[1448]: time="2025-09-06T01:20:20.958926647Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:20.963732 env[1448]: time="2025-09-06T01:20:20.963687208Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:20.969571 env[1448]: time="2025-09-06T01:20:20.969507609Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:20.970319 env[1448]: time="2025-09-06T01:20:20.970279449Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08\"" Sep 6 01:20:20.972164 env[1448]: time="2025-09-06T01:20:20.972076889Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\"" Sep 6 01:20:20.974844 env[1448]: time="2025-09-06T01:20:20.974800170Z" level=info msg="CreateContainer within sandbox \"78721d04aadb0d67c3fd389c53a50d65c1eaeff641dda746dfe69de04e029301\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 6 01:20:21.002185 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1826310687.mount: Deactivated successfully. Sep 6 01:20:21.017795 env[1448]: time="2025-09-06T01:20:21.017714176Z" level=info msg="CreateContainer within sandbox \"78721d04aadb0d67c3fd389c53a50d65c1eaeff641dda746dfe69de04e029301\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"c9436ba642aa09b6e8e47254c3e495f82630a6c8e4909145870c4ecfcdbb1a05\"" Sep 6 01:20:21.019928 env[1448]: time="2025-09-06T01:20:21.019878856Z" level=info msg="StartContainer for \"c9436ba642aa09b6e8e47254c3e495f82630a6c8e4909145870c4ecfcdbb1a05\"" Sep 6 01:20:21.045659 systemd[1]: Started cri-containerd-c9436ba642aa09b6e8e47254c3e495f82630a6c8e4909145870c4ecfcdbb1a05.scope. Sep 6 01:20:21.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.061000 audit: BPF prog-id=225 op=LOAD Sep 6 01:20:21.061000 audit[5308]: AVC avc: denied { bpf } for pid=5308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.061000 audit[5308]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4609 pid=5308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:21.061000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339343336626136343261613039623665386534373235346333653439 Sep 6 01:20:21.062000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.062000 audit[5308]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4609 pid=5308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:21.062000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339343336626136343261613039623665386534373235346333653439 Sep 6 01:20:21.062000 audit[5308]: AVC avc: denied { bpf } for pid=5308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.062000 audit[5308]: AVC avc: denied { bpf } for pid=5308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.062000 audit[5308]: AVC avc: denied { bpf } for pid=5308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.062000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.062000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.062000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.062000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.062000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.062000 audit[5308]: AVC avc: denied { bpf } for pid=5308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.062000 audit[5308]: AVC avc: denied { bpf } for pid=5308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.062000 audit: BPF prog-id=226 op=LOAD Sep 6 01:20:21.062000 audit[5308]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4609 pid=5308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:21.062000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339343336626136343261613039623665386534373235346333653439 Sep 6 01:20:21.062000 audit[5308]: AVC avc: denied { bpf } for pid=5308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.062000 audit[5308]: AVC avc: denied { bpf } for pid=5308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.062000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.062000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.062000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.062000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.062000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.062000 audit[5308]: AVC avc: denied { bpf } for pid=5308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.062000 audit[5308]: AVC avc: denied { bpf } for pid=5308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.062000 audit: BPF prog-id=227 op=LOAD Sep 6 01:20:21.062000 audit[5308]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4609 pid=5308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:21.062000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339343336626136343261613039623665386534373235346333653439 Sep 6 01:20:21.062000 audit: BPF prog-id=227 op=UNLOAD Sep 6 01:20:21.062000 audit: BPF prog-id=226 op=UNLOAD Sep 6 01:20:21.062000 audit[5308]: AVC avc: denied { bpf } for pid=5308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.062000 audit[5308]: AVC avc: denied { bpf } for pid=5308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.062000 audit[5308]: AVC avc: denied { bpf } for pid=5308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.062000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.062000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.062000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.062000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.062000 audit[5308]: AVC avc: denied { perfmon } for pid=5308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.062000 audit[5308]: AVC avc: denied { bpf } for pid=5308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.062000 audit[5308]: AVC avc: denied { bpf } for pid=5308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:21.062000 audit: BPF prog-id=228 op=LOAD Sep 6 01:20:21.062000 audit[5308]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4609 pid=5308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:21.062000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339343336626136343261613039623665386534373235346333653439 Sep 6 01:20:21.091435 env[1448]: time="2025-09-06T01:20:21.091386106Z" level=info msg="StartContainer for \"c9436ba642aa09b6e8e47254c3e495f82630a6c8e4909145870c4ecfcdbb1a05\" returns successfully" Sep 6 01:20:21.764717 systemd[1]: run-containerd-runc-k8s.io-c9436ba642aa09b6e8e47254c3e495f82630a6c8e4909145870c4ecfcdbb1a05-runc.gk0I3l.mount: Deactivated successfully. Sep 6 01:20:21.944661 kubelet[2427]: I0906 01:20:21.944588 2427 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-54d579b49d-7r8jm" podStartSLOduration=27.362370626 podStartE2EDuration="38.944571186s" podCreationTimestamp="2025-09-06 01:19:43 +0000 UTC" firstStartedPulling="2025-09-06 01:20:08.818985848 +0000 UTC m=+51.454108703" lastFinishedPulling="2025-09-06 01:20:20.401186408 +0000 UTC m=+63.036309263" observedRunningTime="2025-09-06 01:20:21.943118106 +0000 UTC m=+64.578240961" watchObservedRunningTime="2025-09-06 01:20:21.944571186 +0000 UTC m=+64.579694041" Sep 6 01:20:21.977843 systemd[1]: run-containerd-runc-k8s.io-15875a4f7980f1683e7b0d9ef9fe997f323986639b6eedbe15dfc0963ef69781-runc.A1BdX6.mount: Deactivated successfully. Sep 6 01:20:21.978589 kubelet[2427]: I0906 01:20:21.978526 2427 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-58578c4b6-bdq9h" podStartSLOduration=34.454820416 podStartE2EDuration="45.978507551s" podCreationTimestamp="2025-09-06 01:19:36 +0000 UTC" firstStartedPulling="2025-09-06 01:20:09.447724554 +0000 UTC m=+52.082847409" lastFinishedPulling="2025-09-06 01:20:20.971411729 +0000 UTC m=+63.606534544" observedRunningTime="2025-09-06 01:20:21.978458551 +0000 UTC m=+64.613581406" watchObservedRunningTime="2025-09-06 01:20:21.978507551 +0000 UTC m=+64.613630446" Sep 6 01:20:21.997000 audit[5351]: NETFILTER_CFG table=filter:123 family=2 entries=10 op=nft_register_rule pid=5351 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:20:21.997000 audit[5351]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffc87cc140 a2=0 a3=1 items=0 ppid=2565 pid=5351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:21.997000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:20:22.002000 audit[5351]: NETFILTER_CFG table=nat:124 family=2 entries=24 op=nft_register_rule pid=5351 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:20:22.002000 audit[5351]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffc87cc140 a2=0 a3=1 items=0 ppid=2565 pid=5351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:22.002000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:20:22.025000 audit[5365]: NETFILTER_CFG table=filter:125 family=2 entries=10 op=nft_register_rule pid=5365 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:20:22.025000 audit[5365]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffc6667fe0 a2=0 a3=1 items=0 ppid=2565 pid=5365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:22.025000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:20:22.030000 audit[5365]: NETFILTER_CFG table=nat:126 family=2 entries=32 op=nft_register_rule pid=5365 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:20:22.030000 audit[5365]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffc6667fe0 a2=0 a3=1 items=0 ppid=2565 pid=5365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:22.030000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:20:22.493132 env[1448]: time="2025-09-06T01:20:22.493012902Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:22.502299 env[1448]: time="2025-09-06T01:20:22.502246504Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5e2b30128ce4b607acd97d3edef62ce1a90be0259903090a51c360adbe4a8f3b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:22.509428 env[1448]: time="2025-09-06T01:20:22.509344865Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:22.515216 env[1448]: time="2025-09-06T01:20:22.515167865Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:f22c88018d8b58c4ef0052f594b216a13bd6852166ac131a538c5ab2fba23bb2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:22.515917 env[1448]: time="2025-09-06T01:20:22.515868626Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\" returns image reference \"sha256:5e2b30128ce4b607acd97d3edef62ce1a90be0259903090a51c360adbe4a8f3b\"" Sep 6 01:20:22.518529 env[1448]: time="2025-09-06T01:20:22.518478426Z" level=info msg="CreateContainer within sandbox \"d41448da809d27e59dbe19c082787c0d56cde3483d7d47231db34bd274c5db6c\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Sep 6 01:20:22.562255 env[1448]: time="2025-09-06T01:20:22.562191192Z" level=info msg="CreateContainer within sandbox \"d41448da809d27e59dbe19c082787c0d56cde3483d7d47231db34bd274c5db6c\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"3da218f1c529c1e642c8b904b27223caa37759b99cda8dfd30f712d44018fb75\"" Sep 6 01:20:22.563053 env[1448]: time="2025-09-06T01:20:22.562997312Z" level=info msg="StartContainer for \"3da218f1c529c1e642c8b904b27223caa37759b99cda8dfd30f712d44018fb75\"" Sep 6 01:20:22.589152 systemd[1]: Started cri-containerd-3da218f1c529c1e642c8b904b27223caa37759b99cda8dfd30f712d44018fb75.scope. Sep 6 01:20:22.626000 audit[5375]: AVC avc: denied { perfmon } for pid=5375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:22.626000 audit[5375]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4649 pid=5375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:22.626000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364613231386631633532396331653634326338623930346232373232 Sep 6 01:20:22.626000 audit[5375]: AVC avc: denied { bpf } for pid=5375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:22.626000 audit[5375]: AVC avc: denied { bpf } for pid=5375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:22.626000 audit[5375]: AVC avc: denied { bpf } for pid=5375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:22.626000 audit[5375]: AVC avc: denied { perfmon } for pid=5375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:22.626000 audit[5375]: AVC avc: denied { perfmon } for pid=5375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:22.626000 audit[5375]: AVC avc: denied { perfmon } for pid=5375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:22.626000 audit[5375]: AVC avc: denied { perfmon } for pid=5375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:22.626000 audit[5375]: AVC avc: denied { perfmon } for pid=5375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:22.626000 audit[5375]: AVC avc: denied { bpf } for pid=5375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:22.626000 audit[5375]: AVC avc: denied { bpf } for pid=5375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:22.626000 audit: BPF prog-id=229 op=LOAD Sep 6 01:20:22.626000 audit[5375]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4649 pid=5375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:22.626000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364613231386631633532396331653634326338623930346232373232 Sep 6 01:20:22.626000 audit[5375]: AVC avc: denied { bpf } for pid=5375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:22.626000 audit[5375]: AVC avc: denied { bpf } for pid=5375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:22.626000 audit[5375]: AVC avc: denied { perfmon } for pid=5375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:22.626000 audit[5375]: AVC avc: denied { perfmon } for pid=5375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:22.626000 audit[5375]: AVC avc: denied { perfmon } for pid=5375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:22.626000 audit[5375]: AVC avc: denied { perfmon } for pid=5375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:22.626000 audit[5375]: AVC avc: denied { perfmon } for pid=5375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:22.626000 audit[5375]: AVC avc: denied { bpf } for pid=5375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:22.626000 audit[5375]: AVC avc: denied { bpf } for pid=5375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:22.626000 audit: BPF prog-id=230 op=LOAD Sep 6 01:20:22.626000 audit[5375]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4649 pid=5375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:22.626000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364613231386631633532396331653634326338623930346232373232 Sep 6 01:20:22.626000 audit: BPF prog-id=230 op=UNLOAD Sep 6 01:20:22.626000 audit: BPF prog-id=229 op=UNLOAD Sep 6 01:20:22.626000 audit[5375]: AVC avc: denied { bpf } for pid=5375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:22.626000 audit[5375]: AVC avc: denied { bpf } for pid=5375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:22.626000 audit[5375]: AVC avc: denied { bpf } for pid=5375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:22.626000 audit[5375]: AVC avc: denied { perfmon } for pid=5375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:22.626000 audit[5375]: AVC avc: denied { perfmon } for pid=5375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:22.626000 audit[5375]: AVC avc: denied { perfmon } for pid=5375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:22.626000 audit[5375]: AVC avc: denied { perfmon } for pid=5375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:22.626000 audit[5375]: AVC avc: denied { perfmon } for pid=5375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:22.626000 audit[5375]: AVC avc: denied { bpf } for pid=5375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:22.626000 audit[5375]: AVC avc: denied { bpf } for pid=5375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:22.626000 audit: BPF prog-id=231 op=LOAD Sep 6 01:20:22.626000 audit[5375]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4649 pid=5375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:22.626000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364613231386631633532396331653634326338623930346232373232 Sep 6 01:20:23.413000 audit[5319]: AVC avc: denied { watch } for pid=5319 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_01_19_53.1656245987/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c441,c963 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c441,c963 tclass=file permissive=0 Sep 6 01:20:23.413000 audit[5319]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000b8ad00 a2=fc6 a3=0 items=0 ppid=4609 pid=5319 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c441,c963 key=(null) Sep 6 01:20:23.413000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 01:20:23.465000 audit[5402]: NETFILTER_CFG table=filter:127 family=2 entries=10 op=nft_register_rule pid=5402 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:20:23.465000 audit[5402]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffffa50f1f0 a2=0 a3=1 items=0 ppid=2565 pid=5402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:23.465000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:20:23.472000 audit[5402]: NETFILTER_CFG table=nat:128 family=2 entries=36 op=nft_register_chain pid=5402 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:20:23.472000 audit[5402]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12004 a0=3 a1=fffffa50f1f0 a2=0 a3=1 items=0 ppid=2565 pid=5402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:23.472000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:20:23.521882 env[1448]: time="2025-09-06T01:20:23.521825204Z" level=info msg="StartContainer for \"3da218f1c529c1e642c8b904b27223caa37759b99cda8dfd30f712d44018fb75\" returns successfully" Sep 6 01:20:23.523482 env[1448]: time="2025-09-06T01:20:23.523445965Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\"" Sep 6 01:20:23.558278 systemd[1]: run-containerd-runc-k8s.io-15875a4f7980f1683e7b0d9ef9fe997f323986639b6eedbe15dfc0963ef69781-runc.Iu9GQ8.mount: Deactivated successfully. Sep 6 01:20:24.553478 systemd[1]: run-containerd-runc-k8s.io-15875a4f7980f1683e7b0d9ef9fe997f323986639b6eedbe15dfc0963ef69781-runc.CJ1CHL.mount: Deactivated successfully. Sep 6 01:20:25.340394 env[1448]: time="2025-09-06T01:20:25.340338411Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:25.347017 env[1448]: time="2025-09-06T01:20:25.346967572Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a319b5bdc1001e98875b68e2943279adb74bcb19d09f1db857bc27959a078a65,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:25.351946 env[1448]: time="2025-09-06T01:20:25.351853772Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:25.356736 env[1448]: time="2025-09-06T01:20:25.356696813Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:731ab232ca708102ab332340b1274d5cd656aa896ecc5368ee95850b811df86f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:25.357309 env[1448]: time="2025-09-06T01:20:25.357279493Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\" returns image reference \"sha256:a319b5bdc1001e98875b68e2943279adb74bcb19d09f1db857bc27959a078a65\"" Sep 6 01:20:25.363414 env[1448]: time="2025-09-06T01:20:25.363371614Z" level=info msg="CreateContainer within sandbox \"d41448da809d27e59dbe19c082787c0d56cde3483d7d47231db34bd274c5db6c\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Sep 6 01:20:25.401811 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3138921978.mount: Deactivated successfully. Sep 6 01:20:25.421384 env[1448]: time="2025-09-06T01:20:25.421321062Z" level=info msg="CreateContainer within sandbox \"d41448da809d27e59dbe19c082787c0d56cde3483d7d47231db34bd274c5db6c\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"c5354824a618753ebbadd324abd5272c41dc7fd57db15948e179688b452d5661\"" Sep 6 01:20:25.423547 env[1448]: time="2025-09-06T01:20:25.422908782Z" level=info msg="StartContainer for \"c5354824a618753ebbadd324abd5272c41dc7fd57db15948e179688b452d5661\"" Sep 6 01:20:25.441140 systemd[1]: Started cri-containerd-c5354824a618753ebbadd324abd5272c41dc7fd57db15948e179688b452d5661.scope. Sep 6 01:20:25.461000 audit[5451]: AVC avc: denied { perfmon } for pid=5451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:25.461000 audit[5451]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4649 pid=5451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:25.461000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335333534383234613631383735336562626164643332346162643532 Sep 6 01:20:25.462000 audit[5451]: AVC avc: denied { bpf } for pid=5451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:25.462000 audit[5451]: AVC avc: denied { bpf } for pid=5451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:25.462000 audit[5451]: AVC avc: denied { bpf } for pid=5451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:25.462000 audit[5451]: AVC avc: denied { perfmon } for pid=5451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:25.462000 audit[5451]: AVC avc: denied { perfmon } for pid=5451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:25.462000 audit[5451]: AVC avc: denied { perfmon } for pid=5451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:25.462000 audit[5451]: AVC avc: denied { perfmon } for pid=5451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:25.462000 audit[5451]: AVC avc: denied { perfmon } for pid=5451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:25.462000 audit[5451]: AVC avc: denied { bpf } for pid=5451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:25.462000 audit[5451]: AVC avc: denied { bpf } for pid=5451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:25.462000 audit: BPF prog-id=232 op=LOAD Sep 6 01:20:25.462000 audit[5451]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4649 pid=5451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:25.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335333534383234613631383735336562626164643332346162643532 Sep 6 01:20:25.462000 audit[5451]: AVC avc: denied { bpf } for pid=5451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:25.462000 audit[5451]: AVC avc: denied { bpf } for pid=5451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:25.462000 audit[5451]: AVC avc: denied { perfmon } for pid=5451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:25.462000 audit[5451]: AVC avc: denied { perfmon } for pid=5451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:25.462000 audit[5451]: AVC avc: denied { perfmon } for pid=5451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:25.462000 audit[5451]: AVC avc: denied { perfmon } for pid=5451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:25.462000 audit[5451]: AVC avc: denied { perfmon } for pid=5451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:25.462000 audit[5451]: AVC avc: denied { bpf } for pid=5451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:25.462000 audit[5451]: AVC avc: denied { bpf } for pid=5451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:25.462000 audit: BPF prog-id=233 op=LOAD Sep 6 01:20:25.462000 audit[5451]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4649 pid=5451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:25.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335333534383234613631383735336562626164643332346162643532 Sep 6 01:20:25.462000 audit: BPF prog-id=233 op=UNLOAD Sep 6 01:20:25.462000 audit: BPF prog-id=232 op=UNLOAD Sep 6 01:20:25.462000 audit[5451]: AVC avc: denied { bpf } for pid=5451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:25.462000 audit[5451]: AVC avc: denied { bpf } for pid=5451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:25.462000 audit[5451]: AVC avc: denied { bpf } for pid=5451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:25.462000 audit[5451]: AVC avc: denied { perfmon } for pid=5451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:25.462000 audit[5451]: AVC avc: denied { perfmon } for pid=5451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:25.462000 audit[5451]: AVC avc: denied { perfmon } for pid=5451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:25.462000 audit[5451]: AVC avc: denied { perfmon } for pid=5451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:25.462000 audit[5451]: AVC avc: denied { perfmon } for pid=5451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:25.462000 audit[5451]: AVC avc: denied { bpf } for pid=5451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:25.462000 audit[5451]: AVC avc: denied { bpf } for pid=5451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:20:25.462000 audit: BPF prog-id=234 op=LOAD Sep 6 01:20:25.462000 audit[5451]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4649 pid=5451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:25.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335333534383234613631383735336562626164643332346162643532 Sep 6 01:20:25.481773 env[1448]: time="2025-09-06T01:20:25.481687950Z" level=info msg="StartContainer for \"c5354824a618753ebbadd324abd5272c41dc7fd57db15948e179688b452d5661\" returns successfully" Sep 6 01:20:25.726530 kubelet[2427]: I0906 01:20:25.726432 2427 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Sep 6 01:20:25.728559 kubelet[2427]: I0906 01:20:25.728530 2427 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Sep 6 01:20:35.860048 systemd[1]: run-containerd-runc-k8s.io-a227574c5c403141d2aed21f34bcc55f4c62fb221103616b6ecd00bd5e122d17-runc.RbRPyb.mount: Deactivated successfully. Sep 6 01:20:35.955666 kubelet[2427]: I0906 01:20:35.955592 2427 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-lcns4" podStartSLOduration=38.076431775 podStartE2EDuration="53.955574069s" podCreationTimestamp="2025-09-06 01:19:42 +0000 UTC" firstStartedPulling="2025-09-06 01:20:09.481701479 +0000 UTC m=+52.116824334" lastFinishedPulling="2025-09-06 01:20:25.360843773 +0000 UTC m=+67.995966628" observedRunningTime="2025-09-06 01:20:25.551255679 +0000 UTC m=+68.186378534" watchObservedRunningTime="2025-09-06 01:20:35.955574069 +0000 UTC m=+78.590696924" Sep 6 01:20:47.902931 systemd[1]: run-containerd-runc-k8s.io-6ff4a978538971429ef0a1549370698ae3f6d7fa91cf3d17a01ad95f2ac53ca8-runc.Xdri6H.mount: Deactivated successfully. Sep 6 01:20:54.549456 systemd[1]: run-containerd-runc-k8s.io-15875a4f7980f1683e7b0d9ef9fe997f323986639b6eedbe15dfc0963ef69781-runc.W3JTMT.mount: Deactivated successfully. Sep 6 01:20:54.677000 audit[5566]: NETFILTER_CFG table=filter:129 family=2 entries=9 op=nft_register_rule pid=5566 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:20:54.683696 kernel: kauditd_printk_skb: 211 callbacks suppressed Sep 6 01:20:54.683786 kernel: audit: type=1325 audit(1757121654.677:1432): table=filter:129 family=2 entries=9 op=nft_register_rule pid=5566 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:20:54.677000 audit[5566]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffd4474880 a2=0 a3=1 items=0 ppid=2565 pid=5566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:54.727072 kernel: audit: type=1300 audit(1757121654.677:1432): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffd4474880 a2=0 a3=1 items=0 ppid=2565 pid=5566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:54.677000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:20:54.740728 kernel: audit: type=1327 audit(1757121654.677:1432): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:20:54.742000 audit[5566]: NETFILTER_CFG table=nat:130 family=2 entries=31 op=nft_register_chain pid=5566 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:20:54.742000 audit[5566]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10884 a0=3 a1=ffffd4474880 a2=0 a3=1 items=0 ppid=2565 pid=5566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:54.784818 kernel: audit: type=1325 audit(1757121654.742:1433): table=nat:130 family=2 entries=31 op=nft_register_chain pid=5566 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:20:54.784965 kernel: audit: type=1300 audit(1757121654.742:1433): arch=c00000b7 syscall=211 success=yes exit=10884 a0=3 a1=ffffd4474880 a2=0 a3=1 items=0 ppid=2565 pid=5566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:54.742000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:20:54.798873 kernel: audit: type=1327 audit(1757121654.742:1433): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:21:12.940000 audit[4760]: AVC avc: denied { watch } for pid=4760 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_01_19_53.4025312255/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c54,c756 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c54,c756 tclass=file permissive=0 Sep 6 01:21:12.940000 audit[4760]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001d132c0 a2=fc6 a3=0 items=0 ppid=3891 pid=4760 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c54,c756 key=(null) Sep 6 01:21:12.995795 kernel: audit: type=1400 audit(1757121672.940:1434): avc: denied { watch } for pid=4760 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_01_19_53.4025312255/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c54,c756 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c54,c756 tclass=file permissive=0 Sep 6 01:21:12.995951 kernel: audit: type=1300 audit(1757121672.940:1434): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001d132c0 a2=fc6 a3=0 items=0 ppid=3891 pid=4760 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c54,c756 key=(null) Sep 6 01:21:12.940000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 01:21:13.024636 kernel: audit: type=1327 audit(1757121672.940:1434): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 01:21:13.399000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:21:13.399000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=78 a1=4003b38420 a2=fc6 a3=0 items=0 ppid=2166 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 key=(null) Sep 6 01:21:13.453126 kernel: audit: type=1400 audit(1757121673.399:1435): avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:21:13.453265 kernel: audit: type=1300 audit(1757121673.399:1435): arch=c00000b7 syscall=27 success=no exit=-13 a0=78 a1=4003b38420 a2=fc6 a3=0 items=0 ppid=2166 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 key=(null) Sep 6 01:21:13.399000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:21:13.481360 kernel: audit: type=1327 audit(1757121673.399:1435): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:21:13.400000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:21:13.504009 kernel: audit: type=1400 audit(1757121673.400:1436): avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:21:13.400000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=78 a1=400a97e920 a2=fc6 a3=0 items=0 ppid=2166 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 key=(null) Sep 6 01:21:13.533118 kernel: audit: type=1300 audit(1757121673.400:1436): arch=c00000b7 syscall=27 success=no exit=-13 a0=78 a1=400a97e920 a2=fc6 a3=0 items=0 ppid=2166 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 key=(null) Sep 6 01:21:13.533293 kernel: audit: type=1327 audit(1757121673.400:1436): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:21:13.400000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:21:13.403000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:21:13.583982 kernel: audit: type=1400 audit(1757121673.403:1437): avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:21:13.403000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=78 a1=4000937140 a2=fc6 a3=0 items=0 ppid=2166 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 key=(null) Sep 6 01:21:13.403000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:21:13.455000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:21:13.455000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=78 a1=40076150e0 a2=fc6 a3=0 items=0 ppid=2166 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 key=(null) Sep 6 01:21:13.455000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:21:13.562000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:21:13.562000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=78 a1=4006ddc880 a2=fc6 a3=0 items=0 ppid=2166 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 key=(null) Sep 6 01:21:13.562000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:21:13.563000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:21:13.563000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=78 a1=4007b39440 a2=fc6 a3=0 items=0 ppid=2166 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 key=(null) Sep 6 01:21:13.563000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:21:13.970000 audit[2247]: AVC avc: denied { watch } for pid=2247 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:21:13.970000 audit[2247]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40025ae270 a2=fc6 a3=0 items=0 ppid=2108 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 key=(null) Sep 6 01:21:13.970000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:21:13.970000 audit[2247]: AVC avc: denied { watch } for pid=2247 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:21:13.970000 audit[2247]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002df5060 a2=fc6 a3=0 items=0 ppid=2108 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 key=(null) Sep 6 01:21:13.970000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:21:17.339000 audit[2247]: AVC avc: denied { watch } for pid=2247 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:21:17.339000 audit[2247]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002df5ac0 a2=fc6 a3=0 items=0 ppid=2108 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 key=(null) Sep 6 01:21:17.339000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:21:17.340000 audit[2247]: AVC avc: denied { watch } for pid=2247 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:21:17.340000 audit[2247]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002fe8da0 a2=fc6 a3=0 items=0 ppid=2108 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 key=(null) Sep 6 01:21:17.340000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:21:17.340000 audit[2247]: AVC avc: denied { watch } for pid=2247 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:21:17.340000 audit[2247]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002df5c60 a2=fc6 a3=0 items=0 ppid=2108 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 key=(null) Sep 6 01:21:17.340000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:21:17.340000 audit[2247]: AVC avc: denied { watch } for pid=2247 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:21:17.340000 audit[2247]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002df5c80 a2=fc6 a3=0 items=0 ppid=2108 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 key=(null) Sep 6 01:21:17.340000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:21:21.542140 systemd[1]: run-containerd-runc-k8s.io-6ff4a978538971429ef0a1549370698ae3f6d7fa91cf3d17a01ad95f2ac53ca8-runc.LKOA62.mount: Deactivated successfully. Sep 6 01:21:23.414000 audit[5319]: AVC avc: denied { watch } for pid=5319 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_01_19_53.1656245987/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c441,c963 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c441,c963 tclass=file permissive=0 Sep 6 01:21:23.420775 kernel: kauditd_printk_skb: 29 callbacks suppressed Sep 6 01:21:23.420942 kernel: audit: type=1400 audit(1757121683.414:1447): avc: denied { watch } for pid=5319 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_01_19_53.1656245987/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c441,c963 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c441,c963 tclass=file permissive=0 Sep 6 01:21:23.414000 audit[5319]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400165af20 a2=fc6 a3=0 items=0 ppid=4609 pid=5319 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c441,c963 key=(null) Sep 6 01:21:23.475017 kernel: audit: type=1300 audit(1757121683.414:1447): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400165af20 a2=fc6 a3=0 items=0 ppid=4609 pid=5319 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c441,c963 key=(null) Sep 6 01:21:23.414000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 01:21:23.499958 kernel: audit: type=1327 audit(1757121683.414:1447): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 01:21:24.554362 systemd[1]: run-containerd-runc-k8s.io-15875a4f7980f1683e7b0d9ef9fe997f323986639b6eedbe15dfc0963ef69781-runc.yO6UDm.mount: Deactivated successfully. Sep 6 01:21:35.860269 systemd[1]: run-containerd-runc-k8s.io-a227574c5c403141d2aed21f34bcc55f4c62fb221103616b6ecd00bd5e122d17-runc.JPQiL9.mount: Deactivated successfully. Sep 6 01:21:43.053940 systemd[1]: Started sshd@7-10.200.20.41:22-10.200.16.10:60002.service. Sep 6 01:21:43.053000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.41:22-10.200.16.10:60002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:43.077774 kernel: audit: type=1130 audit(1757121703.053:1448): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.41:22-10.200.16.10:60002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:43.491000 audit[5717]: USER_ACCT pid=5717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:43.492138 sshd[5717]: Accepted publickey for core from 10.200.16.10 port 60002 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:21:43.516774 kernel: audit: type=1101 audit(1757121703.491:1449): pid=5717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:43.517525 sshd[5717]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:21:43.516000 audit[5717]: CRED_ACQ pid=5717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:43.554860 kernel: audit: type=1103 audit(1757121703.516:1450): pid=5717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:43.554984 kernel: audit: type=1006 audit(1757121703.516:1451): pid=5717 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Sep 6 01:21:43.516000 audit[5717]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc81f9cb0 a2=3 a3=1 items=0 ppid=1 pid=5717 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:43.579834 kernel: audit: type=1300 audit(1757121703.516:1451): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc81f9cb0 a2=3 a3=1 items=0 ppid=1 pid=5717 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:43.516000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:21:43.589309 kernel: audit: type=1327 audit(1757121703.516:1451): proctitle=737368643A20636F7265205B707269765D Sep 6 01:21:43.593252 systemd[1]: Started session-10.scope. Sep 6 01:21:43.594041 systemd-logind[1438]: New session 10 of user core. Sep 6 01:21:43.597000 audit[5717]: USER_START pid=5717 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:43.625000 audit[5726]: CRED_ACQ pid=5726 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:43.647517 kernel: audit: type=1105 audit(1757121703.597:1452): pid=5717 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:43.647696 kernel: audit: type=1103 audit(1757121703.625:1453): pid=5726 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:44.094611 sshd[5717]: pam_unix(sshd:session): session closed for user core Sep 6 01:21:44.094000 audit[5717]: USER_END pid=5717 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:44.095000 audit[5717]: CRED_DISP pid=5717 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:44.123086 systemd[1]: sshd@7-10.200.20.41:22-10.200.16.10:60002.service: Deactivated successfully. Sep 6 01:21:44.123941 systemd[1]: session-10.scope: Deactivated successfully. Sep 6 01:21:44.125583 systemd-logind[1438]: Session 10 logged out. Waiting for processes to exit. Sep 6 01:21:44.126563 systemd-logind[1438]: Removed session 10. Sep 6 01:21:44.143546 kernel: audit: type=1106 audit(1757121704.094:1454): pid=5717 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:44.143696 kernel: audit: type=1104 audit(1757121704.095:1455): pid=5717 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:44.122000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.41:22-10.200.16.10:60002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:49.165477 systemd[1]: Started sshd@8-10.200.20.41:22-10.200.16.10:60018.service. Sep 6 01:21:49.192899 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 01:21:49.193023 kernel: audit: type=1130 audit(1757121709.164:1457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.41:22-10.200.16.10:60018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:49.164000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.41:22-10.200.16.10:60018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:49.579856 sshd[5755]: Accepted publickey for core from 10.200.16.10 port 60018 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:21:49.579000 audit[5755]: USER_ACCT pid=5755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:49.607458 sshd[5755]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:21:49.606000 audit[5755]: CRED_ACQ pid=5755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:49.632075 kernel: audit: type=1101 audit(1757121709.579:1458): pid=5755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:49.632228 kernel: audit: type=1103 audit(1757121709.606:1459): pid=5755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:49.637436 systemd-logind[1438]: New session 11 of user core. Sep 6 01:21:49.654426 kernel: audit: type=1006 audit(1757121709.606:1460): pid=5755 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Sep 6 01:21:49.654474 kernel: audit: type=1300 audit(1757121709.606:1460): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc455fc10 a2=3 a3=1 items=0 ppid=1 pid=5755 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:49.606000 audit[5755]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc455fc10 a2=3 a3=1 items=0 ppid=1 pid=5755 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:49.655136 systemd[1]: Started session-11.scope. Sep 6 01:21:49.606000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:21:49.684080 kernel: audit: type=1327 audit(1757121709.606:1460): proctitle=737368643A20636F7265205B707269765D Sep 6 01:21:49.674000 audit[5755]: USER_START pid=5755 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:49.711480 kernel: audit: type=1105 audit(1757121709.674:1461): pid=5755 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:49.683000 audit[5757]: CRED_ACQ pid=5757 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:49.735557 kernel: audit: type=1103 audit(1757121709.683:1462): pid=5757 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:50.037331 sshd[5755]: pam_unix(sshd:session): session closed for user core Sep 6 01:21:50.038000 audit[5755]: USER_END pid=5755 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:50.041439 systemd-logind[1438]: Session 11 logged out. Waiting for processes to exit. Sep 6 01:21:50.052169 systemd[1]: sshd@8-10.200.20.41:22-10.200.16.10:60018.service: Deactivated successfully. Sep 6 01:21:50.053063 systemd[1]: session-11.scope: Deactivated successfully. Sep 6 01:21:50.054669 systemd-logind[1438]: Removed session 11. Sep 6 01:21:50.038000 audit[5755]: CRED_DISP pid=5755 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:50.089681 kernel: audit: type=1106 audit(1757121710.038:1463): pid=5755 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:50.089839 kernel: audit: type=1104 audit(1757121710.038:1464): pid=5755 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:50.051000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.41:22-10.200.16.10:60018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:55.107000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.41:22-10.200.16.10:40822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:55.108182 systemd[1]: Started sshd@9-10.200.20.41:22-10.200.16.10:40822.service. Sep 6 01:21:55.114673 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 01:21:55.114841 kernel: audit: type=1130 audit(1757121715.107:1466): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.41:22-10.200.16.10:40822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:55.567000 audit[5788]: USER_ACCT pid=5788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:55.569110 sshd[5788]: Accepted publickey for core from 10.200.16.10 port 40822 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:21:55.570249 sshd[5788]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:21:55.569000 audit[5788]: CRED_ACQ pid=5788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:55.616752 kernel: audit: type=1101 audit(1757121715.567:1467): pid=5788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:55.616875 kernel: audit: type=1103 audit(1757121715.569:1468): pid=5788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:55.631396 kernel: audit: type=1006 audit(1757121715.569:1469): pid=5788 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Sep 6 01:21:55.569000 audit[5788]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe2c1aa60 a2=3 a3=1 items=0 ppid=1 pid=5788 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:55.656533 kernel: audit: type=1300 audit(1757121715.569:1469): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe2c1aa60 a2=3 a3=1 items=0 ppid=1 pid=5788 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:55.656657 kernel: audit: type=1327 audit(1757121715.569:1469): proctitle=737368643A20636F7265205B707269765D Sep 6 01:21:55.569000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:21:55.667523 systemd-logind[1438]: New session 12 of user core. Sep 6 01:21:55.668050 systemd[1]: Started session-12.scope. Sep 6 01:21:55.672000 audit[5788]: USER_START pid=5788 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:55.672000 audit[5790]: CRED_ACQ pid=5790 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:55.721513 kernel: audit: type=1105 audit(1757121715.672:1470): pid=5788 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:55.721625 kernel: audit: type=1103 audit(1757121715.672:1471): pid=5790 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:55.995874 sshd[5788]: pam_unix(sshd:session): session closed for user core Sep 6 01:21:55.996000 audit[5788]: USER_END pid=5788 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:55.999479 systemd[1]: session-12.scope: Deactivated successfully. Sep 6 01:21:56.000377 systemd[1]: sshd@9-10.200.20.41:22-10.200.16.10:40822.service: Deactivated successfully. Sep 6 01:21:56.027544 systemd-logind[1438]: Session 12 logged out. Waiting for processes to exit. Sep 6 01:21:56.028504 systemd-logind[1438]: Removed session 12. Sep 6 01:21:55.997000 audit[5788]: CRED_DISP pid=5788 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:56.052857 kernel: audit: type=1106 audit(1757121715.996:1472): pid=5788 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:56.053000 kernel: audit: type=1104 audit(1757121715.997:1473): pid=5788 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:21:55.999000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.41:22-10.200.16.10:40822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:01.087629 systemd[1]: Started sshd@10-10.200.20.41:22-10.200.16.10:60804.service. Sep 6 01:22:01.114640 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 01:22:01.114786 kernel: audit: type=1130 audit(1757121721.087:1475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.41:22-10.200.16.10:60804 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:01.087000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.41:22-10.200.16.10:60804 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:01.536000 audit[5800]: USER_ACCT pid=5800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:01.541179 sshd[5800]: Accepted publickey for core from 10.200.16.10 port 60804 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:22:01.562413 sshd[5800]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:22:01.561000 audit[5800]: CRED_ACQ pid=5800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:01.588292 kernel: audit: type=1101 audit(1757121721.536:1476): pid=5800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:01.588466 kernel: audit: type=1103 audit(1757121721.561:1477): pid=5800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:01.603225 kernel: audit: type=1006 audit(1757121721.561:1478): pid=5800 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Sep 6 01:22:01.561000 audit[5800]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffb6a6b70 a2=3 a3=1 items=0 ppid=1 pid=5800 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:01.627554 kernel: audit: type=1300 audit(1757121721.561:1478): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffb6a6b70 a2=3 a3=1 items=0 ppid=1 pid=5800 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:01.637137 kernel: audit: type=1327 audit(1757121721.561:1478): proctitle=737368643A20636F7265205B707269765D Sep 6 01:22:01.561000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:22:01.637491 systemd-logind[1438]: New session 13 of user core. Sep 6 01:22:01.638397 systemd[1]: Started session-13.scope. Sep 6 01:22:01.642000 audit[5800]: USER_START pid=5800 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:01.644000 audit[5802]: CRED_ACQ pid=5802 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:01.693644 kernel: audit: type=1105 audit(1757121721.642:1479): pid=5800 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:01.693791 kernel: audit: type=1103 audit(1757121721.644:1480): pid=5802 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:01.981129 sshd[5800]: pam_unix(sshd:session): session closed for user core Sep 6 01:22:01.982000 audit[5800]: USER_END pid=5800 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:01.985733 systemd-logind[1438]: Session 13 logged out. Waiting for processes to exit. Sep 6 01:22:01.987034 systemd[1]: session-13.scope: Deactivated successfully. Sep 6 01:22:01.988438 systemd-logind[1438]: Removed session 13. Sep 6 01:22:01.989330 systemd[1]: sshd@10-10.200.20.41:22-10.200.16.10:60804.service: Deactivated successfully. Sep 6 01:22:01.982000 audit[5800]: CRED_DISP pid=5800 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:02.030848 kernel: audit: type=1106 audit(1757121721.982:1481): pid=5800 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:02.030992 kernel: audit: type=1104 audit(1757121721.982:1482): pid=5800 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:01.988000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.41:22-10.200.16.10:60804 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:02.070489 systemd[1]: Started sshd@11-10.200.20.41:22-10.200.16.10:60808.service. Sep 6 01:22:02.069000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.41:22-10.200.16.10:60808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:02.563000 audit[5813]: USER_ACCT pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:02.564473 sshd[5813]: Accepted publickey for core from 10.200.16.10 port 60808 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:22:02.565000 audit[5813]: CRED_ACQ pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:02.565000 audit[5813]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff974c400 a2=3 a3=1 items=0 ppid=1 pid=5813 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:02.565000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:22:02.566158 sshd[5813]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:22:02.569807 systemd-logind[1438]: New session 14 of user core. Sep 6 01:22:02.570644 systemd[1]: Started session-14.scope. Sep 6 01:22:02.575000 audit[5813]: USER_START pid=5813 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:02.576000 audit[5815]: CRED_ACQ pid=5815 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:03.044532 sshd[5813]: pam_unix(sshd:session): session closed for user core Sep 6 01:22:03.044000 audit[5813]: USER_END pid=5813 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:03.045000 audit[5813]: CRED_DISP pid=5813 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:03.047596 systemd-logind[1438]: Session 14 logged out. Waiting for processes to exit. Sep 6 01:22:03.047877 systemd[1]: sshd@11-10.200.20.41:22-10.200.16.10:60808.service: Deactivated successfully. Sep 6 01:22:03.048668 systemd[1]: session-14.scope: Deactivated successfully. Sep 6 01:22:03.047000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.41:22-10.200.16.10:60808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:03.049538 systemd-logind[1438]: Removed session 14. Sep 6 01:22:03.106868 systemd[1]: Started sshd@12-10.200.20.41:22-10.200.16.10:60822.service. Sep 6 01:22:03.106000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.41:22-10.200.16.10:60822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:03.518478 sshd[5822]: Accepted publickey for core from 10.200.16.10 port 60822 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:22:03.517000 audit[5822]: USER_ACCT pid=5822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:03.520349 sshd[5822]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:22:03.519000 audit[5822]: CRED_ACQ pid=5822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:03.519000 audit[5822]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe5fbcbe0 a2=3 a3=1 items=0 ppid=1 pid=5822 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:03.519000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:22:03.524889 systemd[1]: Started session-15.scope. Sep 6 01:22:03.525838 systemd-logind[1438]: New session 15 of user core. Sep 6 01:22:03.529000 audit[5822]: USER_START pid=5822 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:03.531000 audit[5824]: CRED_ACQ pid=5824 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:03.904635 sshd[5822]: pam_unix(sshd:session): session closed for user core Sep 6 01:22:03.905000 audit[5822]: USER_END pid=5822 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:03.905000 audit[5822]: CRED_DISP pid=5822 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:03.907926 systemd[1]: sshd@12-10.200.20.41:22-10.200.16.10:60822.service: Deactivated successfully. Sep 6 01:22:03.907000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.41:22-10.200.16.10:60822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:03.908773 systemd[1]: session-15.scope: Deactivated successfully. Sep 6 01:22:03.909341 systemd-logind[1438]: Session 15 logged out. Waiting for processes to exit. Sep 6 01:22:03.910268 systemd-logind[1438]: Removed session 15. Sep 6 01:22:05.863484 systemd[1]: run-containerd-runc-k8s.io-a227574c5c403141d2aed21f34bcc55f4c62fb221103616b6ecd00bd5e122d17-runc.Cy9FzC.mount: Deactivated successfully. Sep 6 01:22:08.974064 systemd[1]: Started sshd@13-10.200.20.41:22-10.200.16.10:60826.service. Sep 6 01:22:09.001015 kernel: kauditd_printk_skb: 23 callbacks suppressed Sep 6 01:22:09.001148 kernel: audit: type=1130 audit(1757121728.973:1502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.41:22-10.200.16.10:60826 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:08.973000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.41:22-10.200.16.10:60826 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:09.387000 audit[5862]: USER_ACCT pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:09.389787 sshd[5862]: Accepted publickey for core from 10.200.16.10 port 60826 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:22:09.390271 sshd[5862]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:22:09.388000 audit[5862]: CRED_ACQ pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:09.436276 kernel: audit: type=1101 audit(1757121729.387:1503): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:09.436408 kernel: audit: type=1103 audit(1757121729.388:1504): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:09.450880 kernel: audit: type=1006 audit(1757121729.388:1505): pid=5862 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Sep 6 01:22:09.388000 audit[5862]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc9833930 a2=3 a3=1 items=0 ppid=1 pid=5862 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:09.476280 kernel: audit: type=1300 audit(1757121729.388:1505): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc9833930 a2=3 a3=1 items=0 ppid=1 pid=5862 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:09.388000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:22:09.485200 kernel: audit: type=1327 audit(1757121729.388:1505): proctitle=737368643A20636F7265205B707269765D Sep 6 01:22:09.486246 systemd-logind[1438]: New session 16 of user core. Sep 6 01:22:09.486571 systemd[1]: Started session-16.scope. Sep 6 01:22:09.491000 audit[5862]: USER_START pid=5862 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:09.493000 audit[5864]: CRED_ACQ pid=5864 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:09.542416 kernel: audit: type=1105 audit(1757121729.491:1506): pid=5862 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:09.542538 kernel: audit: type=1103 audit(1757121729.493:1507): pid=5864 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:09.831009 sshd[5862]: pam_unix(sshd:session): session closed for user core Sep 6 01:22:09.831000 audit[5862]: USER_END pid=5862 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:09.834835 systemd[1]: sshd@13-10.200.20.41:22-10.200.16.10:60826.service: Deactivated successfully. Sep 6 01:22:09.835708 systemd[1]: session-16.scope: Deactivated successfully. Sep 6 01:22:09.832000 audit[5862]: CRED_DISP pid=5862 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:09.879963 kernel: audit: type=1106 audit(1757121729.831:1508): pid=5862 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:09.880095 kernel: audit: type=1104 audit(1757121729.832:1509): pid=5862 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:09.880327 systemd-logind[1438]: Session 16 logged out. Waiting for processes to exit. Sep 6 01:22:09.834000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.41:22-10.200.16.10:60826 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:09.881407 systemd-logind[1438]: Removed session 16. Sep 6 01:22:12.948000 audit[4760]: AVC avc: denied { watch } for pid=4760 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_01_19_53.4025312255/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c54,c756 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c54,c756 tclass=file permissive=0 Sep 6 01:22:12.948000 audit[4760]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40026a8de0 a2=fc6 a3=0 items=0 ppid=3891 pid=4760 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c54,c756 key=(null) Sep 6 01:22:12.948000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 01:22:13.400000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:13.400000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7a a1=400e6ffde0 a2=fc6 a3=0 items=0 ppid=2166 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 key=(null) Sep 6 01:22:13.400000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:22:13.400000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:13.400000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7b a1=400ada56e0 a2=fc6 a3=0 items=0 ppid=2166 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 key=(null) Sep 6 01:22:13.400000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:22:13.403000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:13.403000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7a a1=400ada5770 a2=fc6 a3=0 items=0 ppid=2166 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 key=(null) Sep 6 01:22:13.403000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:22:13.456000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:13.456000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7a a1=400afaadb0 a2=fc6 a3=0 items=0 ppid=2166 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 key=(null) Sep 6 01:22:13.456000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:22:13.564000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:13.564000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:13.564000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7b a1=400afaaff0 a2=fc6 a3=0 items=0 ppid=2166 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 key=(null) Sep 6 01:22:13.564000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:22:13.564000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7a a1=400f048a20 a2=fc6 a3=0 items=0 ppid=2166 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c891 key=(null) Sep 6 01:22:13.564000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:22:13.971000 audit[2247]: AVC avc: denied { watch } for pid=2247 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:13.971000 audit[2247]: AVC avc: denied { watch } for pid=2247 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:13.971000 audit[2247]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40027d2ee0 a2=fc6 a3=0 items=0 ppid=2108 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 key=(null) Sep 6 01:22:13.971000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:22:13.971000 audit[2247]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40010432f0 a2=fc6 a3=0 items=0 ppid=2108 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 key=(null) Sep 6 01:22:13.971000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:22:14.913000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.41:22-10.200.16.10:39598 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:14.914150 systemd[1]: Started sshd@14-10.200.20.41:22-10.200.16.10:39598.service. Sep 6 01:22:14.919393 kernel: kauditd_printk_skb: 28 callbacks suppressed Sep 6 01:22:14.919511 kernel: audit: type=1130 audit(1757121734.913:1520): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.41:22-10.200.16.10:39598 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:15.392472 sshd[5874]: Accepted publickey for core from 10.200.16.10 port 39598 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:22:15.391000 audit[5874]: USER_ACCT pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:15.417000 audit[5874]: CRED_ACQ pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:15.418840 kernel: audit: type=1101 audit(1757121735.391:1521): pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:15.418916 sshd[5874]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:22:15.461360 kernel: audit: type=1103 audit(1757121735.417:1522): pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:15.461513 kernel: audit: type=1006 audit(1757121735.417:1523): pid=5874 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Sep 6 01:22:15.417000 audit[5874]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffecb739b0 a2=3 a3=1 items=0 ppid=1 pid=5874 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:15.489087 kernel: audit: type=1300 audit(1757121735.417:1523): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffecb739b0 a2=3 a3=1 items=0 ppid=1 pid=5874 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:15.417000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:22:15.498536 kernel: audit: type=1327 audit(1757121735.417:1523): proctitle=737368643A20636F7265205B707269765D Sep 6 01:22:15.503215 systemd-logind[1438]: New session 17 of user core. Sep 6 01:22:15.503998 systemd[1]: Started session-17.scope. Sep 6 01:22:15.509000 audit[5874]: USER_START pid=5874 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:15.540000 audit[5876]: CRED_ACQ pid=5876 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:15.566646 kernel: audit: type=1105 audit(1757121735.509:1524): pid=5874 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:15.566876 kernel: audit: type=1103 audit(1757121735.540:1525): pid=5876 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:15.898563 sshd[5874]: pam_unix(sshd:session): session closed for user core Sep 6 01:22:15.898000 audit[5874]: USER_END pid=5874 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:15.902482 systemd[1]: session-17.scope: Deactivated successfully. Sep 6 01:22:15.903291 systemd[1]: sshd@14-10.200.20.41:22-10.200.16.10:39598.service: Deactivated successfully. Sep 6 01:22:15.900000 audit[5874]: CRED_DISP pid=5874 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:15.948043 kernel: audit: type=1106 audit(1757121735.898:1526): pid=5874 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:15.948197 kernel: audit: type=1104 audit(1757121735.900:1527): pid=5874 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:15.902000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.41:22-10.200.16.10:39598 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:15.948315 systemd-logind[1438]: Session 17 logged out. Waiting for processes to exit. Sep 6 01:22:15.949148 systemd-logind[1438]: Removed session 17. Sep 6 01:22:17.340000 audit[2247]: AVC avc: denied { watch } for pid=2247 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:17.340000 audit[2247]: AVC avc: denied { watch } for pid=2247 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:17.340000 audit[2247]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40027d2fc0 a2=fc6 a3=0 items=0 ppid=2108 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 key=(null) Sep 6 01:22:17.340000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:22:17.340000 audit[2247]: AVC avc: denied { watch } for pid=2247 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:17.340000 audit[2247]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40027d3000 a2=fc6 a3=0 items=0 ppid=2108 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 key=(null) Sep 6 01:22:17.340000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:22:17.340000 audit[2247]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400146c600 a2=fc6 a3=0 items=0 ppid=2108 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 key=(null) Sep 6 01:22:17.340000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:22:17.341000 audit[2247]: AVC avc: denied { watch } for pid=2247 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:17.341000 audit[2247]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400146c680 a2=fc6 a3=0 items=0 ppid=2108 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c806,c994 key=(null) Sep 6 01:22:17.341000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:22:17.901552 systemd[1]: run-containerd-runc-k8s.io-6ff4a978538971429ef0a1549370698ae3f6d7fa91cf3d17a01ad95f2ac53ca8-runc.4MW12p.mount: Deactivated successfully. Sep 6 01:22:20.962121 systemd[1]: Started sshd@15-10.200.20.41:22-10.200.16.10:49930.service. Sep 6 01:22:20.961000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.41:22-10.200.16.10:49930 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:20.967194 kernel: kauditd_printk_skb: 13 callbacks suppressed Sep 6 01:22:20.967332 kernel: audit: type=1130 audit(1757121740.961:1533): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.41:22-10.200.16.10:49930 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:21.398000 audit[5924]: USER_ACCT pid=5924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:21.399705 sshd[5924]: Accepted publickey for core from 10.200.16.10 port 49930 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:22:21.401638 sshd[5924]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:22:21.400000 audit[5924]: CRED_ACQ pid=5924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:21.445783 kernel: audit: type=1101 audit(1757121741.398:1534): pid=5924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:21.445916 kernel: audit: type=1103 audit(1757121741.400:1535): pid=5924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:21.449890 systemd[1]: Started session-18.scope. Sep 6 01:22:21.450436 systemd-logind[1438]: New session 18 of user core. Sep 6 01:22:21.460238 kernel: audit: type=1006 audit(1757121741.400:1536): pid=5924 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Sep 6 01:22:21.400000 audit[5924]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcddb69a0 a2=3 a3=1 items=0 ppid=1 pid=5924 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:21.484190 kernel: audit: type=1300 audit(1757121741.400:1536): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcddb69a0 a2=3 a3=1 items=0 ppid=1 pid=5924 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:21.484864 kernel: audit: type=1327 audit(1757121741.400:1536): proctitle=737368643A20636F7265205B707269765D Sep 6 01:22:21.400000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:22:21.454000 audit[5924]: USER_START pid=5924 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:21.519470 kernel: audit: type=1105 audit(1757121741.454:1537): pid=5924 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:21.456000 audit[5926]: CRED_ACQ pid=5926 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:21.541688 kernel: audit: type=1103 audit(1757121741.456:1538): pid=5926 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:21.821519 sshd[5924]: pam_unix(sshd:session): session closed for user core Sep 6 01:22:21.821000 audit[5924]: USER_END pid=5924 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:21.824632 systemd[1]: session-18.scope: Deactivated successfully. Sep 6 01:22:21.825578 systemd[1]: sshd@15-10.200.20.41:22-10.200.16.10:49930.service: Deactivated successfully. Sep 6 01:22:21.821000 audit[5924]: CRED_DISP pid=5924 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:21.850440 systemd-logind[1438]: Session 18 logged out. Waiting for processes to exit. Sep 6 01:22:21.851451 systemd-logind[1438]: Removed session 18. Sep 6 01:22:21.870634 kernel: audit: type=1106 audit(1757121741.821:1539): pid=5924 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:21.870756 kernel: audit: type=1104 audit(1757121741.821:1540): pid=5924 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:21.825000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.41:22-10.200.16.10:49930 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:23.417000 audit[5319]: AVC avc: denied { watch } for pid=5319 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_01_19_53.1656245987/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c441,c963 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c441,c963 tclass=file permissive=0 Sep 6 01:22:23.417000 audit[5319]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400165b020 a2=fc6 a3=0 items=0 ppid=4609 pid=5319 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c441,c963 key=(null) Sep 6 01:22:23.417000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 01:22:26.897000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.41:22-10.200.16.10:49942 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:26.897916 systemd[1]: Started sshd@16-10.200.20.41:22-10.200.16.10:49942.service. Sep 6 01:22:26.903725 kernel: kauditd_printk_skb: 4 callbacks suppressed Sep 6 01:22:26.903872 kernel: audit: type=1130 audit(1757121746.897:1543): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.41:22-10.200.16.10:49942 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:27.379000 audit[5979]: USER_ACCT pid=5979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:27.380487 sshd[5979]: Accepted publickey for core from 10.200.16.10 port 49942 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:22:27.382394 sshd[5979]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:22:27.381000 audit[5979]: CRED_ACQ pid=5979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:27.426336 kernel: audit: type=1101 audit(1757121747.379:1544): pid=5979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:27.426513 kernel: audit: type=1103 audit(1757121747.381:1545): pid=5979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:27.426896 kernel: audit: type=1006 audit(1757121747.381:1546): pid=5979 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Sep 6 01:22:27.381000 audit[5979]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff730c6a0 a2=3 a3=1 items=0 ppid=1 pid=5979 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:27.443819 systemd[1]: Started session-19.scope. Sep 6 01:22:27.444867 systemd-logind[1438]: New session 19 of user core. Sep 6 01:22:27.464467 kernel: audit: type=1300 audit(1757121747.381:1546): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff730c6a0 a2=3 a3=1 items=0 ppid=1 pid=5979 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:27.381000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:22:27.473189 kernel: audit: type=1327 audit(1757121747.381:1546): proctitle=737368643A20636F7265205B707269765D Sep 6 01:22:27.473354 kernel: audit: type=1105 audit(1757121747.450:1547): pid=5979 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:27.450000 audit[5979]: USER_START pid=5979 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:27.451000 audit[5981]: CRED_ACQ pid=5981 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:27.522235 kernel: audit: type=1103 audit(1757121747.451:1548): pid=5981 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:27.807455 sshd[5979]: pam_unix(sshd:session): session closed for user core Sep 6 01:22:27.807000 audit[5979]: USER_END pid=5979 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:27.810273 systemd-logind[1438]: Session 19 logged out. Waiting for processes to exit. Sep 6 01:22:27.812111 systemd[1]: sshd@16-10.200.20.41:22-10.200.16.10:49942.service: Deactivated successfully. Sep 6 01:22:27.812974 systemd[1]: session-19.scope: Deactivated successfully. Sep 6 01:22:27.815005 systemd-logind[1438]: Removed session 19. Sep 6 01:22:27.807000 audit[5979]: CRED_DISP pid=5979 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:27.860211 kernel: audit: type=1106 audit(1757121747.807:1549): pid=5979 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:27.860330 kernel: audit: type=1104 audit(1757121747.807:1550): pid=5979 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:27.811000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.41:22-10.200.16.10:49942 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:27.885269 systemd[1]: Started sshd@17-10.200.20.41:22-10.200.16.10:49950.service. Sep 6 01:22:27.884000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.41:22-10.200.16.10:49950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:28.333000 audit[5991]: USER_ACCT pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:28.334363 sshd[5991]: Accepted publickey for core from 10.200.16.10 port 49950 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:22:28.334000 audit[5991]: CRED_ACQ pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:28.334000 audit[5991]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1561dd0 a2=3 a3=1 items=0 ppid=1 pid=5991 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:28.334000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:22:28.336085 sshd[5991]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:22:28.340738 systemd[1]: Started session-20.scope. Sep 6 01:22:28.342000 systemd-logind[1438]: New session 20 of user core. Sep 6 01:22:28.346000 audit[5991]: USER_START pid=5991 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:28.347000 audit[5993]: CRED_ACQ pid=5993 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:28.881728 sshd[5991]: pam_unix(sshd:session): session closed for user core Sep 6 01:22:28.882000 audit[5991]: USER_END pid=5991 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:28.882000 audit[5991]: CRED_DISP pid=5991 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:28.884000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.41:22-10.200.16.10:49950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:28.885253 systemd[1]: sshd@17-10.200.20.41:22-10.200.16.10:49950.service: Deactivated successfully. Sep 6 01:22:28.886094 systemd[1]: session-20.scope: Deactivated successfully. Sep 6 01:22:28.887005 systemd-logind[1438]: Session 20 logged out. Waiting for processes to exit. Sep 6 01:22:28.888256 systemd-logind[1438]: Removed session 20. Sep 6 01:22:28.952181 systemd[1]: Started sshd@18-10.200.20.41:22-10.200.16.10:49958.service. Sep 6 01:22:28.951000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.41:22-10.200.16.10:49958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:29.369000 audit[6001]: USER_ACCT pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:29.370842 sshd[6001]: Accepted publickey for core from 10.200.16.10 port 49958 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:22:29.371000 audit[6001]: CRED_ACQ pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:29.371000 audit[6001]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff80f3e20 a2=3 a3=1 items=0 ppid=1 pid=6001 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:29.371000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:22:29.372569 sshd[6001]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:22:29.377324 systemd[1]: Started session-21.scope. Sep 6 01:22:29.377653 systemd-logind[1438]: New session 21 of user core. Sep 6 01:22:29.381000 audit[6001]: USER_START pid=6001 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:29.382000 audit[6003]: CRED_ACQ pid=6003 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:30.202000 audit[6014]: NETFILTER_CFG table=filter:131 family=2 entries=20 op=nft_register_rule pid=6014 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:30.202000 audit[6014]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffc79e1cc0 a2=0 a3=1 items=0 ppid=2565 pid=6014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:30.202000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:30.212000 audit[6014]: NETFILTER_CFG table=nat:132 family=2 entries=26 op=nft_register_rule pid=6014 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:30.212000 audit[6014]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffc79e1cc0 a2=0 a3=1 items=0 ppid=2565 pid=6014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:30.212000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:30.227000 audit[6016]: NETFILTER_CFG table=filter:133 family=2 entries=32 op=nft_register_rule pid=6016 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:30.227000 audit[6016]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=fffff51caa90 a2=0 a3=1 items=0 ppid=2565 pid=6016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:30.227000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:30.233000 audit[6016]: NETFILTER_CFG table=nat:134 family=2 entries=26 op=nft_register_rule pid=6016 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:30.233000 audit[6016]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=fffff51caa90 a2=0 a3=1 items=0 ppid=2565 pid=6016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:30.233000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:30.296209 sshd[6001]: pam_unix(sshd:session): session closed for user core Sep 6 01:22:30.296000 audit[6001]: USER_END pid=6001 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:30.296000 audit[6001]: CRED_DISP pid=6001 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:30.298000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.41:22-10.200.16.10:49958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:30.299476 systemd[1]: sshd@18-10.200.20.41:22-10.200.16.10:49958.service: Deactivated successfully. Sep 6 01:22:30.300344 systemd[1]: session-21.scope: Deactivated successfully. Sep 6 01:22:30.301683 systemd-logind[1438]: Session 21 logged out. Waiting for processes to exit. Sep 6 01:22:30.303278 systemd-logind[1438]: Removed session 21. Sep 6 01:22:30.367107 systemd[1]: Started sshd@19-10.200.20.41:22-10.200.16.10:33126.service. Sep 6 01:22:30.366000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.41:22-10.200.16.10:33126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:30.776000 audit[6019]: USER_ACCT pid=6019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:30.777796 sshd[6019]: Accepted publickey for core from 10.200.16.10 port 33126 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:22:30.778000 audit[6019]: CRED_ACQ pid=6019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:30.778000 audit[6019]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd8239800 a2=3 a3=1 items=0 ppid=1 pid=6019 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:30.778000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:22:30.779527 sshd[6019]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:22:30.784164 systemd[1]: Started session-22.scope. Sep 6 01:22:30.785649 systemd-logind[1438]: New session 22 of user core. Sep 6 01:22:30.789000 audit[6019]: USER_START pid=6019 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:30.790000 audit[6021]: CRED_ACQ pid=6021 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:31.286015 sshd[6019]: pam_unix(sshd:session): session closed for user core Sep 6 01:22:31.286000 audit[6019]: USER_END pid=6019 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:31.286000 audit[6019]: CRED_DISP pid=6019 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:31.288885 systemd[1]: sshd@19-10.200.20.41:22-10.200.16.10:33126.service: Deactivated successfully. Sep 6 01:22:31.288000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.41:22-10.200.16.10:33126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:31.289828 systemd[1]: session-22.scope: Deactivated successfully. Sep 6 01:22:31.290391 systemd-logind[1438]: Session 22 logged out. Waiting for processes to exit. Sep 6 01:22:31.291382 systemd-logind[1438]: Removed session 22. Sep 6 01:22:31.353927 systemd[1]: Started sshd@20-10.200.20.41:22-10.200.16.10:33132.service. Sep 6 01:22:31.353000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.41:22-10.200.16.10:33132 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:31.768543 sshd[6028]: Accepted publickey for core from 10.200.16.10 port 33132 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:22:31.767000 audit[6028]: USER_ACCT pid=6028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:31.768000 audit[6028]: CRED_ACQ pid=6028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:31.768000 audit[6028]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffed3d8f30 a2=3 a3=1 items=0 ppid=1 pid=6028 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:31.768000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:22:31.770022 sshd[6028]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:22:31.774623 systemd-logind[1438]: New session 23 of user core. Sep 6 01:22:31.775163 systemd[1]: Started session-23.scope. Sep 6 01:22:31.779000 audit[6028]: USER_START pid=6028 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:31.780000 audit[6031]: CRED_ACQ pid=6031 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:32.158637 sshd[6028]: pam_unix(sshd:session): session closed for user core Sep 6 01:22:32.159000 audit[6028]: USER_END pid=6028 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:32.165586 kernel: kauditd_printk_skb: 54 callbacks suppressed Sep 6 01:22:32.165643 kernel: audit: type=1106 audit(1757121752.159:1589): pid=6028 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:32.163494 systemd[1]: session-23.scope: Deactivated successfully. Sep 6 01:22:32.164351 systemd[1]: sshd@20-10.200.20.41:22-10.200.16.10:33132.service: Deactivated successfully. Sep 6 01:22:32.167060 systemd-logind[1438]: Session 23 logged out. Waiting for processes to exit. Sep 6 01:22:32.168144 systemd-logind[1438]: Removed session 23. Sep 6 01:22:32.161000 audit[6028]: CRED_DISP pid=6028 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:32.213786 kernel: audit: type=1104 audit(1757121752.161:1590): pid=6028 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:32.213918 kernel: audit: type=1131 audit(1757121752.163:1591): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.41:22-10.200.16.10:33132 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:32.163000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.41:22-10.200.16.10:33132 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:37.235466 systemd[1]: Started sshd@21-10.200.20.41:22-10.200.16.10:33144.service. Sep 6 01:22:37.234000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.41:22-10.200.16.10:33144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:37.258778 kernel: audit: type=1130 audit(1757121757.234:1592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.41:22-10.200.16.10:33144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:37.562000 audit[6064]: NETFILTER_CFG table=filter:135 family=2 entries=20 op=nft_register_rule pid=6064 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:37.562000 audit[6064]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=fffffa7cc7a0 a2=0 a3=1 items=0 ppid=2565 pid=6064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:37.604161 kernel: audit: type=1325 audit(1757121757.562:1593): table=filter:135 family=2 entries=20 op=nft_register_rule pid=6064 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:37.604305 kernel: audit: type=1300 audit(1757121757.562:1593): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=fffffa7cc7a0 a2=0 a3=1 items=0 ppid=2565 pid=6064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:37.562000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:37.621789 kernel: audit: type=1327 audit(1757121757.562:1593): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:37.607000 audit[6064]: NETFILTER_CFG table=nat:136 family=2 entries=110 op=nft_register_chain pid=6064 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:37.636046 kernel: audit: type=1325 audit(1757121757.607:1594): table=nat:136 family=2 entries=110 op=nft_register_chain pid=6064 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:37.607000 audit[6064]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=fffffa7cc7a0 a2=0 a3=1 items=0 ppid=2565 pid=6064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:37.663271 kernel: audit: type=1300 audit(1757121757.607:1594): arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=fffffa7cc7a0 a2=0 a3=1 items=0 ppid=2565 pid=6064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:37.607000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:37.678042 kernel: audit: type=1327 audit(1757121757.607:1594): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:37.683000 audit[6061]: USER_ACCT pid=6061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:37.686067 sshd[6061]: Accepted publickey for core from 10.200.16.10 port 33144 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:22:37.710859 kernel: audit: type=1101 audit(1757121757.683:1595): pid=6061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:37.710972 kernel: audit: type=1103 audit(1757121757.709:1596): pid=6061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:37.709000 audit[6061]: CRED_ACQ pid=6061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:37.711548 sshd[6061]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:22:37.747783 kernel: audit: type=1006 audit(1757121757.710:1597): pid=6061 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Sep 6 01:22:37.710000 audit[6061]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc499d4b0 a2=3 a3=1 items=0 ppid=1 pid=6061 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:37.710000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:22:37.753975 systemd[1]: Started session-24.scope. Sep 6 01:22:37.754549 systemd-logind[1438]: New session 24 of user core. Sep 6 01:22:37.760000 audit[6061]: USER_START pid=6061 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:37.761000 audit[6065]: CRED_ACQ pid=6065 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:38.112696 sshd[6061]: pam_unix(sshd:session): session closed for user core Sep 6 01:22:38.113000 audit[6061]: USER_END pid=6061 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:38.113000 audit[6061]: CRED_DISP pid=6061 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:38.115790 systemd[1]: session-24.scope: Deactivated successfully. Sep 6 01:22:38.116468 systemd-logind[1438]: Session 24 logged out. Waiting for processes to exit. Sep 6 01:22:38.116591 systemd[1]: sshd@21-10.200.20.41:22-10.200.16.10:33144.service: Deactivated successfully. Sep 6 01:22:38.116000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.41:22-10.200.16.10:33144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:38.117897 systemd-logind[1438]: Removed session 24. Sep 6 01:22:43.199601 systemd[1]: Started sshd@22-10.200.20.41:22-10.200.16.10:60496.service. Sep 6 01:22:43.231975 kernel: kauditd_printk_skb: 7 callbacks suppressed Sep 6 01:22:43.232116 kernel: audit: type=1130 audit(1757121763.204:1603): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.41:22-10.200.16.10:60496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:43.204000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.41:22-10.200.16.10:60496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:43.650010 sshd[6075]: Accepted publickey for core from 10.200.16.10 port 60496 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:22:43.648000 audit[6075]: USER_ACCT pid=6075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:43.677095 sshd[6075]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:22:43.675000 audit[6075]: CRED_ACQ pid=6075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:43.701882 kernel: audit: type=1101 audit(1757121763.648:1604): pid=6075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:43.702035 kernel: audit: type=1103 audit(1757121763.675:1605): pid=6075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:43.719762 kernel: audit: type=1006 audit(1757121763.675:1606): pid=6075 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Sep 6 01:22:43.675000 audit[6075]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffffb13570 a2=3 a3=1 items=0 ppid=1 pid=6075 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:43.747149 kernel: audit: type=1300 audit(1757121763.675:1606): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffffb13570 a2=3 a3=1 items=0 ppid=1 pid=6075 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:43.675000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:22:43.756537 kernel: audit: type=1327 audit(1757121763.675:1606): proctitle=737368643A20636F7265205B707269765D Sep 6 01:22:43.759421 systemd-logind[1438]: New session 25 of user core. Sep 6 01:22:43.759935 systemd[1]: Started session-25.scope. Sep 6 01:22:43.763000 audit[6075]: USER_START pid=6075 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:43.791000 audit[6077]: CRED_ACQ pid=6077 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:43.816239 kernel: audit: type=1105 audit(1757121763.763:1607): pid=6075 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:43.816429 kernel: audit: type=1103 audit(1757121763.791:1608): pid=6077 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:44.136258 sshd[6075]: pam_unix(sshd:session): session closed for user core Sep 6 01:22:44.137000 audit[6075]: USER_END pid=6075 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:44.140137 systemd[1]: sshd@22-10.200.20.41:22-10.200.16.10:60496.service: Deactivated successfully. Sep 6 01:22:44.140990 systemd[1]: session-25.scope: Deactivated successfully. Sep 6 01:22:44.166423 systemd-logind[1438]: Session 25 logged out. Waiting for processes to exit. Sep 6 01:22:44.167269 systemd-logind[1438]: Removed session 25. Sep 6 01:22:44.137000 audit[6075]: CRED_DISP pid=6075 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:44.191367 kernel: audit: type=1106 audit(1757121764.137:1609): pid=6075 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:44.191505 kernel: audit: type=1104 audit(1757121764.137:1610): pid=6075 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:44.139000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.41:22-10.200.16.10:60496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:47.909670 systemd[1]: run-containerd-runc-k8s.io-6ff4a978538971429ef0a1549370698ae3f6d7fa91cf3d17a01ad95f2ac53ca8-runc.3VlG8p.mount: Deactivated successfully. Sep 6 01:22:49.206080 systemd[1]: Started sshd@23-10.200.20.41:22-10.200.16.10:60504.service. Sep 6 01:22:49.204000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.41:22-10.200.16.10:60504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:49.212101 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 01:22:49.212260 kernel: audit: type=1130 audit(1757121769.204:1612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.41:22-10.200.16.10:60504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:49.648000 audit[6110]: USER_ACCT pid=6110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:49.651542 sshd[6110]: Accepted publickey for core from 10.200.16.10 port 60504 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:22:49.674690 sshd[6110]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:22:49.673000 audit[6110]: CRED_ACQ pid=6110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:49.697206 kernel: audit: type=1101 audit(1757121769.648:1613): pid=6110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:49.697362 kernel: audit: type=1103 audit(1757121769.673:1614): pid=6110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:49.715684 kernel: audit: type=1006 audit(1757121769.673:1615): pid=6110 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Sep 6 01:22:49.673000 audit[6110]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe74f4250 a2=3 a3=1 items=0 ppid=1 pid=6110 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:49.740417 kernel: audit: type=1300 audit(1757121769.673:1615): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe74f4250 a2=3 a3=1 items=0 ppid=1 pid=6110 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:49.749806 kernel: audit: type=1327 audit(1757121769.673:1615): proctitle=737368643A20636F7265205B707269765D Sep 6 01:22:49.673000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:22:49.749628 systemd-logind[1438]: New session 26 of user core. Sep 6 01:22:49.750271 systemd[1]: Started session-26.scope. Sep 6 01:22:49.755000 audit[6110]: USER_START pid=6110 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:49.757000 audit[6112]: CRED_ACQ pid=6112 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:49.806652 kernel: audit: type=1105 audit(1757121769.755:1616): pid=6110 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:49.806805 kernel: audit: type=1103 audit(1757121769.757:1617): pid=6112 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:50.103188 sshd[6110]: pam_unix(sshd:session): session closed for user core Sep 6 01:22:50.103000 audit[6110]: USER_END pid=6110 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:50.103000 audit[6110]: CRED_DISP pid=6110 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:50.132765 kernel: audit: type=1106 audit(1757121770.103:1618): pid=6110 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:50.132770 systemd[1]: sshd@23-10.200.20.41:22-10.200.16.10:60504.service: Deactivated successfully. Sep 6 01:22:50.133596 systemd[1]: session-26.scope: Deactivated successfully. Sep 6 01:22:50.134071 systemd-logind[1438]: Session 26 logged out. Waiting for processes to exit. Sep 6 01:22:50.131000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.41:22-10.200.16.10:60504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:50.156689 systemd-logind[1438]: Removed session 26. Sep 6 01:22:50.156842 kernel: audit: type=1104 audit(1757121770.103:1619): pid=6110 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:54.554838 systemd[1]: run-containerd-runc-k8s.io-15875a4f7980f1683e7b0d9ef9fe997f323986639b6eedbe15dfc0963ef69781-runc.hiv2k1.mount: Deactivated successfully. Sep 6 01:22:55.181363 systemd[1]: Started sshd@24-10.200.20.41:22-10.200.16.10:37134.service. Sep 6 01:22:55.209350 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 01:22:55.209474 kernel: audit: type=1130 audit(1757121775.180:1621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.41:22-10.200.16.10:37134 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:55.180000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.41:22-10.200.16.10:37134 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:55.630000 audit[6152]: USER_ACCT pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:55.634010 sshd[6152]: Accepted publickey for core from 10.200.16.10 port 37134 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:22:55.658636 sshd[6152]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:22:55.661154 kernel: audit: type=1101 audit(1757121775.630:1622): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:55.657000 audit[6152]: CRED_ACQ pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:55.665085 systemd[1]: Started session-27.scope. Sep 6 01:22:55.666260 systemd-logind[1438]: New session 27 of user core. Sep 6 01:22:55.705781 kernel: audit: type=1103 audit(1757121775.657:1623): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:55.706327 kernel: audit: type=1006 audit(1757121775.657:1624): pid=6152 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Sep 6 01:22:55.706377 kernel: audit: type=1300 audit(1757121775.657:1624): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd6a36460 a2=3 a3=1 items=0 ppid=1 pid=6152 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:55.657000 audit[6152]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd6a36460 a2=3 a3=1 items=0 ppid=1 pid=6152 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:55.657000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:22:55.738299 kernel: audit: type=1327 audit(1757121775.657:1624): proctitle=737368643A20636F7265205B707269765D Sep 6 01:22:55.667000 audit[6152]: USER_START pid=6152 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:55.667000 audit[6154]: CRED_ACQ pid=6154 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:55.765886 kernel: audit: type=1105 audit(1757121775.667:1625): pid=6152 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:55.788835 kernel: audit: type=1103 audit(1757121775.667:1626): pid=6154 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:56.049703 sshd[6152]: pam_unix(sshd:session): session closed for user core Sep 6 01:22:56.048000 audit[6152]: USER_END pid=6152 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:56.048000 audit[6152]: CRED_DISP pid=6152 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:56.078828 systemd[1]: sshd@24-10.200.20.41:22-10.200.16.10:37134.service: Deactivated successfully. Sep 6 01:22:56.079691 systemd[1]: session-27.scope: Deactivated successfully. Sep 6 01:22:56.103140 kernel: audit: type=1106 audit(1757121776.048:1627): pid=6152 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:56.103289 kernel: audit: type=1104 audit(1757121776.048:1628): pid=6152 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:56.103316 systemd-logind[1438]: Session 27 logged out. Waiting for processes to exit. Sep 6 01:22:56.077000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.41:22-10.200.16.10:37134 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:56.104360 systemd-logind[1438]: Removed session 27. Sep 6 01:23:01.120535 systemd[1]: Started sshd@25-10.200.20.41:22-10.200.16.10:54872.service. Sep 6 01:23:01.152036 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 01:23:01.152113 kernel: audit: type=1130 audit(1757121781.118:1630): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.41:22-10.200.16.10:54872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:23:01.118000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.41:22-10.200.16.10:54872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:23:01.530000 audit[6167]: USER_ACCT pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:23:01.532713 sshd[6167]: Accepted publickey for core from 10.200.16.10 port 54872 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:23:01.556830 kernel: audit: type=1101 audit(1757121781.530:1631): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:23:01.555000 audit[6167]: CRED_ACQ pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:23:01.557719 sshd[6167]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:23:01.595275 kernel: audit: type=1103 audit(1757121781.555:1632): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:23:01.595403 kernel: audit: type=1006 audit(1757121781.555:1633): pid=6167 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Sep 6 01:23:01.555000 audit[6167]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffda75a890 a2=3 a3=1 items=0 ppid=1 pid=6167 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:01.621749 kernel: audit: type=1300 audit(1757121781.555:1633): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffda75a890 a2=3 a3=1 items=0 ppid=1 pid=6167 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:01.623369 systemd[1]: Started session-28.scope. Sep 6 01:23:01.624876 systemd-logind[1438]: New session 28 of user core. Sep 6 01:23:01.555000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:23:01.634067 kernel: audit: type=1327 audit(1757121781.555:1633): proctitle=737368643A20636F7265205B707269765D Sep 6 01:23:01.637000 audit[6167]: USER_START pid=6167 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:23:01.664000 audit[6170]: CRED_ACQ pid=6170 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:23:01.690121 kernel: audit: type=1105 audit(1757121781.637:1634): pid=6167 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:23:01.690240 kernel: audit: type=1103 audit(1757121781.664:1635): pid=6170 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:23:01.982803 sshd[6167]: pam_unix(sshd:session): session closed for user core Sep 6 01:23:01.982000 audit[6167]: USER_END pid=6167 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:23:01.983000 audit[6167]: CRED_DISP pid=6167 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:23:02.033107 kernel: audit: type=1106 audit(1757121781.982:1636): pid=6167 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:23:02.033242 kernel: audit: type=1104 audit(1757121781.983:1637): pid=6167 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:23:02.012224 systemd[1]: sshd@25-10.200.20.41:22-10.200.16.10:54872.service: Deactivated successfully. Sep 6 01:23:02.013125 systemd[1]: session-28.scope: Deactivated successfully. Sep 6 01:23:02.034031 systemd-logind[1438]: Session 28 logged out. Waiting for processes to exit. Sep 6 01:23:02.009000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.41:22-10.200.16.10:54872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:23:02.034964 systemd-logind[1438]: Removed session 28. Sep 6 01:23:07.056000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.41:22-10.200.16.10:54880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:23:07.058499 systemd[1]: Started sshd@26-10.200.20.41:22-10.200.16.10:54880.service. Sep 6 01:23:07.065195 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 01:23:07.065324 kernel: audit: type=1130 audit(1757121787.056:1639): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.41:22-10.200.16.10:54880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:23:07.536000 audit[6200]: USER_ACCT pid=6200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:23:07.538610 sshd[6200]: Accepted publickey for core from 10.200.16.10 port 54880 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:23:07.562795 kernel: audit: type=1101 audit(1757121787.536:1640): pid=6200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:23:07.561000 audit[6200]: CRED_ACQ pid=6200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:23:07.563865 sshd[6200]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:23:07.599520 kernel: audit: type=1103 audit(1757121787.561:1641): pid=6200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:23:07.599690 kernel: audit: type=1006 audit(1757121787.561:1642): pid=6200 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 Sep 6 01:23:07.561000 audit[6200]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdcbb01a0 a2=3 a3=1 items=0 ppid=1 pid=6200 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:07.603805 systemd-logind[1438]: New session 29 of user core. Sep 6 01:23:07.604820 systemd[1]: Started session-29.scope. Sep 6 01:23:07.624506 kernel: audit: type=1300 audit(1757121787.561:1642): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdcbb01a0 a2=3 a3=1 items=0 ppid=1 pid=6200 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:07.561000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:23:07.633458 kernel: audit: type=1327 audit(1757121787.561:1642): proctitle=737368643A20636F7265205B707269765D Sep 6 01:23:07.624000 audit[6200]: USER_START pid=6200 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:23:07.659277 kernel: audit: type=1105 audit(1757121787.624:1643): pid=6200 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:23:07.632000 audit[6202]: CRED_ACQ pid=6202 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:23:07.681294 kernel: audit: type=1103 audit(1757121787.632:1644): pid=6202 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:23:07.950856 sshd[6200]: pam_unix(sshd:session): session closed for user core Sep 6 01:23:07.950000 audit[6200]: USER_END pid=6200 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:23:07.954957 systemd-logind[1438]: Session 29 logged out. Waiting for processes to exit. Sep 6 01:23:07.956297 systemd[1]: session-29.scope: Deactivated successfully. Sep 6 01:23:07.957673 systemd-logind[1438]: Removed session 29. Sep 6 01:23:07.958467 systemd[1]: sshd@26-10.200.20.41:22-10.200.16.10:54880.service: Deactivated successfully. Sep 6 01:23:07.950000 audit[6200]: CRED_DISP pid=6200 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:23:08.001825 kernel: audit: type=1106 audit(1757121787.950:1645): pid=6200 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:23:08.001953 kernel: audit: type=1104 audit(1757121787.950:1646): pid=6200 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:23:07.956000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.41:22-10.200.16.10:54880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'